Privacy Policy

Vendora is operated by Takshalabs ("we", "us"). This policy explains what personal data we handle, why, who we share it with and the choices you have. It covers two groups of people: users who create an account, and people who appear in lead lists because their business details are public.

Data about users

• Account data: name, email address and a hashed password.
• Content you create: your ideal customer profile, chats with the research agent, saved leads, imported CSV files, jobs and exports.
• Billing data: your plan, subscription status and credit ledger. Card details are handled by our payment provider and never reach our servers.
• Technical data: IP address, browser, request logs and error reports, used for security, abuse prevention and debugging.

Data about people in lead lists

When you research a company, the service collects business contact information that is already public: names and job titles shown in search results, work email addresses published on company websites or public web pages, and email addresses a person has publicly placed in open-source commits. We never log in to LinkedIn or access private profiles. Your own leads, notes, scores and searches are visible only to you and your workspace. To avoid searching the same public sources again for every customer, public company facts (website, published inboxes, email pattern) and public business details of people at a company (name, job title, public profile link and a work email address that was published on a public source) are kept in a shared directory that other users researching the same company can see. Addresses supplied by paid email-lookup providers and addresses we only guessed are not added to it. Entries are re-checked about every 90 days, and an address reported as undeliverable is removed.

If you are listed and want to be removed, use the removal request page or email hello@takshalabs.in. We delete the data from every account and from the shared directory, and add the address to a suppression list so it is not collected again.

Why we use data

• To provide the service: run research, find and verify emails, show results, export CSV and charge credits (contract).
• To keep it secure and prevent abuse, and to comply with law (legitimate interests, legal obligation).
• For lead data: our and our users' legitimate interest in B2B prospecting, balanced against the individual's rights. You can object at any time.

We do not sell personal data and do not use it for advertising.

Who we share it with

Service providers that process data on our behalf, only as needed to run the service:

• Hosting and infrastructure: Vercel, Supabase (database), Upstash (cache and rate limits).
• AI models: OpenRouter, OpenCode and the Vercel AI Gateway, which receive prompts, company names and public page text.
• Research and verification: Serper or Brave (search), Firecrawl (page fetching), Hunter (email lookup and verification), GitHub (public commit data).
• Payments: Dodo Payments, our merchant of record.

We may disclose data when required by law or to protect our rights.

Retention

Account content is kept until you delete it or your account. Deleting your account removes your profile, chats, leads, jobs and workspace data; we keep the billing ledger for as long as tax and accounting law requires. Suppression entries are kept so removed people are not added again. To stop the free credits being claimed twice, we keep a one-way hash of your email address (not the address itself) after the account is deleted. Backups expire on the schedule of our database provider.

Cookies

We use one essential session cookie and a few settings stored in your browser. See the Cookie Policy.

Your rights

Depending on where you live (for example under the GDPR or Indian DPDP Act) you can ask to access, correct, export or delete your data, to object to or restrict processing, and to complain to your data protection authority. Users can delete their account in Settings. For anything else write to hello@takshalabs.in.

International transfers

Our providers may process data outside your country. Where required we rely on standard contractual clauses or equivalent safeguards.

Security

Data is encrypted in transit, access is scoped per account, and secrets are never exposed to the browser. No system is perfectly secure; report issues to hello@takshalabs.in.

Children

The service is for businesses and is not directed at anyone under 18.

Changes and contact

We will update this page when practices change and note the date above. Questions: hello@takshalabs.in.