Legal

Privacy Policy

Privacy Policy
Last updated: August 28, 2026.

Data controller

The data controller for the service is VendorSpies LLC, registered at 30 N Gould St., Ste R, Sheridan, WY 82801. The governing law for this Privacy Policy is the State of Wyoming.

Analytics

VendorSpies uses limited first-party aggregate product analytics to measure whether features such as the repository scanner lead to shared reports, signups, and completed onboarding. These events do not contain source code, filenames, model IDs, email addresses, IP addresses, user agents, or persistent visitor identifiers. VendorSpies uses no analytics cookies and no cookies beyond session authentication. Session cookies are strictly necessary to keep you signed in and are cleared when you end your session.

Third-party processors

VendorSpies shares personal data only with the following processors, and only as needed to operate the service:

  • Stripe — payments.
  • Resend — transactional email.
  • Vercel — application hosting and delivery.
  • Neon — managed PostgreSQL database hosting.
  • Sentry — application error and performance monitoring. Default personal-information collection and session replay are disabled.

Your data-protection rights

If you are located in the European Economic Area, the United Kingdom, or California, you have a right of access, deletion, and data portability with respect to the personal data we hold about you. To exercise any of these rights, email us at support@vendorspies.com and we will respond within the timeframe required by applicable law.

Information We Collect

Account info (name, email, hashed password); payment data (via Stripe, we don’t store full card numbers); usage/watchlist data (monitored URLs, notification prefs, Slack/Teams webhook config); support communications.

How We Use Information

To operate the Service, send configured alerts, process billing, respond to support, and improve accuracy. We don’t sell personal information.

Data Retention

Retained while your account is active plus a reasonable period after for legal/dispute purposes. Deletion available on request.

Security Measures

Reasonable technical/organizational safeguards used; no system is fully secure.

International Transfers

Data may be transferred to and processed in the US.