Privacy Policy

Effective date: May 28, 2026 · Last updated: October 23, 2026

VendorSnap is an app for resellers to price, list and sell their items, in person and online. It is operated by RJ Provisions LLC, doing business as VendorSnap ("VendorSnap," "we," "us," or "our"). This policy explains what we collect, why, who we share it with, and the choices you have.

By using VendorSnap, you agree to this policy.

1. Information we collect

Information you give us

• Account: your name, email address and password (managed by Firebase Authentication; we never see your password). If you sign in with Google or Apple, we receive the name and email address they share (Apple may give us a private relay address instead of your own).
• Shop profile: your shop name, currency and sales tax settings, and the answers you give when you set up (what you sell and where you sell), which we use to tailor the app.
• Payment handles: the Venmo username and Zelle email or phone number you choose to show your customers.
• Items: title, description, price, cost, category, condition, size and package details, photos, and any listing videos you add. A video you record with your phone's camera can include sound.
• Sales: for each sale, the items, totals, discounts, tax, payment method, time, and any correction you make later. We do not store your customer's name or contact details. For a card payment taken with Tap to Pay, we keep the card brand, the last four digits and Square's payment ID for your records and refunds, never the full card number.
• Sourcing list: the items you price-check before buying, with their results.
• Messages to us: problem reports and feedback you send in the app (with your device model, operating system version and app version, so we can fix problems), help requests you send from Snappy, our help bot (the same device details, the problem the app showed, your chat with Snappy, anything you type under "What happened?" and, unless you switch it off, recent steps from the app's log), Snappy answers you report (with the same device details, the problem the app showed and your chat with Snappy), the questions you ask Snappy and its answers (kept 90 days, as described below), and emails you send to our support address. When you delete your account, you can also tell us why you are leaving, if you want to; that answer is kept as Section 7 describes.
• Referrals: if you invite someone or enter an invite code, we keep which account invited which, when, and whether the invite earned a free month. We store no names or contacts for this, and the app never reads your contacts: you share your link yourself. On Android, the app reads the Google Play install referrer once, only for the invite code it carries.
• Subscription: your plan and its status from the App Store or Google Play (through RevenueCat), the offer or promo code you subscribed with and when you first used it, and what each paid period charged. If you type a promo code in the app and it is one of our partners' codes, we keep it with your account, with when you entered it. We never see your card or bank details.
• Your acceptance of these terms: which versions of this Privacy Policy and our Terms of Service you accepted in the app, when, and the app version and kind of phone (iPhone or Android) you accepted them on.

Information collected as you use the app

• Usage analytics: we use Google Analytics for Firebase to understand how the app is used in aggregate, for example app opens, active-user counts, retention, session length, which screens are viewed and which features are used. This includes coarse device and app information (device model, operating system version, app version, language, general region derived from your IP address, and a Firebase-generated install identifier). We do not use it for advertising, ad personalization is turned off, and we do not link analytics events to your name, email or payment handles.
• Ad measurement: the Meta (Facebook) SDK receives app installs and a few in-app milestones (for example, a completed Price Check) so we can measure and improve our own ads on Facebook and Instagram. These events carry no name, email, item, photo or price, and we do not collect your device's advertising ID.
• Notifications: if you allow notifications, we keep your phone's push token, your time zone (so we send at a sensible hour) and your notification choices.
• App integrity: Firebase App Check confirms that requests come from the real VendorSnap app, using Apple App Attest on iPhone and Google Play Integrity on Android.
• Server logs: our servers record errors and requests with your account ID so we can keep the service running and fix problems.

Permissions on your phone

The app asks for each of these only when you use the feature that needs it, and you can turn any of them off in your phone's settings.

• Camera: to photograph items, run a Price Check or a Shelf Check, scan price tags, and record listing videos.
• Photos: to add the photos and videos you pick, and to save listing videos you record to your camera roll when you ask.
• Notifications: for an alert when an item you sold is still listed on another marketplace (so it doesn't sell twice), your weekly recap, reminders, and offers and rewards. When the app asks to send notifications it says what each is for. The sold-item alert has no switch in the app; the others each have their own switch in Settings, and offers and rewards are on only if you said yes to them. The app never needs notifications to work.
• Location (Tap to Pay only): Apple and Square require your location to accept card payments. Square's software uses it when you take a payment; we do not store it.
• Bluetooth and microphone (card readers only): asked only if you connect a supported Square card reader.
• Clipboard: read only when you tap Paste, for example to paste an invite code or a Depop sign-in link.

We do not collect your contacts or your calendar, we do not use your location for anything but Tap to Pay, and we do not track you across other companies' apps or websites.

Our partner program

Creators in our partner program share their own promo code and earn a share of what the subscribers who used it pay.

• Subscribers who use a partner's code: the partner's dashboard shows, for each subscriber who used their code, when they joined, their plan, whether they are paying, and what each payment earned the partner. It never shows your name, email or account ID.
• If you apply at vendorsnap.app/partners, we keep what you send (your name, email, where you post, your handle, about how many followers you have, your links and what you tell us about your content) to review your application and answer you.
• If you are a partner, we keep your name, the email addresses you sign in with, your code, the terms of your agreement, what we paid you and the posts you send us. You sign in with a link we email you. We keep only a scrambled (hashed) copy of each link and sign-in, and a sign-in ends after 30 days.

2. AI features

• Price Check and Shelf Check: the photo you check is sent to Google's Gemini AI to identify the items in it. A Shelf Check photo is the whole shot you saw on screen, so it can include anything else in view; leave people out of the shot. We do not keep Shelf Check photos: a find you save keeps only its own cropped photo. To estimate a price, the item's description is sent to eBay's Browse API, which returns current eBay asking prices (not sales).
• Stage with AI: the photo you choose is sent to Google's Gemini image model to make a staged copy. The staged photo is kept on your item only if you save it.
• Listing help (Pro): when a listing form on Facebook Marketplace, Vinted, Depop or Poshmark gets stuck, or asks for something your item's details don't match exactly, the names, states and shown text of the page's visible buttons and fields, the item's own listing details (such as its title, description, category, brand, size and fit, condition, colors, materials and pattern) and, on Facebook Marketplace, the ZIP or city, delivery method, meetup choices, shipping price or package weight and lowest offer you chose for the listing are sent to Gemini to suggest the next step or the closest choice the form offers, and the app tells you what it filled in. What you typed elsewhere on the form, your passwords, your sign-in cookies and what you paid for the item are never sent. Your item's title and description can be sent as you wrote them, so keep contact details out of them. When a suggestion works, the form step it fixed and the options it picked (the form's own words, and the value it was matching, such as a brand or size) may be kept without your name, email or account ID and offered to every seller's app, so that step works for them without asking again.
• Snappy, our help bot: when you chat with Snappy, the chat so far (what you type and Snappy's answers), the problem the app showed (its message, the marketplace and the screen) and your app version and type of phone (iPhone or Android) are sent to Gemini to answer. The app never adds your passwords, sign-in cookies or payment details to a chat, so don't type them in; sign-in links, email addresses, card numbers and most phone numbers you do type are taken out before Gemini or our team sees them. We keep each question you ask Snappy (with those taken out), Snappy's answer and the problem the app showed for 90 days, so we can see where the app confuses sellers and make help better; it is deleted with your account. A whole chat is kept only if you send it to us or report one of Snappy's answers.

Google handles these requests under its paid Gemini API terms, which do not let it use them to improve its products; it may keep them for a limited time to detect abuse.

3. Marketplaces and services you connect

• eBay and Etsy: you sign in on their own sites and approve access. We keep the access they grant on our servers to create, update and end the listings you ask for and to keep their status in sync, and we store each listing's ID, link and status. If you choose Import from eBay, we read your active eBay listings (their titles, prices, photos, descriptions and details) to show them to you, and copy the ones you pick into your VendorSnap inventory, photos included, linked to their eBay listings. You can disconnect in Settings › Sell Online, or revoke access on eBay or Etsy.
• Facebook Marketplace, Vinted, Depop and Poshmark: you sign in to them inside the app, in a browser that runs on your phone. Your sign-in stays on your phone: we never see or store your password or session. When you list an item, the app fills in their listing forms with the details and photos you chose. If you choose Import from Facebook, the app reads your Facebook Marketplace listings on your phone (their titles, prices, photos, descriptions and details) to show them to you, sends their titles and prices to our servers to check them against your items, and copies the ones you pick into your VendorSnap inventory, photos included, linked to their Facebook listings. A short diagnostic log of these steps stays on your phone unless you choose to share it with us, from Help & About or Troubleshooting, or with a help request from Snappy (where you can see what is sent first, with sign-in links, emails, card numbers and most phone numbers taken out).
• Square: if you connect Square for Tap to Pay or a card reader, we keep the authorization Square grants on our servers so the app can take payments for you, until you disconnect Square or delete your account. Square processes card payments under its own privacy policy.

What you publish on a marketplace is public there and governed by that marketplace's policies.

4. How we use information

• To run the app: your account, your shops, inventory, price tags, Price Check, listings, sales, receipts and tax summaries, kept in sync across your devices.
• To manage your subscription, offer codes and referral rewards.
• To run our partner program: crediting each partner for the subscribers who used their code, paying partners, and reviewing applications.
• To send notifications and emails: messages about your account and security, a welcome email and a few tips while you get started (each with an unsubscribe link), and, only if you agreed to them, offers and rewards.
• To answer your feedback and support requests.
• To keep VendorSnap secure, prevent abuse and fraud, and apply fair monthly and daily limits on costly features.
• To understand and improve the app from aggregate analytics, and to measure our own ads.

We do not sell your personal information and we do not show third-party ads.

If you are in the European Economic Area or the UK, we rely on: performing our contract with you (running the app you asked for), our legitimate interests (security, preventing abuse, improving the app, measuring our ads), and your consent (notifications, offers and rewards), which you can withdraw at any time.

5. Who we share it with

Their handling of your data is governed by their own privacy policies. Each gets only what its job needs: Resend receives your email address to deliver our emails, and a problem report, feedback or help request you send in the app (with your email address, account ID and device details, and for a help request or a Snappy answer you report, the problem the app showed, your chat with Snappy, what you typed and any log lines you chose to send) to deliver it to us, and a marketplace you connect receives the listings you create.

A partner whose promo code you used sees only what Section 1 (Our partner program) describes, never your name, email or account ID.

We may also disclose information when the law requires it, to protect the rights and safety of our users or others, or as part of a merger, acquisition or sale of our business, in which case this policy continues to apply to your information.

6. Storage and security

Data is stored on Google Cloud infrastructure in the United States. It is encrypted in transit with TLS, access is limited to your own account by security rules, and marketplace authorizations are kept only on our servers. Passwords are handled by Firebase Authentication; we never see them. No system is perfectly secure: we will notify you of any breach affecting your data as the law requires.

7. Keeping and deleting your data

We keep your data while your account is active, so your inventory and full sales history are there when you need them.

When you delete your account (Settings › Account › Delete Account), we delete your profile and shops, your items with their photos and videos, your sales records, your sourcing list and its photos, your marketplace connections and listing records, your Square connection (and we cancel the access Square gave us), your subscription status record and any partner's promo code you typed in the app, your usage counts (how many Price Checks and other allowances you used), your notification tokens, your invite code and referral records, and the problem reports and feedback you sent in the app (help requests from Snappy included), and the questions you asked Snappy, within 30 days; encrypted backups may keep them for up to 90 days. Of your referral records, we keep only a one-way fingerprint of a store subscription that already earned a referral reward, so the same subscription can't earn it twice.

Some things are not deleted by deleting your VendorSnap account:

• Listings that are still up on eBay, Etsy, Facebook Marketplace, Vinted, Depop or Poshmark. End them first (Remove in the app) or on the marketplace.
• Your purchase history with Apple, Google and RevenueCat, which they keep for billing.
• Aggregate analytics, which Google keeps without your name under our Analytics settings.
• Your answer to "why are you leaving?", if you give one when you delete your account. It is kept without your name, email or account ID. All that is kept with it is the month, your plan, whether you were on a trial, about how long you had the account, your type of phone (iPhone or Android) and the app version. A note you type is kept as written, so leave personal details out.
• The email copy of a problem report or feedback you sent in the app (your message, email address, account ID and device details, and for a help request from Snappy or an answer you reported, the problem the app showed, the chat and any log lines you chose to send), which reaches our inbox through Resend like any email you send us.
• Anything you shared yourself, such as a receipt you sent a customer.

Deleting an item also deletes its photos and videos. A sold item's sale stays in your sales history until you delete your account.

Partner applications and partner records are not part of an app account: email us to have yours deleted. We keep the record of what we paid a partner for as long as tax law requires.

8. Your choices and rights

You can:

• See and correct your profile, shops, items and sales in the app.
• Export your sales from the Tax Summary in Settings › Selling & Tax.
• Delete items, or your whole account, in the app.
• Choose your notifications in Settings › Notifications (the alert for an item you sold that is still listed elsewhere stays on while your phone allows notifications). Offers and rewards are on only if you said yes to them, and you can turn them off there at any time.
• Unsubscribe from our emails with the link in any of them.
• Disconnect a marketplace in Settings › Sell Online.
• Turn off permissions (camera, photos, notifications, location) in your phone's settings.

Depending on where you live, you may also have the right to request a copy of your data, to have it corrected or deleted, to object to or restrict some uses, and to complain to a data protection authority.

California residents: you have the right to know what personal information we collect and how we use and share it, to delete or correct it, and not to be treated differently for using these rights. We do not sell your personal information. We use Meta's SDK only to measure our own ads, and it receives no name, email, item or photo; if you want us to stop sending these events for your account, email us.

To use any right that the app doesn't cover, email support@vendorsnap.app from the address on your account. We will answer within 30 days.

9. Children

VendorSnap is for adults: you must be 18 or older to use it. It is not directed to children, and we do not knowingly collect information from anyone under 18. If you believe a child has given us information, email support@vendorsnap.app and we will delete it.

10. International users

VendorSnap is run from the United States, and your information is stored and processed there. By using the app from outside the United States, you understand that your information will be transferred there.

11. Changes to this policy

We may update this policy from time to time. Material changes will be announced in the app or by email at least 14 days before they take effect.

12. Contact

RJ Provisions LLC, doing business as VendorSnap
Email: support@vendorsnap.app