Start free trial Free trial

Privacy Policy

Last updated 27 September 2026

How Vendigit, operated by Well Digit LLC, collects, uses and protects personal data. We are the controller of your account data; for the conversations your shop visitors hold with the assistant, the shop is the controller and we process that data on its behalf.

  1. 01 What we collect

    Account data: first and last name, email address, password (stored hashed), language, team membership and security settings.

    Shop data: shop details, domains, product feeds and catalogues, knowledge base content and channel settings you add.

    Visitor conversations: the messages visitors exchange with the assistant. The assistant asks only for a name and a phone number or email, and only so your team can get back to them. Card, bank and passport-like numbers are masked as soon as they are received.

    Billing: subscription state and identifiers from Paddle. We never see or store full card numbers.

    Technical data: server logs (IP address, user agent, request time) and model usage counters.

  2. 02 How we use it

    To run the Service: answer visitors, hand conversations over to your team, sync feeds and show you dialogs and statistics.

    To send transactional email: verification, password resets, invitations, hand-over notifications and billing notices.

    To bill your subscription, enforce usage limits, prevent abuse and fix problems.

    We do not sell personal data and do not use it for advertising. Personal data in conversations is masked before it is sent to AI models.

  3. 03 Who we share it with

    AI model providers (such as OpenAI), to generate answers and search your catalogue. Data sent through their API is not used to train their models.

    Paddle, our Merchant of Record, to process payments.

    Our email delivery provider (Postmark), to send transactional email.

    Telegram and other channels you connect, to deliver messages there.

    Our hosting provider, to run the Service. Each receives only what it needs for its function.

  4. 04 Retention

    Account and shop data are kept while your account is active.

    Dialogs are deleted 12 months after their last message. The assistant's working memory and tool logs are deleted after 90 days. Usage records are kept 13 months.

    When you delete your account, we delete your personal data except records we must keep for legal or accounting reasons.

  5. 05 Your rights

    You can access, correct, export or delete your data, object to or restrict its processing, and withdraw consent. Most of this can be done in your account settings; for the rest, write to contact@welldigit.com.

    Shop visitors should contact the shop they talked to first; we will help the shop respond.

    You may also complain to your local data protection authority.

  6. 06 Security

    Data is encrypted in transit, passwords are hashed, and access to production systems is limited to the people who operate the Service. Two-factor authentication and passkeys are available for every account.

    If a breach affects your data, we will notify you without undue delay.

  7. 07 Cookies

    We use only the cookies needed to keep you signed in, protect forms and remember your language and interface preferences. We do not use advertising cookies.

    On our website we use Google Analytics to understand how visitors find and use it, and only if you accept analytics cookies in the cookie banner. You can change your choice at any time with the "Cookie settings" link at the bottom of every page.

  8. 08 Contact

    Questions about this policy or your data: contact@welldigit.com.