Privacy Policy

1. Who this policy covers

Vendr Inc operates vendr.fun and the Vendr application. This policy explains how we handle personal information when you visit, request access, create an account, connect a wallet, buy a gift card or contact support. For privacy requests, email support@vendr.fun. This policy covers Vendr’s own processing, not the separate privacy practices of a blockchain, wallet provider, Relay, gift-card supplier or merchant.

2. Information we process

Account and contact details: your email address, account identifier, invite-code use, authentication events and preferences you provide. Wallet and transaction information: wallet address, network, payment asset, blockchain transaction identifiers, order and quote history, payment state and related public onchain activity. Purchase and delivery information: product, denomination, fee, supplier status, delivery email, claim and refund history. We retain access to gift-card codes only as long as needed to deliver them and resolve claims. Technical and security information: IP address, approximate location inferred from it, browser and device details, timestamps and session data used to protect access, enforce geographic rules and investigate abuse. Communications: messages to support and information you send us about a problem. We record essential product events such as a quote, payment, delivery or error to operate and improve the service. Public blockchain transactions may be visible to anyone and cannot generally be erased by Vendr. Do not send us sensitive identity documents unless we ask for them through an appropriate secure channel.

3. Why we use it

We use this information to create and protect accounts, validate eligibility and access codes, generate quotes, complete and deliver orders, enforce purchase limits, investigate payment or code problems, provide support, prevent fraud and abuse, satisfy legal obligations, and measure product reliability. Transactional emails concern access, orders, delivery, security and support. We send optional marketing emails only when you opt in. You can opt out using the link in an email or by contacting us. Opting out does not stop essential order or security emails. Where applicable law requires a legal basis, we rely on providing the service you request, complying with legal obligations, our legitimate interests in securing the service and resolving claims, or your consent for marketing. You may withdraw marketing consent at any time.

4. Who receives information

We share only what is needed with providers that operate authentication and wallets, blockchain routing and transaction execution, hosting and security, email delivery, customer support, and gift-card supply and fulfillment. A supplier receives order details required to issue a code and investigate invalid-code claims. Relay and other routing participants process transaction data needed for execution. Blockchain transaction information becomes public by the nature of the network. We may disclose information to professional advisers, authorities or other parties when legally required, to investigate misuse, to protect rights and safety, or as part of a lawful business transaction. Providers may act under their own privacy terms when they independently determine how to process information. We do

not describe every provider as a partner or imply endorsement.

5. International processing and retention

Vendr and its service providers may process information in countries other than your own. Where a transfer mechanism is required, we use an appropriate legal safeguard. We keep order, payment and accounting records for seven years after an order, or longer if law or an active dispute requires. We delete an inactive account and its nonessential profile data after two years of inactivity. We keep routine security and access logs for up to 90 days, and support conversations for two years after a case closes, unless needed for an investigation or legal claim. We delete or de-identify information after these periods when no longer required. Public blockchain records remain available independently of Vendr.

6. Cookies and security

We use essential cookies or similar browser storage to keep you signed in, remember necessary choices and protect the service. Your browser can restrict these, although essential features may stop working. We do not use advertising cookies under this policy. We limit access to personal information to those who need it to operate and support Vendr, use account access controls, and review suspicious activity. No system is perfectly secure. If you believe your account or information has been compromised, email support@vendr.fun.

7. Your choices and rights

Depending on where you live, you may ask to access, correct, delete or receive a copy of personal information, object to or restrict some processing, or withdraw consent where consent is the basis. You may also complain to a relevant privacy regulator. Send requests to support@vendr.fun; we may need to verify your identity before responding. A request may be limited where we must keep records for a legal obligation, dispute or fraud prevention. We cannot delete public blockchain records. Vendr is intended for people aged 18 or over. If you believe a minor has provided personal information, contact us so we can review and take appropriate action.

8. Changes and contact

We may update this policy as the product, providers or law change. We will post the updated version with a new effective date and give additional notice when required. Privacy questions and requests: support@vendr.fun.