Privacy Policy

    Last updated April 2026

    VendorBreach, Inc. ("VendorBreach," "we," "us," or "our") is committed to protecting the privacy of our customers, users, and website visitors. This Privacy Policy describes how we collect, use, disclose, and safeguard your information when you visit our website or use our platform.

    1. Information We Collect

    We may collect personal information that you voluntarily provide, including your name, email address, company name, job title, and payment information. We also automatically collect certain technical data such as IP address, browser type, and usage analytics.

    2. How We Use Your Information

    We use your information to provide and improve our services, communicate with you, process transactions, and comply with legal obligations. We do not sell your personal information to third parties.

    3. Data Security

    We implement industry-standard security measures including AES-256 encryption at rest and TLS 1.3 in transit. Our infrastructure is hosted on AWS with SOC 2 Type II controls in progress.

    4. Data Retention

    We retain your personal information for as long as your account is active or as needed to provide you services. You may request deletion of your data at any time by contacting us at privacy@vendorbreach.com.

    5. Your Rights

    Depending on your jurisdiction, you may have the right to access, correct, delete, or port your personal data. To exercise these rights, please contact us at privacy@vendorbreach.com.

    6. Contact Us

    If you have questions about this Privacy Policy, please contact us at privacy@vendorbreach.com.