Legal
Privacy Policy
This Privacy Policy explains how Vendru Solutions ("Vendru", "we", "us") collects, uses, and protects information when you use the Vendru retail management platform, including our web application, the Vendru desktop Till, and the Vendru mobile app (together, the "Service"). By using the Service you agree to the practices described here.
How Vendru is set up. Vendru is business software used by retailers to manage their own operations. Your business records — products, stock, shops, sales, and accounting — are stored in the database controlled by your organization (the account owner). Vendru provides the software that reads and writes to that database; your organization is the controller of the business data you enter, and Vendru acts as a processor on its behalf.
1. Information we collect
Account information
When you or your organization creates a user, we process your name, email address, role, and the shop or company you are assigned to, so we can authenticate you and control access.
Business data you enter
The Service stores the operational data you and your team create — such as products, prices, barcodes, stock levels, shop and warehouse records, purchases, sales, returns, and accounting entries. This data belongs to your organization.
Device & notification data
If you enable push notifications, we store a push token for your device so we can deliver alerts (for example, incoming shipments or important events). You can turn notifications off in your device settings at any time.
AI assistant (Mizan)
When you ask the Mizan assistant a question, your query and the relevant business context are sent to a third-party AI provider to generate a response. Queries are used only to answer you and are not used to advertise to you.
Diagnostics
We may collect limited technical information — such as app version, device type, and error logs — to keep the Service reliable and to diagnose problems.
2. How we use information
- To provide, secure, and operate the Service and sync your data across devices.
- To authenticate users and enforce role-based access.
- To send operational push notifications you have enabled.
- To power features you use, including the Mizan AI assistant.
- To provide support and to maintain, troubleshoot, and improve the Service.
- To comply with legal obligations.
We do not sell your personal information, and we do not use it for cross-app tracking or advertising.
3. How information is shared
We share information only as needed to run the Service:
- Infrastructure & hosting providers that store and transmit data on our or your organization's behalf.
- Push notification services (Apple Push Notification service and Google Firebase Cloud Messaging) to deliver notifications.
- AI providers that process Mizan assistant queries to return answers.
- Legal authorities where required by law.
Your organization's business data is accessible to the users your organization authorizes.
4. Data retention
We retain account and business data for as long as your organization's account is active or as needed to provide the Service. When an account is closed, data may be deleted or returned to your organization in accordance with your agreement. Because business data is held in the database your organization controls, retention of that data is ultimately determined by your organization.
5. Security
We use industry-standard measures — including encrypted connections (HTTPS/TLS) and access controls — to protect information. No method of transmission or storage is completely secure, but we work to protect your data and to promptly address issues.
6. Your rights
Depending on your location, you may have the right to access, correct, export, or delete your personal information, or to object to or restrict certain processing. Because your data lives in your organization's account, please direct such requests to your organization's account owner, or contact us and we will help facilitate the request.
7. Children
The Service is a business tool intended for use by businesses and is not directed to children. We do not knowingly collect personal information from children.
8. International users
Vendru is operated from Kuwait and serves customers in Kuwait and the wider GCC. If you use the Service from elsewhere, you understand that your information may be processed in the countries where our infrastructure providers operate.
9. Changes to this policy
We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above. Continued use of the Service after changes take effect constitutes acceptance of the updated policy.
10. Contact us
Questions about this policy or your data? Contact us at privacy@vendru.net.
← Back to Vendru