Who we are
Vendl is operated by Saltbush Investment Trust (ABN 21 226 814 942), 41B Luck Street, Macclesfield, SA 5153. Contact: hello@vendl.app.
What we collect
- Account email and session data for owner sign-in (magic link).
- Business, stand, product, inventory, and order records you enter.
- Payment-related identifiers when you connect Stripe or PayPal (handled by those providers).
- Device and usage data needed to run the service (e.g. push notification tokens on the owner app).
- Messages you send via our contact form (name, email, message).
Why we collect it
We use this information to provide and improve Vendl, authenticate users, process subscriptions and payments, send operational alerts (sales, low stock), respond to enquiries, and meet legal obligations under Australian law.
Processors and overseas disclosure
We use trusted processors (for example hosting, email delivery, Stripe, and PayPal). Some processors store or process data outside Australia. We take reasonable steps to ensure appropriate handling consistent with the Australian Privacy Principles where they apply.
Restock alerts
When you buy from a stand, you may opt in to an email when that stand restocks. Opt-in and restock notify emails are available on Free and Pro.Saltbush Investment Trust (Vendl) is the controller: we store your email and consent record solely for that purpose. Stand owners see a subscriber count and can ask us to send a restock notice - they never receive or export your address. Emails are delivered via Resend (processor). You can unsubscribe any time via the link in each email (no login). We retain active subscriptions until you unsubscribe or the stand is removed; unsubscribed records may be kept briefly for audit.
Cookies and sessions
We use session cookies and similar technologies necessary to keep you signed in and operate the service. We do not sell personal information.
Advertising measurement
We use Meta, Google Analytics, and Reddit advertising pixels to understand how people find Vendl and to measure campaigns. When you are signed in as an owner, we may pass a hashed (SHA-256) copy of your account email and internal user id to Reddit for advanced matching. We do not put plaintext emails in page source for this purpose. You can limit ad tracking via your browser or platform settings where available.
Retention and your rights
We retain account and transaction data while your account is active and for a reasonable period afterward for billing, disputes, and legal requirements. You can delete your account anytime in Settings → Delete account (this cancels any Vendl subscription and removes your stands and related data). You may also request access to or correction of personal information we hold about you by emailing hello@vendl.app.
Changes
We may update this policy as Vendl evolves. Continued use after changes means you accept the updated draft unless a successor policy states otherwise.