Privacy Policy
Last updated: July 16, 2026
The short version
We collect what we need to run a booking marketplace — your contact info and event details — and nothing sneaky. No advertising trackers, no selling your data, ever. Payments are handled by Stripe, so your card number never touches our servers.
What we collect
When you request or book a vendor: your name, email, phone, and event details (date, location, guest count, notes) — shared with the vendor you contacted so they can respond. When you create an account: your email (we use passwordless sign-in links — no passwords to steal). When a vendor runs their business here:their listing content, calendar, clients' booking records, expenses they log, and team roster (names, emails, phone numbers their owner adds). Automatically: basic logs (IP, browser) for security; contract signatures keep name, timestamp, and IP as the legal signature record.
What we do NOT do
We don't run third-party advertising or analytics trackers. We don't sell or rent personal information. We don't store card numbers (Stripe does, as a PCI-compliant processor). Client contact details are withheld from unclaimed businesses until they claim and verify their page.
Who we share with
The vendor you contact (your inquiry details — that's the product). Service providers that run the platform under contract: Supabase (database hosting), Stripe (payments), SendGrid (email delivery), Vercel (website hosting), and — if SMS reminders are enabled — Twilio (text delivery). Legal: if required by law or to protect the platform from fraud or abuse.
Emails and texts
Booking emails (quotes, confirmations, reminders) are part of the service. Marketing emails from a vendor you booked include a one-click unsubscribe, honored immediately and permanently for that vendor. Staff shift reminder texts (where enabled) go only to team members their employer added, and reply STOP always works.
Your rights
Email hello@vendraa.com to access, correct, or deleteyour personal information, or to remove an unclaimed business listing. California residents: the CCPA gives you the right to know, delete, and opt out of sale/sharing — we don't sell or share personal information as defined by the CCPA, and we will never discriminate against you for exercising your rights.
Data retention & security
Booking and signature records are kept while an account is active and as needed for legal and dispute purposes, then deleted on request where the law allows. Data is encrypted in transit, access is restricted by row-level security, and sign-in is passwordless by design.
Children
Vendraa is not directed to children under 13, and we don't knowingly collect their information. If you believe a child has provided us data, email us and we'll delete it.
Changes
We'll post any material changes here with a new date. Continued use after a change means you accept the updated policy.
Questions about this page? Email hello@vendraa.com. See also our Terms of Service, Privacy Policy, and Accessibility Statement.