Privacy Policy

Account information. When you sign up we collect your email address and, if you sign in with Google, the basic profile details Google shares with us (name, email, and profile photo). We never see or store your Google password.

Content you upload. The product photos you upload, the images the Service generates from them, and any listing text, prompts, item details, or preferences you provide.

Billing information. Payments are processed by Paddle, our merchant of record. Paddle collects and processes your payment details — we never receive or store your card number. We keep records of your subscription plan, billing status, and credit balance.

Usage data. Basic technical data such as generation activity (used to operate the credit system), log data, device and browser type, and approximate region, used for security, debugging, and improving the Service.

We use your information to:

• provide the Service — including generating enhanced images and listing copy from your uploads;
• operate your subscription and credit balance, including granting, deducting, and refunding credits;
• secure accounts, prevent fraud and abuse, and enforce our Terms of Use;
• respond to support requests;
• send transactional messages (receipts, renewal and billing notices, important service changes); and
• improve reliability and performance of the Service.

We do not sell your personal information.

When you request a generation, your uploaded photo and related inputs are transmitted to our AI infrastructure providers to produce the result you asked for. Generated outputs are returned to your workspace and history.

We do not use your photos or generated outputs to train our own models, and we only share them with AI providers to the extent necessary to fulfil your specific request. Uploads and outputs are retained so your workspace, history, and exports keep working, and are deleted in line with Section 6.

We rely on a small number of infrastructure providers who process data on our behalf, under their own security and data-processing commitments:

• Supabase — authentication, database, and file storage;
• Vercel — website hosting and delivery;
• Paddle — payment processing and tax handling, as merchant of record;
• RevenueCat — subscription state management;
• AI model providers — image generation/enhancement and listing text generation.

We use strictly necessary cookies to keep you signed in and to remember essential preferences (such as theme). You can manage preferences on our Cookie Settings page and in your browser. We do not use third-party advertising cookies.

We keep your account data, uploads, and generated content while your account is active so the Service can function. If you delete your account, or ask us to at support@vendly.ai, we will delete your personal data and stored content within 30 days, except for records we must keep for legal, tax, or fraud-prevention purposes (for example, billing records retained by Paddle).

Depending on where you live (including under the GDPR if you are in the EU/EEA or UK), you may have the right to access, correct, delete, or receive a copy of your personal data, to object to or restrict certain processing, and to withdraw consent. To exercise any of these rights, contact us at support@vendly.ai. You also have the right to complain to your local data protection authority.

All traffic to the Service is encrypted in transit (HTTPS). Uploaded photos are stored in access-controlled storage scoped to your account, and internal access to production data is limited and audited. No online service can guarantee absolute security, but we treat protecting your content as a core requirement of the product.

Our providers may process data in countries other than your own. Where required, we rely on appropriate safeguards (such as EU Standard Contractual Clauses implemented by our providers) for such transfers.

The Service is not directed at children and may not be used by anyone under 16 (or the minimum age required in your country). We do not knowingly collect data from children.

We may update this policy as the Service evolves. Material changes will be announced on this page (and by email for significant changes) before they take effect. The date above reflects the latest revision.

Questions about privacy or this policy: support@vendly.ai.