Privacy Policy

Last updated: 12 August 2026

This policy explains what Vendoo collects, why, who else sees it, and what you can do about it. It covers the Vendoo mobile application.

Data controller: [legal entity name and registered address] Contact: in the app, under Profile → Help → Contact us.

1. What we collect

Because you give it to us

• Account — email address, phone number, password (stored only as a hash), and the role you choose.
• Profile — your name, wilaya, and a profile photo if you add one.
• Your vehicles — make, model, year, trim, engine, fuel, gearbox, and optionally the plate number, the VIN, and inspection dates.
• Requests — what part you need, its description, your photos, condition and origin preferences, urgency, and the vehicle the request is for.
• Offers — price, condition, origin, delivery terms and your notes.
• Messages — the text, photos and voice notes you send in a chat, and the time they were sent and read.
• Reviews — the rating and comment you leave, shown publicly with your name and photo.
• Appointments — the centre, the slot, the vehicle and the plate you book with.
• Reports and disputes — what you reported, about whom, and what you wrote.
• Sellers and centres — business name, address, opening hours, posted prices, licence documents and payment receipts you upload for verification.

Because your device sends it

• Location, only while you are using the CT finder or placing your centre on the map, and only if you allow it. You can use the app without it and pick a wilaya by hand.
• Notification token, so we can send you a push when an offer or a message arrives.
• Device and app information — platform, app version, and a device identifier used to manage your signed-in sessions.
• Diagnostics — if the app crashes, a technical report of what went wrong.

Because you use the app

• Which requests were viewed and how many offers they drew, counts we show you and the other side.
• Referral code, points and the transactions behind them.

We do not collect payment card details. We never ask for them.

2. Why we use it

We do not use your data for automated decisions that produce a legal effect on you, and we do not sell your personal information.

3. Who can see what

This is the part worth reading twice.

• Your request, and its photos, are visible to sellers in the app, including the vehicle details attached to it. If you add a VIN or a plate to a vehicle and then use that vehicle on a request, sellers can see it. Add them only if you are comfortable with that.
• Your name and profile photo appear on your requests, your messages, and any review you leave.
• Your reviews are public on the profile of the seller or centre you reviewed.
• A chat is between the two of you. Our administrators can access a conversation when investigating a report or a dispute.
• Your phone number and email are not shown to other users. You choose when to share contact details in a chat.
• Appointments are visible to the centre you booked, including the vehicle and plate you gave.
• Notifications, devices, referral balance, reports and disputes are visible only to you and to our administrators.

4. Who we share it with

We use a small number of providers to run the service. They process data on our instructions and may not use it for their own purposes.

• Appwrite — our backend: accounts, database, files. Hosted in Frankfurt, Germany (EU).
• Google (Firebase Cloud Messaging) — delivers push notifications.
• Sentry — receives crash and error diagnostics.
• Map tiles — displaying the CT finder map requests map imagery.

We also share data when the law requires it, when we must protect someone's safety, or as part of a merger or sale of the business — in which case we will tell you first.

5. Where your data is

Vendoo's backend is hosted in the European Union (Frankfurt). That means your data leaves Algeria and is stored abroad. Our providers are bound by contract to protect it and to process it only on our instructions.

6. How long we keep it

• Your account and profile — while your account exists.
• Requests, offers and reviews — while your account exists; a completed deal stays on the other party's record too.
• Messages — chats close after a deal ends and are removed after an extended period of inactivity.
• Payment receipts — for as long as accounting and tax law requires.
• Reports and disputes — while the case is open, and afterwards for as long as needed to enforce our Terms.
• Diagnostics — a short retention window at the provider.

When you delete your account we remove or anonymise your personal data. We keep what the law requires us to keep, and we do not remove your side of a transaction from the other party's record, because it is their record too.

7. Permissions on your device

Each of these is asked for when it is first needed, and each can be withdrawn in your device settings at any time.

• Camera and photo library — to take or choose photos for a request, a profile, a receipt or a message.
• Microphone — to record a voice note in a chat.
• Location — to find inspection centres near you, and for centre owners to drop their pin. We do not track you in the background.
• Notifications — to tell you about offers, messages and inspections.

Refusing a permission disables that feature. It does not stop you using the rest of the app.

8. Your rights

You may ask us to:

• give you a copy of the data we hold about you,
• correct anything inaccurate — most of it you can edit yourself in the app,
• delete your account and your data,
• restrict or object to a particular use,
• withdraw a consent you gave, such as location or notifications.

To exercise any of these, contact us in the app under Profile → Help → Contact us. We will confirm your identity — usually by checking the request comes from the email or phone number on the account — and answer within one month. If you are not satisfied, you may complain to the competent Algerian data-protection authority.

9. Deleting your account

Ask us in the app under Profile → Help → Contact us, or write to the contact address above from the email address on your account. Tell us the email or phone number you registered with.

We will confirm it is you, delete or anonymise your data as described in section 6, and confirm when it is done.

10. Children

Vendoo is not for anyone under 18. We do not knowingly collect data from children. If you believe a child has given us data, contact us and we will remove it.

11. Security

Passwords are stored hashed, never in plain text. Traffic between the app and our backend is encrypted. Access to production data is limited to administrators who need it. Files are stored with per-document permissions, so a chat photo is readable by the two people in the chat and nobody else.

No system is perfectly secure. If a breach affects your data, we will tell you and the authorities as the law requires.

12. Changes to this policy

We may update this policy. The date at the top always shows the current version, and when a change is material we will tell you in the app before it takes effect.

13. Contact

Questions, requests, or a complaint about how we handle your data: in the app, under Profile → Help → Contact us, or by writing to [legal contact address].