Privacy Policy

Overview

This Privacy Policy explains how VendorIntel ("VendorIntel," "we," "us," or "our") collects, uses, and protects information when you visit our website at vendorintel.ai, submit a demo request, or use our platform as a client.

VendorIntel is a business-to-business (B2B) platform. Our services are designed for and marketed exclusively to business professionals — primarily franchise operators, vendor management teams, and procurement leaders. We do not knowingly collect data from consumers or individuals acting in a personal capacity.

By using our website or platform, you acknowledge the practices described in this policy.

Who We Are

VendorIntel is a software-as-a-service (SaaS) company providing vendor intelligence and relationship management tools to franchise organizations operating in the United States.

For the purposes of applicable data protection law, VendorIntel is the data controller for personal information collected through our website and demo intake process. For personal information processed within our platform on behalf of our clients, VendorIntel acts as a data processor.

Contact: hello@vendorintel.ai

Data We Collect

We collect information in the following categories:

1. Business Contact Information

Collected when you submit a demo request, contact us, or register for access to the platform:

• First and last name
• Business email address
• Job title and role
• Company or franchise brand name
• Phone number (if voluntarily provided)
• Franchise network size
• Product interest (VIP, VRM, or VIQ)

2. Platform Usage Data

Collected automatically when you use the VendorIntel platform as a logged-in user:

• Login timestamps and session data
• Features accessed and actions taken within the platform
• Device type, browser, and operating system
• IP address

3. Vendor Performance Data

Submitted by franchisor clients through the platform in the course of using VendorIntel's core services:

• Vendor names, performance scores, and relationship records
• Franchisee satisfaction data submitted on behalf of client organizations
• Pricing and compliance data associated with vendor relationships

This data is owned by the client organization submitting it. VendorIntel processes it solely to provide the contracted service.

4. Website Analytics Data

Collected automatically when you visit our website:

• Pages visited and time spent on each page
• Referring website or source
• Browser type and device information
• General geographic location (country/region level)

How We Use Your Data

We use the information we collect for the following purposes:

We do not use your personal information for automated decision-making or profiling that produces legal or similarly significant effects.

Demo Request Form Data

Demo request data is stored securely in our CRM system (Airtable). It is accessed only by VendorIntel team members responsible for sales and client communications.

If you submitted a demo request and no longer wish to be contacted, you can opt out at any time by emailing hello@vendorintel.ai with the subject line "Unsubscribe" and we will remove you promptly.

Data Sharing & Third Parties

We do not sell personal data. We do not sell, rent, trade, or otherwise transfer your personal information to third parties for their own commercial purposes.

We may share information with trusted third-party service providers who assist us in operating our business, strictly under confidentiality agreements and only to the extent necessary to perform their services. These include:

• Airtable — CRM and data storage for demo request and lead information
• Google Analytics — Website analytics and traffic measurement
• Email and communication tools — Used for outreach and client communication
• Cloud infrastructure providers — Hosting and platform operations

We may also disclose information where required by law, legal process, or regulatory authority, or where necessary to protect the rights, property, or safety of VendorIntel, our clients, or others.

In the event of a merger, acquisition, or sale of all or a portion of our assets, personal information may be transferred as part of that transaction. We will notify affected individuals via email or a prominent website notice prior to any such transfer.

Cookies & Analytics

Our website uses cookies and similar tracking technologies to understand how visitors interact with our site and to improve the experience for everyone.

What we use

• Essential cookies — Required for the website to function correctly. These cannot be disabled.
• Analytics cookies — We use Google Analytics to collect anonymised data about website traffic and usage patterns. This helps us understand which pages are most useful and how visitors navigate the site. Google Analytics data is aggregated and does not identify individual visitors.

Your choices

You can control cookies through your browser settings. Most browsers allow you to refuse cookies, delete existing cookies, or be notified when a cookie is set. Please note that disabling certain cookies may affect the functionality of our website.

To opt out of Google Analytics tracking specifically, you can install the Google Analytics Opt-out Browser Add-on.

Because VendorIntel primarily serves business professionals and does not operate a consumer-facing platform, we do not currently display a cookie consent banner for analytics. If you are visiting from a jurisdiction that requires explicit cookie consent and prefer not to be tracked, please disable analytics cookies through your browser settings.

Data Retention

We retain personal information only for as long as necessary to fulfil the purposes for which it was collected, or as required by law.

• Demo request data — Retained for up to 24 months from the date of submission, or until you request deletion.
• Client platform data — Retained for the duration of the client contract and for a reasonable period thereafter as required by our data processing agreements. On termination, client data is deleted or returned per the terms of the agreement.
• Website analytics data — Retained per Google Analytics default settings (typically 26 months).

When data is no longer required, it is securely deleted or anonymised.

Your Data Rights

Regardless of where you are located, VendorIntel respects your right to understand and control how your personal information is handled. You have the right to:

• Access — Request a copy of the personal information we hold about you.
• Correction — Ask us to correct inaccurate or incomplete information.
• Deletion — Request that we delete your personal information, subject to any legal obligations we have to retain it.
• Restriction — Ask us to restrict processing of your data in certain circumstances.
• Objection — Object to processing based on our legitimate interests.
• Portability — Request a machine-readable copy of data you have provided to us.
• Opt-out of communications — Unsubscribe from marketing communications at any time.

To exercise any of these rights, please contact us at hello@vendorintel.ai. We will respond within 30 days. We may need to verify your identity before processing certain requests.

We will not discriminate against you for exercising any of your privacy rights.

California Residents — CCPA/CPRA

If you are a California resident, the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA) provides you with specific rights regarding your personal information.

Categories of information collected

In the preceding 12 months, VendorIntel has collected the following categories of personal information from business contacts:

• Identifiers (name, email address, IP address)
• Professional or employment-related information (company, job title)
• Internet or other electronic network activity (website usage data)
• Geolocation data (general, at country/region level only)

We do not sell or share your personal information

VendorIntel does not sell personal information as defined under the CCPA/CPRA. We do not share personal information with third parties for cross-context behavioral advertising purposes.

Your California rights

• Right to Know — You may request disclosure of the categories and specific pieces of personal information we have collected about you.
• Right to Delete — You may request deletion of personal information we have collected, subject to certain exceptions.
• Right to Correct — You may request correction of inaccurate personal information.
• Right to Opt-Out of Sale/Sharing — As noted above, we do not sell or share personal information for advertising purposes. No opt-out is required, but you may contact us to confirm.
• Right to Non-Discrimination — We will not discriminate against you for exercising your CCPA/CPRA rights.

To submit a request, email hello@vendorintel.ai with the subject line "California Privacy Request." We will respond within 45 days as required by law.

Authorised agents

California residents may designate an authorised agent to submit requests on their behalf. We may require verification of the agent's authority and your own identity before processing such requests.

International Visitors & GDPR

VendorIntel is a United States-based company and our platform is primarily designed for the US market. However, we recognise that some visitors to our website or contacts may be located in the European Economic Area (EEA), United Kingdom, or other jurisdictions with data protection laws.

If you are located in the EEA or UK, you may have additional rights under the General Data Protection Regulation (GDPR) or UK GDPR, including the rights described in the "Your Data Rights" section above.

Our lawful bases for processing personal information from EEA/UK contacts are primarily:

• Legitimate interests — For responding to business inquiries and improving our services
• Pre-contractual steps — For processing demo requests from prospective clients
• Contract performance — For serving existing platform clients

By submitting information to VendorIntel from outside the United States, you acknowledge that your information may be transferred to and processed in the United States, where data protection laws may differ from those in your country. We take appropriate measures to ensure your information is handled responsibly regardless of where it is processed.

If you have concerns about how we handle your data and are located in the EEA, you have the right to lodge a complaint with your local supervisory authority.

Security

We take the security of your information seriously. VendorIntel implements appropriate technical and organisational measures to protect personal information against unauthorised access, alteration, disclosure, or destruction.

These measures include:

• Encrypted data transmission (HTTPS/TLS) across all platform surfaces
• Access controls limiting data access to authorised personnel only
• Regular review of our security practices and third-party service providers
• Secure credential management for platform accounts

No method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security. In the event of a data breach that affects your rights and freedoms, we will notify you as required by applicable law.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will update the "Last Updated" date at the top of this page.

For significant changes that affect how we use your personal information, we will provide notice by email (if you are an existing contact) or by posting a prominent notice on our website prior to the change taking effect.

We encourage you to review this policy periodically to stay informed about how we protect your information.

Contact Us

If you have any questions about this Privacy Policy, want to exercise your data rights, or have a privacy concern, please reach out to us. We are committed to resolving privacy inquiries promptly and transparently.