Privacy Policy

1. Information We Collect

We collect personal and business information when you register an account, subscribe to our services, launch a store, or purchase items from one of our merchants' storefronts.

• Merchant Account Data: Full legal name, business registration, active email address, contact phone number, billing address, and transaction screenshots for verification.
• Buyer Transaction Data: When buyers place orders on Vendora tenant stores, we collect order details, shipping address, contact number, and selected payment method (e.g. cash on delivery or digital payment).
• Technical System Logs: IP address, device properties, browser agent details, operating system metadata, and dashboard access actions to prevent security breaches and manage platform uptime.

2. How We Use Your Data

We use the collected information to serve our core business services and maintain optimal platform operation:

• Service Delivery: To provision and manage your multi-tenant database space, process billing subscriptions, and handle admin logins.
• Storefront Operations: To process buyer orders, compute correct shopping carts, output clean receipts, and facilitate integration with third-party logistics services.
• Service Diagnostics: To track system performance, debug code issues, and roll out security enhancements.

3. Sharing & Disclosures

We only share data with verified third parties in these limited scenarios:

• Service Providers: Sharing billing details or logs with secure cloud server infrastructure hosts and manual payment operators to confirm manual bank receipts.
• Logistics Partners: Sharing shipping address records with standard courier delivery companies (like TCS, Leopards, M&P, or self-shipping agents) to deliver physical goods to buyers.
• Legal Compliance: When requested by official government agencies, federal tax units (FBR), or judicial courts of Peshawar under active digital safety regulations.

4. Data Retention Policy

We keep subscription history, customer profiles, and product records for as long as your merchant account remains active.

If you choose to cancel your subscription, your database container will be locked. We preserve historical data for exactly 90 days after subscription expiration to give you a window to recover your listings or renew. After 90 days, we run clean cron deletion procedures to permanently purge your data logs from our production systems.

5. Security Protocols

Our platform security architecture is designed to prevent unauthorized access:

• Database Isolation: Every merchant store runs within a separate isolated space, ensuring that store data is protected from other tenants.
• Encryption: All dashboard traffic and customer-facing storefront activities are encrypted over Secure Socket Layer (SSL/HTTPS) channels.
• Access Control: Secure hashed login keys are used for session verification. Strict CORS and Content Security Policy (CSP) guards are enforced to block cross-site scripting (XSS) risks.

6. Cookies & Tracking Technologies

We use minimal cookies and local browser storage to keep you authenticated:

• Session Identification: Secure cookies to identify active admin sessions, maintaining your login state as you navigate tabs.
• CSRF Validation: Security tokens to verify forms and prevent cross-site request forgery attacks.
• Cart Storage: Temporary session keys to maintain buyer shopping carts across product pages.

You can disable cookies in your web browser settings. However, doing so will prevent you from logging into the management dashboard.

7. Tenant Data Separation

Because Vendora is a multi-tenant platform, your store database is fully separated at the database and query level.

Our backend framework uses tenant scope filters, meaning no query from one storefront can accidentally fetch, read, edit, or delete items or customer profiles from another storefront. This ensures complete database isolation and security.

8. Your Data Rights

Under the Prevention of Electronic Crimes Act (PECA) 2016 (and in alignment with Pakistan's Personal Data Protection law once formally enacted, since it is currently still in legislative process), you have full ownership and rights over your personal information:

• Right to View & Correct: You can view and edit your profile settings, email address, password, and billing info inside the admin dashboard.
• Right to Export: You can download CSV exports of your product catalogs and customer orders.
• Right to Deletion: You can permanently delete your account and store at any time directly through your merchant dashboard Settings, or by contacting our data protection team at [email protected].

9. Privacy Policy Updates

We review our data handling practices regularly and may update this Privacy Policy from time to time.

Any revisions will be posted on this page with an updated revision date. In the event of material policy changes that affect your data privacy, we will send email notices or dashboard updates to our registered merchants.

10. Contact Legal & Support

If you have questions, feedback, or concerns regarding your privacy or data handling on the Vendora platform, please write to us at: