Your Privacy, in Plain Language

In plain English — and plain Français, Deutsch, 日本語, العربية and every other language VendeeX speaks. All 19 of them.

Most privacy policies are written to protect the company. This one's written to explain how VendeeX protects you — no legalese, no 40-minute read. Here's the honest version of what happens to your data when you shop with VendeeX.

Spoiler: almost nothing happens to it, because it barely leaves your laptop.

The one-line version

VendeeX works only for you, keeps your data on your own device, and is held to European privacy standards. Three promises — and they reinforce each other. Let's take them one at a time.

1. It's your assistant — nobody else's

Call it buyer-sovereign: VendeeX answers to the person doing the shopping, full stop. Not to the stores, not to advertisers, not to whoever's willing to pay for a better spot in your results.

• No ads. Ever. Your attention isn't the product.
• No tracking, no profile. There's no shadow version of you being built and sold behind the scenes.
• Commission-blind results. Some stores pay us a referral fee, and some pay more than others. The code that searches, matches and ranks never sees any of it — commission data is withheld at the code level and kept on a path that only runs after your shortlist is decided. It can't tilt your results, because there's no wire for it to travel down. When a referral applies, you'll see a plain note saying so.
• You do the paying. VendeeX never holds your money or spends it for you. It does the legwork; you click 'pay' at the shop's own checkout. Your card details go to the store, never to us.
• You keep the receipts. Every purchase you make is a signed record that you own, on your machine, and can export. It's yours whether or not the shop still exists — useful the day you need a warranty from a retailer that's disappeared.

Every other shopping tool makes money by knowing you and selling that knowledge. VendeeX earns a small fee when you buy, and is built so it can't know which store paid it more. That single design choice is why it can genuinely be on your side.

2. Your data stays on your machine

This is the part that makes the privacy promises actually true instead of just nice words.

VendeeX is local-first. Your identity, your style preferences, your cart, your purchase history, your listings and the AI itself all live on your own computer. When you ask it to find something, the thinking happens on your device — not on some company server.

• No cloud sync. There's no central database with your shopping life in it, because there isn't one.
• No behavioural tracking. We count how many searches an install makes, so we can manage costs and stop abuse. We never see what you searched for, or what you bought.
• Selling stays local too. List something in the Sell space and the listing sits on your device. Buyer and seller settle payment directly between themselves, the way Facebook Marketplace works. We never sit in the middle of the money or hold anyone's card details.
• Nothing to leak. A company can only lose the data it collects — and VendeeX is built to collect as little as possible.

What actually leaves your laptop

Short list. Here it is in full.

Your search, without your name. To find products, your query has to reach the stores' feeds. It leaves stripped of your identity: the feed sees "waterproof walking boots, size 9, ships to Jersey," not you.

One connection, one destination. Your machine makes exactly one kind of outbound call: HTTPS to the VendeeX Bridge, on a pinned host. Nothing else on your computer talks to anything else.

A short-lived token, never a secret. Some product feeds need credentials that can't safely sit on a laptop. The Bridge holds those, and hands your install a token that's short-lived and scoped to you, so your query can reach the feed. The credential itself never leaves our server. And the Bridge keeps no cart, no history, no record, no you.

At the checkout: the minimum, and not one field more. Your details are held as signed credentials, which lets VendeeX prove a single fact without revealing the rest — "over 18," or "delivers to Jersey," without handing over your birthday or your address book. When you buy, only what that shop needs to complete and ship the order goes across, encrypted, and signed to prove it came from you. Each store sees its own order. None of them sees the rest of your cart, your history, or each other.

The security underneath

• Sealed on device. Your data is encrypted with AES-256-GCM, and the keys live in your computer's own secure key store, unlocked by your fingerprint or passcode.
• Signed and chained. Your record is append-only, signed with a key only you hold, and hash-chained. Alter one line and the chain breaks. There's a witness for the tail end too, so quietly deleting the last few entries shows up as well.
• Hardened against hostile shops. Product listings are untrusted text written by strangers. VendeeX scans them for injection attempts, tracks suspect content through the agent, and runs the work sandboxed. A shop can't talk your assistant into doing something you never asked for.
• Default-deny. Every action is checked against your rules before it happens, and the same inputs always produce the same decision. Your settings screen is the only thing that can change those rules.

So what does reach us? Honestly, very little, and only in three situations. When you buy through a referral, the store's affiliate network tells us an install converted: which store, how much, when, and a reference. No basket, no name, no card. We may also take a small share of the payment processing fee the store already pays (that's the fee for processing a card, never an extra charge to you), and receive basic settlement info to reconcile it. And if you email us, we get… your email. That's the list.

Here's the mic-drop: most privacy policies ask you to trust that a company handles your data responsibly. VendeeX mostly removes the need for trust — the sensitive stuff isn't sitting on our servers to be misused, subpoenaed, or hacked, because it's on your laptop, where it belongs.

3. Held to European privacy standards

VendeeX is built by Vendee Labs, a Jersey-based company. Jersey has its own data-protection law — the Data Protection (Jersey) Law 2018 — built to match the EU's GDPR, and the EU formally recognises Jersey as "adequate," meaning it meets the same bar the EU sets for protecting personal data. So you get European-grade privacy rights baked in, including:

• The right to access the data that relates to you.
• The right to correct or delete it — and to be forgotten (easy, since most of it only ever lived on your device).
• The right to portability — take your data and receipts with you.
• The right to object to or restrict how any data we hold is processed.
• Consent that means consent — VendeeX asks before it acts, and "no" is a complete sentence.

You can also complain to a data-protection regulator if you're ever unhappy — for VendeeX, that's the Jersey Office of the Information Commissioner. Think of all this as a legal floor under everything above: even the small slice of data that touches us is governed by one of the strictest privacy regimes going.

How the three fit together

None of these work alone — that's the point.

Being buyer-sovereign means VendeeX has no business reason to hoover up your data. Being local-first means it mostly can't, because the data never leaves your device. And being held to European privacy standards means that for the little that's left, you've got real, enforceable rights. Motive, mechanism, and law — all pointing the same way: at you keeping control.

Quick answers