Privacy Policy

Introduction

At Vendorail, we value the trust you place in us when sharing your personal information. This Privacy Policy details our policies and procedures regarding the collection, use, and disclosure of your data when you use the Vendorail mobile application.

By downloading, installing, or using the Vendorail app, you agree to the collection and use of information in accordance with this Privacy Policy.

Information We Collect

We only collect data that is necessary to provide, support, security-harden, and improve our services. The types of personal data we collect include:

• Personal Identity Information: First name, last name, and email address (required to create your user account and authenticate your identity).
• Contact & Profile Information: Phone number, profile picture, or business logos (uploaded optionally by you to customize your account and profile page).
• Location Information (Precise Location): With your explicit consent, we access your device's GPS/precise location coordinates to locate service providers near you and facilitate address picking on the interactive search map.
• In-App Messages & Chat Data: Chat history, quick replies, and messages exchanged between customers and service providers to facilitate secure procurement communications.
• Device & Push Notification Data: Device model, operating system version, and standard push notification tokens to send alerts, in-app banners, and messaging updates.
• Security Verification Settings: Local biometric settings preferences. Note that we do not access or store your actual fingerprint or face data on our servers; biometric scans are handled locally by your device OS APIs.

How We Collect Your Data

We collect your data through the following interactions in the Vendorail app:

1. Direct User Inputs: Information you type when registering an account, editing your profile settings, or sending messages within the chat panel.
2. Device System Permissions: Prompts requesting access to your device's Location services (GPS) or Push Notifications.
3. Automated App Interactions: System handshakes to retrieve standard push notification tokens upon successful startup.

How We Use Your Data

CODITERA TECHNOLOGIES LLC processes your personal data for the following specific purposes:

• Account Management: To set up, authenticate, secure, and manage your customer or service provider profile.
• Matching & Search Features: To use precise location details to match customers with service providers nearby on the "Find Services" interactive map.
• Communication: To deliver real-time messages, chat notifications, quick replies, and updates between users.
• App Alerts (Push Notifications): To send local notification trays or in-app banners regarding new messages, transactions, and status alerts.
• Performance & Safety: To harden network polling, prevent socket error trace spam when offline, and perform diagnostic audits of app services.

Data Sharing & Third-Party Services

We respect your privacy and do not sell or trade your personal information. To provide essential app functionalities, we securely share data with the following vetted third-party service providers:

• Push Notification Delivery Services: Standard system APIs (Apple APNs and Google Services) used exclusively to route real-time message alerts and push updates to your device.
• Google Maps & Google Places APIs: Used to display interactive maps and power the address search autocomplete text fields.

Data Retention & Account Deletion

We retain your personal information only as long as your account remains active or as required to fulfill the purposes outlined in this Privacy Policy.

You have the absolute right to manage your data, including the right to request deletion of your account and personal information:

• You can request account deletion directly from the **Profile** section in the app settings page.
• Alternatively, you can email our privacy team at support@vendorail.com with the subject line "Request Account Deletion."
• Upon account deletion, all personal data, email addresses, phone records, chat logs, profile photos, and associated files will be permanently purged from our servers within **30 days**.

Security Measures

We implement robust security controls to prevent unauthorized access, alteration, disclosure, or destruction of your personal information:

• All data in transit is encrypted using Secure Socket Layer / Transport Layer Security (SSL/TLS).
• Secure API client connections utilize SSL Certificate Pinning to protect your communications from interception.
• Sensible credentials (tokens, configuration credentials) are saved locally on your device inside secure storage containers.

Children's Privacy

Our services are not intended for use by anyone under the age of **18**. We do not knowingly collect personal information from minors.

If you are a parent or guardian and discover that your child has provided personal information to us, please contact us immediately. If we become aware that we have collected personal data from anyone under 18 without parental consent, we will take steps to delete that data from our servers.

Changes to this Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date at the top of this document.

For material changes, we will notify you through a prominent announcement in the Vendorail app interface before the changes become effective. We encourage you to review this page periodically for any updates.

Contact Information

If you have any questions or concerns regarding this Privacy Policy or your data deletion rights, please contact our privacy compliance team: