Privacy Policy

Last updated: May 22, 2026

This Privacy Policy explains how Modern Amenities (“VendHub,” “we,” “us”) collects, uses, shares, and protects information when you use the VendHub platform and related services (the “Service”). It applies to operators, their authorized team members, and visitors to our websites. By using the Service, you agree to this Policy, which is part of our Terms of Service.

1. Information We Collect

• Account and contact data. Name, email, phone number, business name, role, and similar information you provide when registering, completing onboarding, or contacting us.
• Organization and operational data. Business address, tax-exemption status, supplier enrollments, routes, locations, machines, inventory, orders, receipts, and similar records you create or upload while running your business in the Service.
• Payment data. Subscription billing details and payment method identifiers. Card and bank details are collected and stored directly by our payment processor (Stripe); we receive only tokens and last-4 references.
• Communications. Messages you send us (support requests, inquiries) and metadata about communications sent through the Service (email, SMS, voice), including delivery and engagement events. Voice agent calls may be recorded and transcribed.
• Lead and prospect data. Information about prospective vending locations sourced from public records, third-party feeds (including Google services), and similar sources. May include business names, addresses, phone numbers, and limited information about decision-makers.
• Operator-published-site visitor data. When your customers, prospects, or other third parties interact with sites you publish through VendScout (for example by submitting an inquiry form or signing a contract), VendHub processes that data on your behalf. You are the controller; we are the processor.
• Usage and device data. IP address, browser and device information, pages visited, actions taken in the Service, session recordings, and error reports, collected automatically through tools such as PostHog and Sentry.
• Cookies and similar technologies. Used for authentication, session management, security, analytics, and remembering preferences. See Section 5.

We do not intentionally collect sensitive personal information (such as SSNs, biometric data, precise geolocation beyond IP, or health information). If you provide sensitive information directly (for example, an EIN typed into Stripe’s onboarding form), it is handled by the relevant processor under its own terms.

2. How We Use Information

We use information to:

• Operate the Service. Authenticate users, prevent fraud, process subscriptions, marketplace orders, payouts, and related transactions, and secure our infrastructure.
• Coordinate with counterparties. Share information with suppliers, financing providers, and other parties at your direction to complete transactions.
• Communicate. Send transactional, operational, and account messages, and send marketing communications (you may opt out).
• Support. Respond to inquiries and troubleshoot issues.
• Analytics. Generate de-identified analytics and benchmarks across operators.
• Legal. Comply with legal obligations and enforce our Terms.

3. How We Share Information

• Service providers and sub-processors. We rely on third-party providers to operate the Service, including Clerk (authentication), Supabase (database and storage), Vercel (hosting), Stripe (payments), Resend (email), Twilio and Retell (SMS and voice), PostHog (analytics), Sentry (error monitoring), Google (mapping and lead data), and AI providers used to power automated features. These providers process information only on our behalf and under contractual privacy and security commitments.
• Suppliers and counterparties. When you place an order, request enrollment, or initiate financing, we share the information needed to complete the transaction with the relevant Supplier, manufacturer, distributor, or financing provider.
• Operator-controlled sharing. Content you publish (operator websites, listings, contracts, outreach messages) is shared by you with the audiences you choose.
• Legal and safety. We may disclose information when required by law, subpoena, or other legal process, or when we believe disclosure is necessary to investigate fraud, protect the rights, property, or safety of any person, or comply with regulatory obligations.
• Business transfers. If we are involved in a merger, acquisition, financing, or sale of assets, information may be transferred as part of that transaction.

We do not sell personal information. We do not share personal information for cross-context behavioral advertising or targeted advertising as those terms are defined under U.S. state privacy laws.

4. Operator-Controlled Data

For information you create or upload while operating your business in the Service (including routes, customers, prospects, and communications), and for information your customers or prospects provide on sites you publish, you are the data controller (or equivalent under applicable law) and VendHub acts as a service provider or processor. You are responsible for the legal basis for your collection and use of that data, for honoring data-subject requests, and for complying with applicable laws (including the TCPA, CAN-SPAM, do-not-call rules, and consent requirements for SMS and voice outreach).

5. Cookies and Tracking

We use cookies and similar technologies for authentication, security, analytics, and feature functionality. You can control cookies through your browser settings; disabling some cookies may break parts of the Service. We honor recognized opt-out signals (including Global Privacy Control) where required by applicable law.

6. Data Retention

We retain personal information for as long as your account is active and as needed to provide the Service. After account closure we may retain information for a reasonable period to resolve disputes, enforce agreements, comply with legal obligations (including tax recordkeeping), and protect against fraud. De-identified or aggregated information may be retained indefinitely.

7. Security

We use commercially reasonable administrative, technical, and physical safeguards (including encryption in transit, access controls, audit logging, and secret management) to protect personal information. No system is perfectly secure; we cannot guarantee absolute protection. Notify us promptly if you suspect a security incident affecting your account.

8. Your Rights and Choices

Depending on where you live, you may have the right to:

• Access. Request the personal information we hold about you.
• Correction. Request that we correct inaccurate personal information.
• Deletion. Request that we delete personal information.
• Portability. Receive a portable copy of your personal information.
• Marketing opt-out. Opt out of marketing communications at any time.
• Processing opt-out. Opt out of certain sharing or processing. We do not sell or use information for targeted advertising, but you may still submit a request.
• Authorized agent. Designate an authorized agent to make a request on your behalf.
• Appeal. Appeal a decision we make about your request, in states that require appeal rights (including Virginia and Colorado).

To exercise a right, contact us at vendhub@modern-amenities.com. We will verify your request using information we already have and will respond within the timeframe required by applicable law. You will not be discriminated against for exercising your rights.

9. State-Specific Disclosures

Residents of California, Colorado, Connecticut, Oregon, Texas, Utah, Virginia, and other states with consumer privacy laws have additional rights regarding personal information. The categories of information we collect, the purposes for which we use them, the categories of recipients with whom we share information, and our retention practices are described above in Sections 1 through 6. We do not sell personal information or use it for cross-context behavioral advertising. To submit a request, contact us at the address in Section 13.

10. Children’s Privacy

The Service is not directed to individuals under 18 and we do not knowingly collect personal information from children. If you believe a child has provided us personal information, contact us and we will delete it.

11. International Users

The Service is operated in the United States and personal information is processed in the United States. If you access the Service from outside the United States, you consent to the transfer of your information to the United States.

12. Changes to This Policy

We reserve the right to modify, update, or replace this Policy at any time, at our sole discretion. When we make material changes, we will provide notice by posting the updated version and, where required, by email or through the Service at least 30 days before they take effect. Your continued use of the Service after the effective date constitutes acceptance of the revised Policy.

13. Contact

Modern Amenities (VendHub)
Attn: Privacy
vendhub@modern-amenities.com