Last updated: May 2026

Privacy Policy

This Privacy Policy explains how VendorDex collects, uses, shares, and retains information for our TCG card show marketplace platform.

Information We Collect

Plain English: we collect what we need to run accounts, shows, listings, and payments.

Account information, such as name, email address, display name, and role preferences.
Vendor information, including business name, profile details, show participation, and inventory listings.
Organizer information, including event details, booth assignments, applications, and payment settings.
Location information used for event search, such as city, state, venue, or search location.
Payment information processed by Stripe. VendorDex does not store full card numbers.
Usage information, device data, cookies, logs, and basic analytics events.

How We Use Data

Plain English: we use data to power the marketplace and keep users informed.

Operate VendorDex features, including inventory search, vendor profiles, event pages, and floor tools.
Match attendees with nearby events and relevant vendor inventory.
Send account, event, application, billing, booth, and inventory-related notifications.
Prevent fraud, enforce policies, troubleshoot errors, and improve platform reliability.
Analyze product usage and improve VendorDex features and performance.

Data Sharing

Plain English: we use service providers, but we do not sell personal data.

We may share information with service providers that help us operate VendorDex, including Stripe for payments and Supabase for authentication, database storage, and related infrastructure. We may also share information when required by law, to enforce our terms, or to protect users and the platform. We do not sell personal data.

Cookies and Analytics

Plain English: cookies help keep you signed in and help us understand product usage.

VendorDex and our service providers may use cookies, local storage, and similar technologies for login sessions, security, preferences, analytics, and performance measurement. You can control cookies through your browser settings, though some features may not work correctly without them.

Your Rights

Plain English: you can ask to access, correct, or delete your information.

Depending on where you live, you may have rights to request access, correction, deletion, portability, or restriction of personal information. To make a request, contact us using the email below. We may need to verify your identity before completing a request.

Data Retention

Plain English: we keep data while needed for accounts, events, legal reasons, and safety.

We retain account, listing, event, transaction, and support records for as long as necessary to provide the service, comply with legal obligations, resolve disputes, prevent abuse, and enforce agreements. We may retain limited backups or audit records after deletion where required or permitted by law.

Children’s Privacy

Plain English: VendorDex is not intended for children under 13.

VendorDex is not intended for children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided personal information, please contact us so we can take appropriate action.

Contact

Plain English: privacy questions can be sent by email.