Privacy Policy

1. Information We Collect

When you create an account, we collect your name, email address, company name, and password (stored in hashed form). When you use our services, we collect supplier names, screening results, uploaded documents, and usage data to provide and improve our compliance screening services.

2. How We Use Your Information

We use your information to:

• Provide supply chain screening and compliance services
• Generate compliance documentation packs
• Send notifications about entity list updates and screening results
• Process payments and manage your subscription
• Improve our matching algorithms and service quality

3. Data Storage and Security

Your data is stored in encrypted databases hosted in the United States. We use industry-standard security measures including TLS encryption in transit, encrypted storage at rest, and secure authentication protocols. We do not sell your data to third parties.

4. Third-Party Services

We use the following third-party services to operate VettedImport:

• Stripe for payment processing
• Vercel for frontend hosting
• Render for backend hosting
• Neon/Supabase for database hosting

Each of these services has their own privacy policies governing how they handle data.

5. Data Retention

We retain your account data and screening history for as long as your account is active. Uploaded documents are retained for the duration of your subscription. You may request deletion of your data at any time by contacting us.

6. Your Rights

You have the right to:

• Access your personal data
• Request correction of inaccurate data
• Request deletion of your data
• Export your data in a portable format
• Opt out of non-essential communications

7. Contact Us

If you have questions about this privacy policy or your data, please contact us at privacy@vettedimport.com.