Vend Minimum Privacy Standards

In using the Vend API to develop and/or integrate your app or add-on with the Vend platform, you agree to comply with these Minimum Privacy Standards when you handle or collect personal information relating to Vend retailers, customers of those retailers, or other individuals:

1. Make available on your website and/or in your app a Privacy Policy which clearly explains to users:
   • what personal information your app or add-on collects
   • how you collect and use that information
   • who you intend to share that information with
   • in which country or countries that information is likely to be stored and accessible from
   • and any other details that you are required to disclose under applicable privacy laws
2. Comply with applicable laws in the way in which you collect, use, store and disclose personal information. In some countries this will mean you need to obtain express consent from users before collecting any personal information about them. If you’re unsure what your legal obligations are, get legal advice so that you understand what’s required of you.
3. Be upfront and transparent with users about what you propose doing with their personal information.
4. Only collect as much information you need for your app to function properly and to deliver the services you agree to provide to users – no stockpiling or fishing expeditions.
5. Make clear to users that you – and not Vend – are responsible for safeguarding their personal information that you choose to collect and use.
6. Keep personal information encrypted and secure in accordance with the Vend Developer Security Requirements.