Privacy Policy
Last updated: April 28, 2026
1. Introduction
Vendarwon ("we", "us", "our") operates vendarwon.com. This policy explains how we collect, use, and protect your information when you use Vendarwon Flow.
2. Information We Collect
- Account info: name, email address
- Usage data: workflows created, executions run
- Technical data: IP address, browser type, device info, cookies
- Integration credentials: encrypted API keys and OAuth tokens you provide
- Payment info: processed by Dodo Payments — we never store card details
3. How We Use Your Information
- Provide and improve our services
- Send email reminders and notifications
- Respond to support requests
- Detect and prevent abuse
- Comply with legal obligations
4. Third Party Services
We use these services which have their own privacy policies:
- Supabase (database hosting)
- Vercel (application hosting)
- Resend (email delivery)
- Dodo Payments (payment processing)
- Google (OAuth authentication)
- Inngest (workflow execution)
- Google Gemini API (AI features)
- Anthropic Claude API (bug diagnosis)
5. Data Storage
Your data is stored on Supabase servers. Integration credentials are encrypted using AES-256-GCM encryption before storage. We never store third-party API keys in plaintext.
6. User API Credentials
Users provide their own API keys and OAuth tokens for third-party integrations. Vendarwon acts as an intermediary platform. We store credentials encrypted and use them only to execute your workflows.
7. Data Retention
- Active accounts: retained while account exists
- Deleted accounts: data removed within 30 days
- Execution logs: retained per your plan history limit
- Backups: purged within 90 days
8. Your Rights
You have the right to:
- Access your personal data
- Correct inaccurate data
- Delete your account and data
- Export your data
- Opt out of marketing emails
9. Cookies
We use essential cookies for authentication and session management only. No advertising or tracking cookies are used.
10. Children's Privacy
Vendarwon is not intended for users under 18. We do not knowingly collect data from minors. If you believe a minor has provided us data, contact us immediately.
11. Changes To This Policy
We will notify users of material changes via email or prominent notice on our website at least 14 days before changes take effect.