Privacy Policy

Last updated: September 29, 2026

Before you rely on this: this is a plain-language starting template, not legal advice, and it hasn't been reviewed by a lawyer. In particular, several states require giving employees advance written notice (or getting their consent) before using photo or location tracking at work, and those rules vary a lot by state. If your business turns on the optional clock-in photo or location features below, have this reviewed by an attorney familiar with your state's employee-monitoring and privacy laws before relying on it.

VENDROS ("we," "us") provides point-of-sale, inventory, and workforce-tracking software that businesses ("you," "your business") use to run their own operations. This policy explains what information the app collects, how it's used, and who it's shared with.

Who this covers

Each business using VENDROS is its own separate account — your data is never visible to other businesses on the platform. If you're an employee using this app at work (clocking in, using the register), the business you work for controls how it's configured — including whether location or photo verification is turned on — and is responsible for telling you about that and complying with any notice or consent laws that apply where you work. VENDROS provides the software; we don't decide how a given business configures it.

Information we collect

We collect only what's needed to run the features you use:

  • Account & team info: business name and address, and for each team member: name, email (optional for employees who only use the PIN pad), and a password and/or PIN. Passwords and PINs are stored as one-way hashes — we can't look them up or recover them, only verify a match.
  • Clock-in/out photos (optional, off by default): if a business turns on "require a photo to clock in/out," a photo is taken at that moment and stored so a manager can review it later.
  • Product photos (optional): photos attached to inventory items when a business chooses to add them.
  • Location (optional, off by default): if a business turns on "require employees to be at the business to clock in/out," the device's location is checked at that moment against the business's saved address to confirm distance. That one-time location isn't stored — only the business's own address/coordinates are saved, not where any individual employee was standing.
  • Operational data: shifts and hours worked, sales, inventory counts, vendor and expense records, wage/salary figures entered by the business, and an audit log of actions like voids, refunds, discounts, and manual stock or cash corrections.
  • Billing information: subscription payments are handled entirely by Stripe — we never see or store full card numbers. We keep only a Stripe customer/subscription reference and the subscription status.
How we use it

Strictly to provide the app's features to the business that entered the data: running the register, tracking inventory and shifts, calculating payroll hours, generating the shrinkage/reporting screens, and processing subscription billing. We don't use your data for advertising, don't sell it, and don't share it with data brokers.

Who we share it with

Only Stripe, our payment processor, to handle subscription billing. No other third parties receive your data, and we don't run ad trackers or analytics services that sell data.

Data retention & deletion

Data is kept for as long as a business's account is active, so historical reports (payroll, shrinkage, sales history) stay accurate over time. A business owner can deactivate a team member's account at any time (Team page), and can request deletion of their business's data entirely by contacting us — see below.

Security

Passwords and PINs are hashed, never stored in plain text. Data is stored in a managed database and transmitted over HTTPS. No system is perfectly secure, but we don't take shortcuts on the basics.

Children's privacy

This app is intended for business use by adults and isn't directed at children. It's not meant to be used to create accounts for anyone under the legal working age in their jurisdiction.

Changes to this policy

If this policy changes in a meaningful way, we'll update the date at the top of this page.

Contact

Questions about this policy or a request to access or delete your data: [add your support email here].