Privacy Policy

This Privacy Policy explains how VendorDefense collects, uses, discloses, and protects personal information in connection with our website, hosted applications, dashboards, support channels, and related business operations.

This policy applies to information that identifies, relates to, describes, or could reasonably be linked with an individual. It does not expand any contractual rights or restrict processing that is required to deliver the service under a separate commercial agreement.

The information we collect depends on how you interact with VendorDefense. It may include account details, professional contact information, organization details, billing contacts, support requests, uploaded documents, system logs, device information, and usage events.

We may also collect information from forms, demos, communications, authentication events, cookies, analytics technologies, and integrations you choose to connect to the platform.

VendorDefense uses personal information to provide and maintain the service, authenticate users, process uploaded material, generate contract insights, respond to support requests, manage subscriptions, send transactional notices, and protect the platform against misuse or security threats.

We may also use information to improve product performance, troubleshoot issues, understand feature adoption, develop new capabilities, comply with legal obligations, and enforce our agreements.

VendorDefense may share personal information with trusted service providers that support hosting, infrastructure, analytics, authentication, communications, payment processing, customer support, and security monitoring. These providers are permitted to process information only as needed to provide services to us.

We may also disclose information when required by law, to respond to lawful requests, to protect the rights or safety of VendorDefense, our customers, or others, or in connection with a merger, financing, acquisition, restructuring, or sale of assets.

VendorDefense retains personal information for the period needed to fulfill the purposes described in this policy, including maintaining active accounts, supporting customer workflows, resolving disputes, enforcing agreements, and satisfying tax, accounting, security, and legal obligations.

Retention periods may vary depending on the type of information, the sensitivity of the data, applicable legal requirements, and whether the information is needed to prevent fraud or investigate incidents.

VendorDefense maintains safeguards designed to protect personal information against unauthorized access, loss, misuse, alteration, and disclosure. These measures may include access controls, encryption, logging, environment segmentation, backup procedures, and vendor management practices.

Even with these controls, no method of transmission or storage is guaranteed to be completely secure. Customers are also responsible for protecting their own credentials, devices, endpoints, and internal access practices.

VendorDefense may use cookies, local storage, and similar technologies to support authentication, session management, security, consent storage, settings retention, traffic measurement, and service analytics.

Strictly necessary cookies remain active because they are required to keep the website and platform secure and functional. Where optional measurement technologies are used, you can manage those choices through the cookie controls presented on the site.

You can also control certain technologies through your browser or device settings, although disabling some storage or cookies may affect website functionality, login persistence, or product performance.

Subject to applicable law, you or your organization may request access to personal information, correction of inaccurate information, deletion of eligible information, or a copy of information in a portable format. You may also object to or request restriction of certain processing in some jurisdictions.

If VendorDefense processes information on behalf of your employer or organization, we may direct your request to the relevant account administrator because that organization may control the data and determine how it is processed.

VendorDefense is not directed to children and is not intended for use by individuals under the age required by applicable law to consent to data processing in their jurisdiction. If we learn that we have collected personal information from a child inappropriately, we will take steps to delete it.

VendorDefense and its service providers may process information in countries other than the one where the information was originally collected. Where required, we use appropriate safeguards to support lawful international data transfers.

VendorDefense may update this Privacy Policy from time to time to reflect product changes, legal requirements, security practices, or operational updates. When we do, we will update the effective date shown on this page.

If you have questions, requests, or complaints about this policy or our privacy practices, contact us using the address listed below and include enough detail for us to verify and respond to your request.