ENع
Launch Your Machine
Legal

Privacy Policy

Effective Date: October 9, 2026  ·  Last Updated: October 9, 2026

1. Introduction

VENDIFYS ("Vendifys," "we," "us," "our") operates the multi-vendor e-commerce platform and storefront at https://vendifys.com (the "Platform").

We provide infrastructure for Vendors to create and operate their own stores. This Privacy Policy explains how we collect, use, and protect personal data for Customers, Vendors, and Visitors worldwide. We are based in Dubai, UAE and serve users internationally.

2. Who We Are

  • VENDIFYS
  • Platform: https://vendifys.com
  • Location: Dubai, United Arab Emirates
  • Contact for Privacy: info@vendifys.com

We act as a Data Controller for Platform account data and subscription data. For order payments processed through a Vendor's own connected payment provider, the Vendor acts as an independent Data Controller and we act as a Data Processor / service provider.

3. What Information We Collect

A. For All Visitors & Customers

  • Contact Information: Name, email, phone number
  • Device & Usage Data: IP address, browser, device type, pages viewed, cart activity
  • Cookies and tracking technologies (see Section 10)

B. For Vendors (Store Owners)

  • Account Information: Name, business name, email, phone, country, business address
  • Store Information: Store name, logo, product listings, store settings
  • Verification Information: Where required for compliance
  • Communication Data: Support inquiries, onboarding calls
  • API Keys & Payment Provider Credentials: When you connect your own payment provider (e.g., Stripe, PayPal, etc.), you provide API keys / secret keys. These keys are encrypted at rest and stored securely. We only use them to securely route your customers' payments directly to your connected payment provider on your behalf. We do not use your keys for any other purpose.

C. For Subscription Billing

Subscription & Billing Information: Plan type, billing cycle, invoices, billing address. All Vendifys platform subscription payments are processed securely by Stripe. We do not store your full credit card number.

D. For Customer Orders

Order Information: Products purchased, order value, shipping address, billing address, phone number for delivery.

4. How Payment Processing Works — Important

This Platform uses two separate payment flows:

1. Vendifys Platform Subscriptions: All subscription fees you pay to Vendifys for using the Platform are processed by Stripe. Your payment data for Vendifys subscriptions is handled directly by Stripe under Stripe's Privacy Policy.

2. Vendor Store Sales (via Vendor's Connected Provider): When a Customer makes a purchase from a Vendor's store on Vendifys, if the Vendor has connected their own payment provider via API keys, the payment is processed directly by the Vendor's connected payment provider. In this flow:

  • The Customer's payment details are transmitted directly to the Vendor's payment provider via secure, encrypted API.
  • Vendifys does not store, see, or log the Customer's full card numbers, CVV, or full payment credentials.
  • The Vendor and their payment provider are responsible for the processing of that transaction.
  • We only receive and store a payment confirmation, transaction ID, amount, and status to confirm order fulfillment.

5. How We Use Your Information

We use your information to:

  • Create and manage Vendor accounts and storefronts
  • Provide, maintain, and improve the Platform
  • Process and manage Vendifys subscription billing via Stripe
  • Enable secure API connection between Vendor stores and their chosen payment providers
  • Facilitate order processing, transaction status updates, and fulfillment between Customers and Vendors
  • Provide customer and Vendor support
  • Send transactional emails (order confirmations, subscription receipts, payouts)
  • Send marketing communications with your consent
  • Prevent fraud, enforce our Terms, and ensure Platform security
  • Comply with legal and tax obligations

6. Legal Bases (EEA/UK Users)

For users in the EU/EEA/UK, we process data under: Contract Performance, Legitimate Interest, Consent, and Legal Obligation.

7. How We Share Your Information

We do not sell your personal data.

We share it only with:

  • Stripe: For all Vendifys subscription billing and for Vendors who choose to connect Stripe as their payment provider.
  • Vendor's Chosen Payment Provider: When a Vendor connects a provider via API keys, transaction data is shared directly with that provider to process the sale.
  • Infrastructure Providers: hosting, cloud storage, email delivery, analytics (Google Analytics), communication tools.
  • Vendors & Customers: We share necessary order data (name, shipping address, order details) with the relevant Vendor to fulfill the order.
  • Legal Authorities: When required by applicable law.
  • Business Transfers: In case of merger or acquisition.

All API keys are encrypted at rest (AES-256) and in transit (TLS), and access is strictly limited to essential systems.

8. International Data Transfers

We operate from the UAE and serve a global user base. Your data may be transferred to countries where Stripe and other providers operate, including the US and EU. For EEA/UK data, we use safeguards like Standard Contractual Clauses (SCCs).

9. Data Retention

  • Vendor account and store data: Retained while your account is active and for 3 years after closure for legal purposes.
  • API Keys: Retained until you disconnect your provider or delete your account, then securely deleted.
  • Subscription and billing records: Retained for 5 years for tax and accounting compliance.
  • Order metadata (not full card data): Retained for 5 years.

10. Cookies and Tracking

We use essential cookies to keep the Platform running, analytics cookies to improve performance, and marketing cookies (Meta Pixel, Google Ads) where you consent. You can manage cookies via your browser. A cookie banner will request consent for non-essential cookies in regions where required.

11. Your Rights

You have the right to access, correct, delete, and request a copy of your personal data.

  • California / US Residents (CCPA): Right to know, delete, correct, and opt-out of sale/sharing. We do not sell your data.
  • EEA/UK Residents (GDPR): Right to restrict, portability, objection, and to lodge a complaint with your supervisory authority.
  • UAE Residents (PDPL): Right to be informed, access, rectification, and erasure.
  • Vendors can disconnect their payment provider and delete API keys at any time from their dashboard under Settings > Payments.

To exercise your rights, email info@vendifys.com.

12. Security

We implement industry-standard security measures, including SSL/TLS encryption, encryption of API keys and secrets at rest, access controls, and secure infrastructure. However, no method of transmission over the internet is 100% secure. Vendors are responsible for keeping their own API keys confidential.

13. Children's Privacy

The Platform is not intended for children under 18. We do not knowingly collect data from children.

14. Changes to This Policy

We may update this policy to reflect changes in our Platform, payment flows, or legal requirements. Updates will be posted with a new Last Updated date.

15. Contact Us

For privacy questions, data requests, or security concerns: