What we collect, and why.

Creating an operator account stores:

• Your email address and password. The password is never stored in readable form; our authentication provider stores only a cryptographic hash of it.
• Your name, and optionally a company name, phone number, and profile photo.
• An operating location — city, state, and its coordinates — with a default search radius. Coordinates are what make distance-based search possible; without them the directory cannot rank opportunities by how far they are from you.

Everything except your email address and name is optional, and you can edit or clear these at any time.

• Saved searches and their alert frequency, so we can notify you when new opportunities match.
• Bookmarks and the opportunities you have unlocked.
• Purchase and subscription records — what was bought, when, its status, and the identifier our payment processor assigns you.
• Notification preferences, including whether you want email alerts at all.

We never see or store your card details. Payments are handled entirely by Stripe, which collects card information directly and processes it under its own privacy policy. What we keep is the customer and transaction identifiers Stripe returns, plus whether a purchase succeeded — enough to know what access you are entitled to, and nothing more.

We use a small number of providers, each for a specific purpose:

• Supabase — the database, sign-in system, and private file storage. Account and marketplace data live here, hosted in the United States.
• Stripe — payment processing and subscription billing.
• Resend — sending transactional email such as confirmation links, password resets, and opportunity alerts.
• Cloudflare — serving the site. Like any web host, it processes request metadata such as IP address for delivery, security, and abuse prevention.

• We do not sell or rent your personal information.
• We do not run advertising trackers, analytics cookies, or third-party marketing pixels. The site loads no such scripts.
• We do not email you marketing you did not ask for. Email alerts are tied to searches you saved, and you can switch them off in your profile.

VendLead sets cookies for one reason: to keep you signed in and to protect that session. There are no advertising or analytics cookies. Clearing them signs you out.

Opportunity listings include a location's contact details and, sometimes, private documents. Those are deliberately withheld until access is authorised by a purchase or an explicit permission. Documents are held in private storage and served only through short-lived links generated for an authorised request — never from a public address. If you are a location that has shared contact details with us, that boundary applies to your information too.

Account information is kept while your account exists. Purchase and payment records are kept longer where financial and tax obligations require it, even after an account closes. Saved searches, bookmarks, and notifications are removed with the account.

• See and correct your information from your profile settings at any time.
• Turn off email alerts without closing your account.
• Request a copy of your data, or ask us to delete your account and its associated records.
• Depending on where you live, you may have additional rights over access, correction, deletion, or portability. We apply these requests to everyone rather than only where legally required.

VendLead is a business tool and is not directed at children. We do not knowingly collect information from anyone under 18.

If this policy changes materially, we will update the date at the top of this page. For any privacy question, a copy of your data, or a deletion request, get in touch.