Legal
Privacy Policy
Template awaiting counsel review
This policy is a template provided by Polsia and has not been reviewed by counsel. The operator should obtain legal review before publishing.
Data controller
The data controller for the service is VendorSpies LLC, registered at 30 N Gould St., Ste R, Sheridan, WY 82801. The governing law for this Privacy Policy is the State of Wyoming.
Analytics
VendorSpies uses no analytics and no cookies beyond session authentication. Session cookies are strictly necessary to keep you signed in and are cleared when you end your session.
TODO_BLOCK — Analytics revisit
Reopen if analytics are added later; disclose the provider + retention here.
Third-party processors
VendorSpies shares personal data only with the following processors, and only as needed to operate the service:
- Stripe — payments.
- [Email service provider] — transactional email.
- Polsia — hosting and infrastructure.
TODO_BLOCK — Email service provider
Confirm the email provider name with Polsia support and replace the bracketed placeholder above.
Your data-protection rights
If you are located in the European Economic Area, the United Kingdom, or California, you have a right of access, deletion, and data portability with respect to the personal data we hold about you. To exercise any of these rights, email us at support@vendorspies.com and we will respond within the timeframe required by applicable law.
TODO_BLOCK — DPO contact
Attach DPO contact details here if one is appointed.
Information We Collect
Account info (name, email, hashed password); payment data (via Stripe, we don’t store full card numbers); usage/watchlist data (monitored URLs, notification prefs, Slack/Teams webhook config); support communications.
How We Use Information
To operate the Service, send configured alerts, process billing, respond to support, and improve accuracy. We don’t sell personal information.
Data Retention
Retained while your account is active plus a reasonable period after for legal/dispute purposes. Deletion available on request.
Security Measures
Reasonable technical/organizational safeguards used; no system is fully secure.
International Transfers
Data may be transferred to and processed in the US.