Privacy Policy

Who handles your data

The data collected on this platform is handled by Vendalys, of Portugal.

What we hold and why

Your account: name, email address, hashed password, language, and the IP address and date you signed up on. We need these to give you an account and to show you accepted these terms. Lawful basis: performance of the contract.

If you sign in with Google: your Google account identifier and profile picture, instead of a password.

Your catalogue: the product codes you follow, your prices, costs and commissions. They are what the service is for, and only you and our administrators see them. Lawful basis: performance of the contract.

Your payments: your Stripe customer identifier, the card type and last four digits, and the amount, date and invoice link of each payment. We never hold the card number. Lawful basis: performance of the contract and a legal duty to keep records.

Your use of it: the date you last signed in. If you accept measurement cookies, anonymous Google Analytics statistics as well. Lawful basis: consent.

Who else sees it

We sell your data to nobody and hand it to nobody. We use only the suppliers the service needs to work:

Stripe — takes the payments and issues the invoices. Google — if you choose to sign in with a Google account, and for usage statistics if you accept them. Our email provider — to send you the messages about your account. Our hosting provider — where the platform runs.

All of them handle the data on our instruction and under the GDPR.

How long we keep it

If you never paid anything, deleting your account erases it and everything belonging to it at once and for good.

If you ever paid, the law requires us to keep the billing records for 10 years. The account is then archived — you lose access and we stop using it for anything — and it is erased automatically when that period ends.

Your rights

You may ask us at any time for access to your data, for it to be corrected or erased, for a copy in a machine-readable format, for the handling to be restricted, or you may object to it.

Some of this you can do yourself: change your name and email in your profile, turn off the optional emails, and delete your account. For the rest, write to us.

Where we rely on your consent — the usage statistics — you may withdraw it whenever you like, without affecting what was done before.

Cookies

Three cookies make the platform work: one keeps you signed in, one remembers the language you chose, and one the light or dark theme. These need no permission because without them the platform does not work.

Google Analytics is loaded only if you allow it in the notice shown on your first visit. Refuse and nothing is loaded and no Google cookie is written. You can change your mind at any time under “Cookies” in the footer.

Complaints

If you think we have not handled your data properly, talk to us first. You also have the right to complain to the supervisory authority in your country — in Portugal, the Comissão Nacional de Proteção de Dados (cnpd.pt).