Privacy Policy

1A. Information You Provide Directly

• Company name, legal business name, DBA
• Contact information (email address, phone number)
• Business address and mailing address
• Tax identifiers (e.g., EIN, TIN)
• Goods and services descriptions
• Uploaded documents (PDF vendor packets, forms)
• Communications with our support team

1B. Information Collected Automatically

• IP address
• Browser type and device information
• Log data (timestamps, actions taken within the app)
• Authentication metadata (via Supabase)

This information is used for security, debugging, and product improvement.

1C. Information from the Browser Extension

If you install and use the VendorFill browser extension, we may read form field labels and structure on third-party websites only when you explicitly activate autofill, and temporarily use your VendorFill profile data to populate forms.

• Provide and operate the VendorFill Services
• Automatically populate vendor and supplier forms
• Generate filled, downloadable PDFs
• Maintain upload history and usage tracking
• Enforce plan limits and billing rules
• Improve accuracy and performance of our AI models
• Communicate with you about your account or service updates
• Ensure security, prevent fraud, and comply with legal obligations

VendorFill uses AI models to assist with mapping profile data to PDF form fields and interpreting vendor packet structure.

We do not train AI models on your private documents for public or external use. Uploaded files are processed solely to provide the requested service.

• User authentication and profile data are stored securely using Supabase
• Filled PDFs are stored in secure object storage with time-limited signed download links
• Upload history metadata (file name, size, confidence score) is stored for user reference

We apply reasonable technical and organizational safeguards to protect your data.

• Account data is retained while your account remains active
• Uploaded files may be deleted by you at any time from your dashboard
• Deleted files are permanently removed from our systems within a reasonable timeframe

We do not sell your personal or business data.

We may share limited information with trusted service providers strictly to operate the platform, such as hosting and infrastructure providers, authentication and security services, and email delivery providers (for transactional emails only). All providers are contractually required to protect your information.

VendorFill uses minimal cookies necessary for authentication, session management, and security. We do not use third-party advertising trackers.

Depending on your jurisdiction, you may have the right to access the data we hold about you, correct inaccurate information, delete your account and associated data, and withdraw consent where applicable.

Requests can be made by contacting us at the email below.

VendorFill is not intended for individuals under the age of 18. We do not knowingly collect personal data from children.

We implement industry-standard security measures, but no system can be guaranteed 100% secure. You are responsible for maintaining the confidentiality of your login credentials.

We may update this Privacy Policy from time to time. When we do, we will update the “Last Updated” date and, where required, notify users of material changes.

If you have questions about this Privacy Policy or your data, contact us at: