Privacy Policy

1. Information We Collect

A. Information You Provide Directly

We collect information you voluntarily provide when creating an account, publishing listings, posting content, communicating with users, or contacting support. This may include:

• Full name
• Email address
• Phone number
• Business name
• Physical address
• Profile photo
• Biography and business descriptions
• Professional qualifications
• Certifications and licenses
• Service offerings
• Portfolio information
• Customer support communications
• Marketing preferences

You are responsible for ensuring that the information you submit is accurate and up to date.

B. Community & User-Generated Content

When using the VendPost Community and related features, we collect and store: Posts, Comments, Replies, Likes and reactions, Uploaded photographs, Videos, Portfolio content, Reviews, Forum discussions, User feedback, Messages submitted through community features.

Please remember that content you choose to make public may be visible to other users and visitors of the Platform.

C. Transaction & Business Information

Because VendPost operates primarily as a marketplace and connection platform, users may provide information related to services, projects, products, bookings, or business activities. This may include: Service inquiries, Booking requests, Project information, Vendor-client communications, Listing activity, Community engagement activity.

Important Notice

VendPost does not generally process, hold, or escrow payments between users unless explicitly stated otherwise. Financial transactions conducted directly between users and vendors may occur outside of the Platform. VendPost is not responsible for information shared voluntarily between parties during those transactions.

D. Automatically Collected Information

When you access or use the Platform, certain information may be collected automatically, including: IP address, Browser type, Operating system, Device identifiers, Device type, Language preferences, Access dates and times, Referring websites, Clickstream data, Pages viewed, Session duration, Interaction metrics, Error logs.

This information helps us maintain platform performance, security, and reliability.

E. Cookies & Similar Technologies

We use cookies, pixels, local storage, and similar technologies to: Maintain user sessions; Remember user preferences; Improve platform functionality; Measure platform performance; Analyze user engagement; Detect fraud and abuse; Support security monitoring.

Some cookies are necessary for platform functionality, while others support analytics and platform improvement. Where required by law, we will obtain consent before deploying non-essential cookies. Users may manage cookie preferences through browser settings or applicable consent tools.

2. Legal Bases for Processing (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or another jurisdiction requiring a lawful basis for processing, we process personal information under one or more of the following legal bases:

• Contractual Necessity: To create and maintain accounts, provide platform functionality, enable communications, and deliver requested services.
• Legitimate Interests: To improve the Platform, prevent fraud, maintain security, analyze performance, moderate content, and operate our business.
• Consent: Where required by law, including certain marketing communications, cookies, and optional platform features.
• Legal Obligations: To comply with applicable laws, regulations, court orders, governmental requests, and legal processes.

3. How We Use Your Information

We may use collected information to:

• Create and manage user accounts;
• Operate the Platform;
• Display listings and user-generated content;
• Facilitate communications between users;
• Provide customer support;
• Moderate community content;
• Verify compliance with our policies;
• Improve platform functionality;
• Detect fraud and security threats;
• Enforce our Terms of Use;
• Respond to legal requests;
• Send service-related communications;
• Send platform announcements;
• Send marketing communications where permitted by law;
• Conduct analytics and research.

4. Public Information & Community Visibility

Certain information is intentionally public. This may include: Profile information; Business information; Public listings; Reviews; Ratings; Community posts; Comments; Uploaded portfolio content.

Content posted publicly may be viewed, copied, shared, indexed by search engines, or otherwise accessed by third parties. Users should avoid publishing confidential, sensitive, financial, medical, or otherwise private information through public features.

5. Sharing & Disclosure of Information

We do not sell personal information.

We may disclose information in the following circumstances:

Service Providers

We may share information with trusted third-party service providers that assist us with: Hosting, Infrastructure, Security, Analytics, Customer support, Email delivery, Cloud storage, Platform operations. Such providers are contractually obligated to protect information appropriately.

User Interactions

Information may be shared with vendors, clients, businesses, and users with whom you choose to interact. For example: When contacting a vendor; When responding to inquiries; When publishing listings; When posting community content.

Legal Compliance

We may disclose information when necessary to: Comply with applicable law; Respond to lawful requests; Protect user safety; Enforce legal rights; Investigate fraud or abuse; Protect the Platform and its users. Where legally permitted, we may notify users before disclosure.

Business Transfers

Information may be disclosed as part of: Mergers; Acquisitions; Asset sales; Corporate restructuring; Bankruptcy proceedings; Business transitions.

6. International Data Transfers

VendPost is operated by Baycarl LLC and may process information in the United States or other jurisdictions where our service providers operate.

Where personal information is transferred internationally, we will implement appropriate safeguards as required by applicable law, which may include: Standard Contractual Clauses (SCCs); Contractual protections; Organizational safeguards; Technical safeguards.

By using the Platform, you understand that information may be transferred to countries with privacy laws different from those in your jurisdiction.

7. Data Retention

We retain personal information only for as long as reasonably necessary to: Provide the Platform; Maintain accounts; Resolve disputes; Enforce agreements; Comply with legal obligations; Protect platform security.

Retention periods may vary depending on the type of information and applicable legal requirements. When information is no longer required, we may delete, anonymize, aggregate, or securely destroy it.

8. Security Measures

We implement reasonable administrative, technical, and organizational safeguards designed to protect information from: Unauthorized access; Loss; Misuse; Alteration; Disclosure; Destruction.

Security measures may include: Encryption in transit; Access controls; Authentication mechanisms; Security monitoring; Logging systems; Infrastructure protections.

However, no security system is completely secure, and we cannot guarantee absolute security. Users remain responsible for maintaining the confidentiality of account credentials.

9. Your Privacy Rights

Depending on your location, applicable law may provide certain rights regarding personal information. These rights may include:

• Right of Access: Request access to personal information we hold about you.
• Right to Correction: Request correction of inaccurate information.
• Right to Deletion: Request deletion of personal information, subject to legal limitations.
• Right to Data Portability: Request a copy of personal information in a portable format where applicable.
• Right to Restrict Processing: Request limitation of certain processing activities.
• Right to Object: Object to certain processing activities based on legitimate interests.
• Right to Withdraw Consent: Withdraw previously granted consent at any time.
• Right to Lodge a Complaint: If you are located in a jurisdiction that provides this right, you may file a complaint with the appropriate data protection authority.

To exercise any rights, contact: support@vendpost.com. We will respond within applicable legal timeframes.

10. California Privacy Rights (CCPA/CPRA)

California residents may have additional rights under applicable California privacy laws. These rights may include: Right to know what personal information is collected; Right to request deletion; Right to request correction; Right to access collected information; Right to limit certain uses of sensitive personal information; Right to non-discrimination for exercising privacy rights.

VendPost does not sell personal information as traditionally defined under the CCPA.

California residents may submit privacy requests through: support@vendpost.com

11. Children's Privacy

VendPost is not intended for individuals under eighteen (18) years of age. We do not knowingly collect personal information from children.

If we become aware that information from a child has been collected, we may delete such information and take appropriate action regarding associated accounts. Parents or guardians who believe a child has provided personal information may contact us.

12. Third-Party Services & Links

The Platform may contain links to third-party websites, applications, services, payment providers, social media platforms, or business websites.

VendPost does not control and is not responsible for the privacy practices, content, or policies of third parties. Users should review third-party privacy policies independently.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Changes become effective upon publication unless otherwise required by law. Continued use of the Platform after updates constitutes acceptance of the revised Privacy Policy.