Privacy Policy

1. Who is responsible

Adormax, St. 19, Laddhawala, Muzaffarnagar, Uttar Pradesh - 251002, India, India, is the controller of the personal data described in this policy. For privacy questions or to exercise any right below, contact privacy@vendorsly.com.

2. Data we hold about you, our customer

We do not sell your personal data, and we do not use it to train models.

Card details

Card numbers never reach our servers. Payments are processed by Stripe, which acts as an independent controller for payment data under its own privacy policy. We store only what we need to show you your invoices.

3. Business data — what the product processes

All business data in the Service is aggregated from public web records. The records describe businesses, not consumers, and they come from two places, both public:

1. Google Maps business listings — the name, category, address, coordinates, phone number, website, opening hours, rating, review count and review text a business publishes on its own listing.
2. The business’s own website — pages that are publicly reachable without logging in, from which we read contact details the business has chosen to publish, links to its own social profiles, and technical characteristics of the site such as the CMS, analytics tags, mail provider and certificate details.

We do not:

• access anything behind a login, a paywall or a robots exclusion;
• buy or ingest data from third-party data brokers;
• collect special category data, consumer profiles, or personal data about individuals in their private capacity;
• attempt to guess or generate email addresses that a business has not published.

When business data is also personal data

Some business contact details identify a person — a sole trader trading under their own name, or an address like firstname@company.com. Where that is the case we process it on the basis of legitimate interest: providing business contact information to other businesses for B2B communication. We have balanced that interest against the rights of the people concerned, and the safeguards are the limits above plus the removal right below.

If you are in a jurisdiction where consent is required for this kind of processing, or you simply do not want to be listed, use the removal process in section 4. We do not ask you to justify the request.

4. Removing a business listing

If you are named in, or responsible for, a business record in our corpus and want it gone, email privacy@vendorsly.com with the business name and website or its Google Maps link.

What happens next:

• We acknowledge within 3 business days.
• We remove the record from the corpus and from all customer workspaces within 30 days.
• We add the domain and place identifier to a permanent suppression list so a later collection run does not silently re-add it.
• We cannot recall copies customers exported before removal. We tell you honestly that this limit exists rather than implying a clean erase.

There is no charge, and you do not need an account.

5. Your rights

Depending on where you live you may have the right to access, correct, delete, restrict or object to our processing of your personal data, to receive it in a portable format, and to withdraw consent where we relied on it. Under UK and EU law you may also complain to your supervisory authority; under US state privacy laws you may have rights to opt out of sale or sharing — we do not sell or share personal data as those laws define it.

Email privacy@vendorsly.com. We respond within 30 days.

India — Digital Personal Data Protection Act, 2023

We are established in India and act as a Data Fiduciary under the DPDP Act 2023. If you are a Data Principal, you have the right to:

• obtain a summary of the personal data we process about you and the processing activities involved;
• have inaccurate or incomplete data corrected, updated or erased;
• nominate another person to exercise these rights on your behalf in the event of death or incapacity;
• withdraw consent at any time, where we relied on consent rather than a legitimate use;
• have a grievance redressed by us before approaching the Data Protection Board of India.

Business records that are also personal data are processed under the “legitimate uses” provisions where the information has been voluntarily made public by the Data Principal — a business publishing its own contact details on its own website and its own Maps listing. This is set out in section 3 above, and the removal process applies regardless of which basis we rely on.

We also comply with the Information Technology Act 2000 and the Reasonable Security Practices Rules 2011 in respect of sensitive personal data.

Grievance Officer

As required by the DPDP Act, the IT Rules 2021 and the Consumer Protection (E-Commerce) Rules 2020:

Mohd Zafar, Grievance Officer & Founder
Adormax, St. 19, Laddhawala, Muzaffarnagar, Uttar Pradesh - 251002, India
grievance@vendorsly.com
+91-8191806038

Complaints are acknowledged within 48 hours and resolved within one month.

6. Who else sees the data

On Data plans no content is sent to any AI provider at all. Where we transfer personal data outside its home jurisdiction we rely on Standard Contractual Clauses or an equivalent mechanism.

7. How long we keep things

• Account and workspace data — while your account is open, then 30 days after closure.
• Invoices and tax records — as long as tax law requires, typically seven years.
• Request and security logs — 90 days.
• Business records in the corpus — until removed under section 4, or until re-verification shows the business no longer exists.
• Suppression list — kept indefinitely, because forgetting it would undo the removal.

8. Security

• All traffic is served over TLS.
• API keys and passwords are stored as hashes; a key is displayed once and cannot be recovered afterwards.
• Workspaces are isolated at the database level so one customer cannot read another’s data.
• Access to production is limited to named administrators.
• We will notify affected users and any relevant regulator of a personal data breach within 72 hours of becoming aware of it.

9. Cookies

We set a session cookie to keep you signed in and, if you set one, a preference cookie. These are strictly necessary and carry no advertising identifiers. We do not run third-party advertising or cross-site tracking on this site.

10. Children

The Service is for business use and is not directed at anyone under 18. We do not knowingly collect their data.

11. Changes

We will post material changes here with a new effective date and, where the change affects you, email you about it. See also our Data Processing Terms if you are a controller using us as a processor.