Privacy Policy

Vendly ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service. Please read this policy carefully. If you disagree with its terms, please discontinue use of the Service.

Information you provide:

• Account information (name, email address) provided during registration or via Google OAuth.
• Database connection details (host, port, credentials) that you voluntarily enter to connect your databases.
• Natural language queries you submit through the Service.
• Support and feedback messages you send to us.

Information collected automatically:

• Usage data such as features accessed, queries run, and session duration.
• Log data including IP address, browser type, pages visited, and timestamps.
• Cookies and similar tracking technologies used to maintain session state and improve the Service.

We use the information we collect to:

• Provide, operate, and maintain the Service.
• Authenticate your identity and manage your account.
• Process your queries and return AI-generated results.
• Send transactional communications (e.g., billing receipts, security alerts).
• Improve and develop new features through aggregate usage analytics.
• Detect and prevent fraud, abuse, and security incidents.
• Comply with legal obligations.

We take your database data seriously:

• Connection credentials are encrypted at rest using AES-256 and are never logged in plaintext.
• Query results returned from your database are used only to generate your AI response and are not stored beyond the active request.
• Database schemas may be cached temporarily to improve query generation accuracy.
• We do not sell, rent, or share your database contents with any third party.

We do not sell your personal information. We may share information with:

• Service providers: Third-party vendors who assist in operating the Service (e.g., cloud hosting, payment processing, email delivery). These parties are contractually bound to use information only as necessary to provide their services.
• AI providers: Your natural language queries (not your raw database data) may be sent to AI model providers to generate SQL and responses. We only share the minimum necessary context.
• Legal requirements: We may disclose information if required by law, court order, or to protect the rights and safety of Vendly and its users.
• Business transfers: In the event of a merger, acquisition, or asset sale, your information may be transferred. We will notify you before this occurs.

We retain your account information for as long as your account is active or as needed to provide the Service. You may request deletion of your account and associated data at any time. We will fulfill deletion requests within 30 days, except where retention is required by law.

Query history is retained for 90 days by default to power conversation context. You can delete individual conversations or all history from your account settings at any time.

We implement industry-standard security measures including encryption in transit (TLS 1.2+), encryption at rest, regular security audits, and access controls. However, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security and encourage you to use strong, unique passwords for your account.

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your personal data.
• Portability: Receive your data in a machine-readable format.
• Objection: Object to processing of your data for certain purposes.

To exercise these rights, contact us at privacy@vendly.ai.

We use essential cookies to keep you logged in and maintain session state. We do not use advertising or third-party tracking cookies. You can control cookie behavior through your browser settings, though disabling essential cookies may prevent you from using the Service.

The Service is not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If you believe we have inadvertently collected such information, please contact us immediately.

We may update this Privacy Policy periodically. We will notify you of significant changes via email or a prominent notice in the Service. Your continued use after changes are posted constitutes acceptance of the updated policy.

If you have questions or concerns about this Privacy Policy, please contact us at privacy@vendly.ai.