Privacy Policy

1. Introduction

This Privacy Policy explains how Vendorloop ("we," "us," or "our") collects, uses, stores, and shares information when you use our web application and related services (the "Service"). Vendorloop is an internal platform for managing contractors, bookings, timesheets, purchase orders, and invoices. By creating an account or using the Service, you agree to this policy.

2. Information we collect

Depending on how you use Vendorloop, we may collect:

• Account information — such as name, email address, password (handled by our identity provider), role, phone, and profile details.
• Business content — timesheets, bookings, purchase orders, invoices, contractor profiles, skills, reviews, and related operational data you enter into the Service.
• Uploaded files — such as profile photos, resumes, or invoice attachments when uploads are enabled for your deployment.
• Technical data — IP address, browser type, device information, and logs needed for security, troubleshooting, and performance.

3. How we use information

We use information to:

• Provide, operate, and improve the Service
• Authenticate users and protect accounts
• Support internal workforce operations (scheduling, time tracking, billing)
• Send transactional messages (e.g. verification or password reset)
• Detect, prevent, and respond to abuse or security incidents
• Comply with legal obligations

We do not sell your personal information.

4. Service providers

We use trusted third-party providers to operate Vendorloop, which may include authentication (e.g. AWS Cognito), object storage, email delivery, hosting, and database services. These providers process data only as needed to provide their services to us and under appropriate safeguards.

5. Data retention

We retain account and business data for as long as your account is active or as needed to provide the Service, resolve disputes, enforce agreements, meet audit or payroll requirements, and comply with law. You may request deletion of your account by contacting your administrator or support; some records may be retained where required for legitimate security, financial, or legal purposes.

6. Security

We use administrative, technical, and organizational measures designed to protect information, including encrypted transport (HTTPS), access controls, and secure session authentication. No method of transmission or storage is completely secure; we cannot guarantee absolute security.

7. Your choices

You may update profile information within the Service, request access to or correction of personal data we hold about you, or request account deletion by contacting your administrator or support. Where applicable law grants additional rights, we will honor those requests as required.

8. Children's privacy

Vendorloop is intended for business use by authorized adults. We do not knowingly collect personal information from children under 16.

9. Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top will change when we do. Continued use of the Service after an update constitutes acceptance of the revised policy where permitted by law.

10. Contact

For privacy questions or requests, contact the operator of your Vendorloop deployment (Redinc Solutions) through the support channel associated with your account.