Privacy policy

Vendor Pilot is a tool for vendors — food trucks, beverage tents, and craft booths — to find events and track applications. Everything below exists to do that job.

• Your account. Name, email address, and sign-in credentials. Sign-in runs through Clerk, so your password is held by them, never by us.
• Your business profile. Business name and description, what you sell, your setup type, your address, the counties you'll travel to, and how far you're willing to drive. This is what event matching runs on.
• Your work in the app. Events you save, applications you start, their status, checklists, fees, booth details, notes you write, and organizer contacts you record.
• Waitlist details. If you join the waitlist: email, name, business name, category, region, and roughly how many events you do a year.
• Feedback. When you use the in-app feedback widget we keep your message, your email, the page you were on, and your browser's user agent.
• Technical basics. Standard server logs, page-level usage analytics, and crash reports when something breaks.

• We don't take payment card numbers. Vendor Pilot is in private beta and doesn't charge for anything yet.
• We don't buy or sell personal data, and we don't rent mailing lists.
• We don't run advertising or cross-site tracking, so there are no ad pixels or third-party advertising cookies on this site.
• We don't ask for government IDs, financial accounts, or health information.

Three things get stored in your browser, and none of them are for advertising.

• A session cookie from Clerk, so you stay signed in. Sign in and it's set; sign out and it's gone.
• Your light or dark theme choice, kept in local storage so the page doesn't flash the wrong colors on load.
• Vercel Analytics, which counts page views without cookies and without building a profile of you.

• Run your account and keep you signed in.
• Match events to what you sell and where you'll travel.
• Show you your saved events, applications, deadlines, and notes.
• Send email you asked for — beta invitations and account mail.
• Find and fix crashes, and see which features actually get used.
• Answer you when you write in or send feedback.

We don't use your profile or your application history to target advertising, and we don't share it with event organizers unless you send it to them yourself.

We run Vendor Pilot on services that handle a piece of the job. Each one only sees what it needs, and each is bound by its own agreement with us.

Clerk

Sign-in and account identity — your name, email, and credentials.

Neon

The Postgres database holding your profile, saved events, and applications.

Vercel

Hosting, server logs, and cookieless usage analytics.

Sentry

Crash and error reports, including the account ID that hit the error.

Inngest

The background job queue that runs work after you click.

Resend

Account and beta-invitation email.

Slack

Where feedback you submit reaches the team.

Mapbox

Event maps and address autocomplete — your browser talks to Mapbox directly.

Cal.com

Booking an onboarding call, if you book one.

Beyond that, we'll hand over data only if the law requires it, or if a company ever acquires Vendor Pilot — in which case this policy travels with it.

AI does the reading we'd otherwise do by hand: it works through public event listings and pulls out dates, deadlines, fees, and application details. It reads organizers' pages, not yours.

Event text and search terms are sent to embedding models so similar events can be matched to one another. Your profile, your notes, and your application history are not used to train anyone's model.

Events in Vendor Pilot come from publicly available sources — organizer websites, market and festival listings, city event calendars, and public directories. Our crawler reads pages that are already open to the public and respects the standard rules sites publish for crawlers. If you organize an event and want your listing corrected or pulled, email us and we'll take care of it.

Account and profile data stays as long as your account is open. Saved events, applications, and notes stay until you delete them or close your account — a season of history is the point of the tool. Crash reports and analytics age out on our providers' own schedules, generally within a year. Ask us to delete your account and we remove your personal data within 30 days, except where we have to keep something to meet a legal obligation.

Email support@vendorpilot.app and we will:

• Tell you what we hold about you.
• Correct anything wrong.
• Send you a copy of your data.
• Delete your account and the data attached to it.
• Take you off the waitlist or any email we send.

You can also edit your profile in the app at any time, and every email we send carries an unsubscribe link. We don't charge for any of this and we won't treat you differently for asking.

Traffic is encrypted in transit, data is encrypted at rest by our hosting and database providers, and access to production is limited to the people who need it. No system is perfect — if we ever learn your data was exposed, we'll tell you.

Vendor Pilot is a business tool for adults. It isn't meant for anyone under 13, and we don't knowingly collect their information. If you believe a child gave us data, write to us and we'll delete it.

Vendor Pilot runs in the United States and our providers store data there. If you're outside the US, using the app means your information is processed in the US.

When this policy changes we update the date at the top. If a change actually affects how we handle your data, we'll email registered users rather than let you find it on your own.

Questions about privacy, or anything else, go to support@vendorpilot.app. Vendor Pilot is built and operated in North Carolina by a small team, and a person reads every message.