Privacy Policy

Vendelo is a service that lets online sellers create, host and sell from product landing pages. This policy explains what personal data Vendelo handles, why, who it is shared with, and how to reach us.

In this policy, "Vendelo", "we" and "us" mean the operator of the Vendelo service. A "seller" is a person or business with a Vendelo account. A "buyer" is a person who visits or orders from a landing a seller publishes on Vendelo.

Vendelo plays two roles, so this policy has two parts:

• For sellers, we are responsible for the account data we collect to run the service (section 1).
• For buyers, each seller is responsible for the data collected on their own landings: they decide what to sell, which order fields to require and what to do with each order. Vendelo stores and processes that data on the seller's behalf and on the seller's instructions (section 2).

1. Data about sellers

What we collect

• Account: name, email address, password (kept only as a one-way hash by our authentication provider), language and time-zone preferences, and the role each team member has in the seller account.
• Stores and pages: store name, country, currency, WhatsApp number, logo and brand colours, the Mercado Pago payment link and own-store links you add, the advertising pixel IDs you enter, your custom domains, and everything you put on your pages (copy, photos, prices, variants, offers and the reviews you publish).
• Products: the product links you paste, the product data read from those links, the photos you upload, and the listings you import from Mercado Libre (title, variants, photos and stock).
• Generated content: the sales copy, product photos, ad copy and ad creatives Vendelo generates for you, and the record of each generation (its steps, timing and result).
• Billing: your plan, subscription status and invoices. Card details are entered on, and kept by, our payment processor; we never see or store full card numbers.
• Security and usage: sign-in events, sessions, IP address and browser information used to secure accounts and limit abuse, your quota usage, and an audit log of administrative actions.
• Support: the messages you send us.

Why we use it

To provide the service you signed up for: build and host your pages, read the links you paste, generate copy and photos, deliver orders to your panel, send you service notifications (for example a new order or a finished generation), bill your plan and apply its limits, keep accounts secure, prevent abuse and answer your support requests.

Reading product links

When you paste a product link, Vendelo's servers fetch that page to read the product's title, price, photos and description. Each time, you confirm that you have the right to sell that product and to use its photos and text (see the Terms of Use).

Mercado Libre and Mercado Pago connections

• Mercado Libre: connecting your account uses Mercado Libre's own authorization screen; we never ask for your Mercado Libre password. With your authorization, Vendelo reads your own listings (variants, photos and stock), receives Mercado Libre's notifications about them, and publishes a listing when you ask it to. The access tokens are stored encrypted and are used only for your account.
• Mercado Pago (optional): connecting it works the same way and lets Vendelo create a payment for an order on your behalf. If you only paste a payment link, Vendelo stores that link and nothing else.
• You can disconnect either account at any time in Settings → Connections, and you can also revoke Vendelo's access from Mercado Libre or Mercado Pago directly.

AI processing

To generate copy and photos, Vendelo sends the product data and photos involved to the AI services it uses (a language-model service for text and an image-generation service for photos). They process that content to return the result. Please do not put other people's personal data into your product content.

2. Data about buyers on sellers' landings

When a buyer places a cash-on-delivery order

The order form collects:

• name and phone number;
• the delivery address fields used in the buyer's country (for example department, municipality, neighbourhood, street, postal code and delivery references);
• an email address and a national ID number, only when the seller asks for them;
• the order itself: product, variant, quantity, offer, any add-on, total and currency.

Vendelo also records the buyer's cookie and pixel consent choice, the campaign tags in the page address (UTM tags), and a one-way hash of the buyer's IP address, used to detect duplicate and fraudulent orders.

Other buyer actions

• WhatsApp: the WhatsApp button opens a conversation between the buyer and the seller in WhatsApp. Vendelo counts the click; it does not see the conversation.
• Mercado Pago, Mercado Libre and the seller's own store: these buttons take the buyer to that platform, where payment and checkout happen under that platform's own privacy policy. Vendelo counts the click.
• Reviews: when a seller sends a review link after a delivery, the review the buyer writes (the name they give, a rating and a text) is stored for that seller to publish.
• Visits: Vendelo counts visits to each landing without cookies, using a daily-rotating anonymous identifier computed from the IP address and browser. The IP address itself is not stored.
• Advertising pixels: if a seller adds Meta, TikTok or Google pixels to their store, those pixels load according to the consent setting the seller chose and the buyer's choice in the consent banner. Data a pixel sends goes to that advertising platform under the seller's account and that platform's policy.
• Bot protection: the order form and the report form may use Cloudflare Turnstile to tell people from automated traffic.
• On the buyer's device: the landing keeps the buyer's consent choice and shopping cart in the browser's local storage, and a per-visit order identifier in session storage so that tapping "order" twice never creates two orders.

How buyer data is used and who sees it

Each order goes to the seller's orders panel, where the seller and their team confirm, ship and manage it, and may export it as a CSV file for the delivery or fulfilment company they work with. Vendelo uses buyer data only to deliver the order to the seller, protect the forms against abuse and keep the service running. We do not use it for our own marketing and we do not sell it.

Buyers' requests

A buyer who wants to see, correct or delete their data should contact the seller first; the landing shows how to reach them. Buyers can also write to us: we pass the request to the seller and act on it on the seller's instruction, or as the law that applies to us requires.

3. Service providers

We use these providers to run Vendelo. Each one processes data only to provide its service to us.

Some of these providers are located outside the seller's or buyer's country, for example in the United States.

4. How long we keep data

• Seller accounts: for as long as the account is open. When a seller asks us to close their account, we delete the account together with its stores, pages, products and orders, except records we are required to keep by law, such as invoices.
• Orders and other buyer data: in the seller's account for as long as the seller keeps them, or until we delete them on the seller's instruction.
• Visit statistics: as daily totals per landing.
• Deleted data can remain in encrypted backups for a limited time before it is overwritten.

5. Security

Vendelo serves every page over HTTPS, separates each seller's data from every other seller's at the database level, stores marketplace connection tokens and provider keys encrypted, and gives each team member only the access their role allows (owner, member or viewer).

6. Children

Vendelo is a service for sellers and is not directed at children.

7. Changes to this policy

When we change this policy we update it here and change the date at the top. We tell sellers about significant changes by email or in the app.

8. Contact

Write to the support address shown on this site, or use the contact options on the Help page. Buyers with a question about a specific order should contact the seller first.