VendoPad Privacy Policy

A. Who we are

VendoPad is a business management application for vendors, shop owners, artisans and car dealers in Nigeria.

• Legal entity: [To be completed before launch]
• Registered address: [To be completed before launch]
• Contact: [To be completed before launch]

B. Information we collect

Account information

• Owner/full name
• Email address
• Phone number
• Authentication identifiers created when you sign up with email and password or with Google sign-in
• Identity details and identity document uploads you provide during merchant verification

Business information

• Business name and business type
• Business address, city, state and neighbourhood
• Phone and WhatsApp numbers
• Business logo
• Public Directory profile information, including public description and services, where you provide it

Business operational data you enter

• Products, stock levels, restocks and stock losses
• Vehicle records and vehicle inventory details
• Sales, vehicle sales, receipts and invoices
• Customers and the customer details you record
• Customer debts, instalments and payments
• Expenses
• Reports, analytics and Business Action Center items generated from the data above

Uploaded media

• Business logos
• Product images
• Vehicle images
• Identity documents

Directory information

Merchants who turn on Directory visibility and are eligible for listing can have selected business and contact information publicly displayed. See section E.

AI assistant information

When you use the VendoPad AI assistant, relevant business information from your own merchant account may be processed to produce the analysis or answer you requested.

VendoPad does not sell personal data.

C. How we use information

• Providing and operating VendoPad
• Authenticating accounts and keeping sessions secure
• Managing your business operations, inventory and records
• Generating reports, analytics and business insights
• Recording sales, payments, debts and expenses you enter
• Customer and debt management features you choose to use
• Generating receipts and invoices for printing, PDF output or WhatsApp sharing
• Making your business discoverable in the public Directory when you enable it
• Merchant verification, approval and account status management
• Customer support
• Security, preventing abuse and improving reliability

D. AI processing

• The AI assistant is an optional business-assistance feature.
• Responses are based on the business context your own merchant account is authorised to access.
• Access is merchant-scoped: the assistant is read-only and does not change your records.
• AI requests are processed server-side. Depending on configuration, VendoPad may use an external model provider (currently OpenAI models, accessed either directly or through the Lovable AI Gateway) to generate responses.
• AI output may contain errors and should be reviewed before you rely on it.
• AI output is not professional accounting, tax, legal or financial advice.

E. Public Directory

When you turn on Directory visibility and your account is eligible for listing, the following may become publicly accessible:

• Business name
• Business category/type
• Business logo
• Public description
• Services you list
• Public address, city, state and neighbourhood
• Phone number
• WhatsApp number
• Verified/active listing status

Your private business records — sales, vehicle sales, expenses, customer records, payments, debts and financial analytics — are not published in the Directory. You can turn Directory visibility off at any time in Settings.

F. Sharing and disclosure

• Service providers necessary to operate VendoPad, including our database, authentication and file-storage provider (Supabase) and our application hosting provider
• Google, where you choose to sign in with Google authentication
• AI model providers, where you use the AI assistant (see section D)
• Disclosures required by applicable law, regulation or legal process
• Information you choose to publish yourself, such as your public Directory listing

WhatsApp sharing happens through links you open on your own device; VendoPad does not send messages on your behalf through a WhatsApp API.

G. Data retention

Information may be retained for as long as needed to provide the service, maintain business records, meet legal and security requirements, and resolve disputes. Specific retention periods are [To be completed before launch].

H. Security

• Authenticated accounts and session-based access
• Merchant-level data isolation so each merchant reaches only their own records
• Database row-level security policies
• Server-side handling of API keys and secrets
• A restricted set of fields exposed through the public Directory

No online service can be guaranteed to be completely secure, and we do not claim that VendoPad is.

I. Your choices

• You can update your account and business profile in Settings.
• You can turn public Directory visibility on or off at any time.
• You can contact us with privacy questions or requests, including requests to correct or delete information where applicable.

Privacy contact: [Privacy contact email — to be completed before launch]. Applicable jurisdiction-specific rights are [To be completed after legal review].

J. Cookies and local storage

VendoPad uses browser storage for functional purposes only: keeping you signed in through your authentication session, and storing a small number of local application preferences in your browser. VendoPad does not use advertising cookies, and no third-party analytics cookies are configured in the app.

K. Third-party links

VendoPad links out to Google authentication, WhatsApp conversations, and any external websites or contacts published by merchants. Those services operate under their own terms and privacy policies.

L. Children's privacy

VendoPad is intended for business users operating a business. It is not designed for or directed at children. A minimum age requirement is [To be completed after legal review].

M. Changes to this policy

We may update this policy as VendoPad changes. When we do, the “Last updated” date at the top of this page will change.

N. Contact

Privacy contact: [Privacy contact email — to be completed before launch]. See also our Terms of Service.