Venda.

Privacy Policy

Effective date: April 2026

1. Introduction

Venda ("we," "us," "our," or "Company") operates the Venda platform and services (venda-list.com, mobile apps, desktop applications, and browser extensions). This Privacy Policy explains how we collect, use, process, and protect your personal information when you use our services.

We take your privacy seriously. Our architecture is designed to minimize data collection and keep sensitive information on your device whenever possible.

2. What Data We Collect

2.1 Account Information

When you sign up, we collect:

  • —Email address
  • —Name
  • —Password (hashed and encrypted, never logged)
  • —Phone number (optional, for contact)
  • —Subscription tier and billing information

2.2 Listing and Product Data

  • —Photos and descriptions you upload
  • —Pricing, quantities, SKUs, and product categories
  • —AI-generated listing titles and descriptions
  • —Cost of goods sold (COGS) for profit tracking

2.3 Marketplace Connection Data

To publish to eBay, Etsy, TikTok Shop, Shopify, Amazon, Walmart, Whatnot, and other platforms, we collect:

  • —OAuth access tokens (encrypted in our database)
  • —Seller credentials (usernames, never passwords)
  • —Store information (name, location, rating)
  • —Sales data pulled from marketplaces (order history, prices)

Important: We never store marketplace passwords. We use OAuth 2.0 exclusively.

2.4 Device and Session Data

  • —Device type (iPhone, Android, Windows, Mac, etc.)
  • —App version and OS version
  • —Push notification token for sale alerts
  • —Browser user agent
  • —IP address (for rate limiting and fraud detection)

3. Data That Stays on Your Device

The following data never leaves your device:

  • —Session cookies (for Poshmark, Mercari, etc.) — stored encrypted on your phone/computer
  • —Local automation logs (desktop agent + extension)
  • —Browser history related to marketplace activity

4. How We Use Your Data

4.1 To Provide the Service

  • —Generate listings using AI (Claude)
  • —Publish listings to eBay, Etsy, and other platforms
  • —Detect when items sell and automatically delist from other platforms
  • —Calculate pricing, profit, and analytics
  • —Manage your subscriptions and billing

4.2 Communications

  • —Send push notifications about sales and delisting status
  • —Send transactional emails (password resets, billing confirmations)
  • —Send product updates and feature announcements (if you opt in)

5. Data Sharing

5.1 What We Do NOT Do

  • —We do NOT sell or rent your personal data to third parties.
  • —We do NOT share your data with marketing or advertising companies.
  • —We do NOT use your data for purposes unrelated to providing Venda.

5.2 What We Share (Only as Necessary)

We share data only with:

  • —Marketplace APIs (eBay, Etsy, TikTok Shop, Shopify, Amazon, Walmart, Whatnot, etc.) — to fulfill publish/delist requests
  • —Cloud infrastructure: Supabase, Vercel, Firebase, Clerk
  • —Payment processors: Stripe (web), RevenueCat (mobile)
  • —AI services: Claude (Anthropic) — for listing generation

6. Data Storage and Security

  • —All data stored in the United States (Supabase + Vercel regions)
  • —Encrypted in transit (TLS 1.3)
  • —Encrypted at rest (AES-256 where applicable)
  • —OAuth tokens stored encrypted in database (never logged)
  • —Passwords hashed (bcrypt, not reversible)
  • —Rate limiting to prevent abuse

7. Your Rights

7.1 Access, Correct, Delete

You can request a copy of your data, update your account info, or delete your account at any time. Email support@venda-list.com with your request. We'll respond within 30 days.

7.2 GDPR (EU Users)

EU users have the right to access, rectify, erase, restrict processing, and port your data. You may also lodge a complaint with your local data protection authority.

7.3 CCPA (California Users)

California residents have the right to know what data is collected, request deletion, and opt out of "sale" — which we don't do.

8. Data Retention

  • —Account data: Until you delete your account
  • —Listing data: Until you delete the listing or account (30-day grace period)
  • —Sales data: 2 years (for profit/tax tracking)
  • —Agent action logs: 6 months
  • —Backup copies: 90 days after deletion

9. Cookies

  • —Essential cookies: Authentication, session management (required for login)
  • —Analytics cookies: Google Analytics (anonymized, optional)
  • —No advertising cookies — we don't use ad networks

10. Contact

Questions about this Privacy Policy? Contact us:

Last updated: April 2026.