Privacy Policy

1. Scope and Our Role

This policy covers the VNDR Network platform and the vndrnetwork.com website. VNDR Network is a business-to-business service used by insurance carriers, restoration vendors, and their personnel.

• For account and organization information - names, work emails, roles, and organization profiles - we act as the business responsible for the data and this policy describes what we do with it.
• For claim and customer information that a carrier submits with a job, we act as a service provider on that carrier’s behalf. We process it to run the platform and under our agreement with the carrier, not for our own purposes.

If you are a policyholder or property occupant whose details appear on a job, the carrier that submitted the job is your first point of contact for questions about that data. You may also write to us at support@vndrnetwork.com and we will route your request to them.

2. Information We Collect

• Account information - name, email address, a hashed password, optional profile image, platform and organization roles, email verification status, and account status.
• Organization information - organization name, type (carrier or vendor), business address including derived map coordinates, phone number, email address, service areas by ZIP code, job types served, and performance scorecards.
• Job and claim information - job descriptions, claim numbers, dates of loss, property addresses and their map coordinates, job status history, uploaded photographs, issues raised on a job, and the reasons vendors give when they decline an offer.
• Customer contact information - the name, phone number, and email address of the policyholder or property contact, when a carrier includes them with a job so the assigned vendor can schedule the work.
• Support and communications - the name, email, subject, and message in a support request, and correspondence you send us.
• Sign-in and technical information - session records including IP address, browser user agent, and sign-in and expiry times; and, if you sign in with Google, the account identifier and tokens that Google returns to us.

We do not ask for and do not want payment card numbers, government identification numbers, financial account credentials, or medical records. Do not upload them.

3. Where the Information Comes From

• From you, when you accept an invitation, complete your profile, submit a job, upload photos, or contact support.
• From your organization's administrators, who create invitations and set roles.
• From carriers, who submit claim and customer information with the jobs they route.
• From Google, if you choose to sign in with a Google account.
• From your browser automatically, in the form of session and device details described above.

4. How We Use Information

• Operate the platform: create accounts, route job offers to matching vendors, track job status, and record issues and outcomes.
• Authenticate users, maintain sessions, and enforce role and organization boundaries.
• Provide support, respond to requests, and investigate problems reported to us.
• Maintain security: detect and investigate unauthorized access, abuse, and fraud, and keep records needed for that purpose.
• Measure vendor performance through scorecards, and improve routing and the platform itself.
• Send service messages such as invitations, password resets, and job notifications.
• Comply with law, respond to lawful requests, and establish or defend legal claims.

We do not sell personal information, we do not share it for cross-context behavioral advertising, and we do not use it to build advertising profiles.

5. What Other Participants Can See

The platform is designed to show each participant only what its role requires:

• The vendor assigned to a job sees the job details, property address, photos, issues, and the customer contact information the carrier supplied.
• The carrier that submitted a job sees the job's status, the assigned vendor, and the reasons any vendor gave for declining it.
• A vendor that declines a job does not receive further access to it, and vendors cannot see which other vendors declined a job or why.
• Organization administrators see their own organization's members, jobs, and profile.
• Platform administrators can access records across organizations in order to operate, support, and secure the platform, including reassigning jobs and resolving disputes.

6. Service Providers and Disclosures

We share information with vendors that process it on our behalf, under contracts that limit them to that purpose:

• Cloud hosting and file storage - Vercel, which hosts the application and stores uploaded job photographs.
• Database hosting - our managed PostgreSQL provider, which stores the records described above.
• Email delivery - Resend, which sends invitations, password resets, and service notifications.
• Mapping - Google Maps, which renders job locations and converts addresses into map coordinates.
• Authentication - Google, if you choose to sign in with a Google account.

We may also disclose information when required by law or legal process, to protect the rights, safety, or property of VNDR Network or others, or in connection with a merger, acquisition, financing, or sale of assets - in which case the recipient remains bound by this policy for the information it receives.

7. Uploaded Photographs

Job photographs are uploaded through an authenticated request and stored in our cloud file store under a randomized, unguessable web address. Anyone who obtains that address can view the photograph without signing in, so treat photograph links as sensitive and do not forward them outside the job. Do not photograph people, documents, or possessions that are not necessary to document the loss.

8. Cookies and Local Storage

We use a small number of strictly functional browser technologies. We do not use advertising cookies, and no third-party analytics or tracking scripts run on the platform.

• Session cookie - keeps you signed in. Necessary; the platform does not work without it.
• Sidebar state cookie - remembers whether the navigation sidebar is open.
• Local storage - remembers your light or dark theme choice and, if you ask us to, the email address you sign in with.

9. How Long We Keep Information

• Account and organization records are kept while the account is active and for a reasonable period afterward.
• Job records - including offers, declines and their reasons, status history, issues, and photographs - are retained as business records of the assignment, because carriers and vendors rely on them for claim, audit, and dispute purposes.
• Session records are kept for a limited period for security and troubleshooting, then expire.
• Support requests are kept while open and for a reasonable period after resolution.
• We delete or de-identify information when it is no longer needed, unless a law, an audit obligation, or a legal claim requires us to keep it.

10. Security

We protect information with measures appropriate to a platform of this kind, including encryption in transit, hashed passwords, invitation-only account creation, role-based permissions, and record-level checks that keep one organization’s data out of another’s reach.

Authorized personnel may access an account to investigate a problem or a security concern; such access is limited to what the task requires. No system is perfectly secure, and we cannot guarantee absolute security. If a breach affects your information, we will notify you and any regulator as required by law.

11. Your Privacy Rights

Depending on where you live, you may have the right to know what personal information we hold about you, to obtain a copy, to correct it, to delete it, and to be free from discrimination for exercising these rights. Because we act as a service provider for claim and customer information, requests about that data are directed to the carrier that submitted it.

To make a request, write to support@vndrnetwork.com from the email address on your account, or tell us which organization your request concerns. We will verify your identity before we act, and we will respond within the time the applicable law allows. An authorized agent may act for you with written proof. If we decline a request, you may ask us to reconsider by replying to our response.

12. Where Information Is Processed

VNDR Network operates in the United States, and information is stored and processed there. The platform is not directed to individuals in the European Economic Area or the United Kingdom, and we do not offer services to them through it.

13. Children

The platform is for business use by adults. We do not knowingly collect personal information from anyone under 18 as a platform user. If a carrier submits information about a minor as part of a claim, we handle it as customer information under our agreement with that carrier.

14. Changes to This Policy

We may update this policy as the platform changes. We will revise the “last updated” date above and, for material changes, give notice through the platform or by email to organization administrators.