Privacy Policy

VendorWize is a directory and planning service for North Carolina events and published vendor opportunities. It helps people find sourced listings, save events, track their own participation, choose reminder settings, and open an organizer’s official application destination.

VendorWize does not broker vendor applications, process booth payments, hold funds, or record public attendance. Applications and transactions take place with the organizer outside VendorWize.

Account and profile

VendorWize supports email-and-password and Google sign-in through Firebase Authentication. Firebase Authentication processes the sign-in credential and supplies an account identifier and, depending on the method, a display name and email address. VendorWize stores the corresponding account record, role, standing, linked-identity facts, and profile information you choose to provide.

Private planning records

Your saved events, self-reported vendor participation history, reminder plan, per-event reminder overrides, and reminder-delivery status are private account records. They are not published as popularity, attendance, or commercial-intent statistics.

If you post open dates, VendorWize stores the dates, the North Carolina ZIP you choose as a ZIP-centroid coordinate, and your travel distance as a private account record. They are used to list events running on those days and are not shown to organizers or other accounts.

Push notifications and calendar feeds

If you enable browser push, VendorWize stores a hash and encrypted reference for the Firebase Cloud Messaging endpoint, plus delivery status and limited error codes. For a subscribed saved-events calendar, the raw capability token remains in your calendar URL; VendorWize stores its hash. Reissuing the feed revokes the prior URL.

Location-assisted discovery

If you choose “Use my location,” your browser requests permission and VendorWize rounds the coordinates to four decimal places before putting them in the discovery URL. A North Carolina ZIP search uses a ZIP-centroid coordinate in the same way. Those coordinates are used for radius filtering and maps and may appear in service request logs because they are part of the URL. VendorWize does not continuously track location or infer a home or workplace.

Service diagnostics

When Firebase Performance Monitoring is enabled, it may receive browser and device environment details, page and network timing, custom operation status, bounded aggregate counts, and fixed diagnostic categories. VendorWize does not attach account identifiers, search text, or URL parameters to custom performance traces. VendorWize uses this diagnostic telemetry to find reliability and performance problems, not for advertising.

Advertising

Public event pages may display advertisements to visitors without a paid membership. We currently show promotions for VendorWize itself. These promotions use no advertising cookies or tracking pixels and send no information to an external advertising network. We do not use your private saved events, participation history, journal, or profile details to select advertisements.

Advertisements are labelled separately from event information. If you follow an advertisement to an external website, that website receives your visit and its privacy terms apply. An advertisement does not change an event’s published facts, rating, or position in organic results.

Content and communications

Events you submit, reviews, questions, answers, and profiles you deliberately publish may be visible to other people. A published review can expose its rating, text, your display name, a stable author identifier, and a linked vendor profile. Hiding a review through moderation does not erase its stored row. Moderation records, reporter identities, flags, and account-standing actions remain restricted.

Direct vendor inquiries and contact messages

The Contact Us form stores the name you provide, reply email, subject, message, and submission time. The Discover empty-state and Saved planning feedback prompts store the message, a fixed /discover or /saved product context, and an optional reply email. They do not attach search terms, ZIP codes, coordinates, filters, event identifiers, event titles, or page URL parameters. These paths may store the signed-in account identifier when present and a one-way network identifier used for hourly abuse limits. The raw network address is not stored with the message, and only authorized operations staff can read the submission. A public vendor storefront inquiry separately stores the sender name, email address, subject, message, status, destination vendor, and submission time so the vendor can read and triage it.

Catalog research

VendorWize also processes event, venue, organizer, and business information from official and public sources. Discovered organizer and vendor prospect records remain in the private owner operations plane unless a separate product publication path is deliberately used.

• authenticate accounts and enforce role, standing, abuse, and App Check controls;
• provide discovery, saved-event, participation-history, reminder, calendar, review, and question-and-answer features;
• operate, secure, troubleshoot, and improve the service;
• moderate public contributions and investigate reports; and
• send feature messages you request, such as saved-event reminders.

Reminder messages concern your own shortlist and settings. They are not permission to add you to a marketing mailing list.

VendorWize uses Google Cloud and Firebase to provide authentication, hosting, reCAPTCHA Enterprise application-integrity checks, relational storage, server functions, logs, performance diagnostics, and browser push messaging. Google Maps Platform processes map requests and the search center when you load the map view. These providers process information on VendorWize’s behalf to deliver those services.

Links to organizer application pages, ticket pages, maps, Google Calendar, Apple Calendar, Outlook, and other external services take you outside VendorWize. A calendar provider you choose receives the bearer calendar-feed URL. Their privacy terms apply to what you send them. VendorWize does not receive an organizer’s off-platform application or payment details merely because you followed a link.

• unsave an event or remove a participation-history answer;
• edit or remove your open dates;
• change reminder preferences or mute reminders for one event;
• disable a push endpoint; and
• turn off your calendar link from Saved events > Plan, or replace it to disable the prior link.

For account, profile, privacy, or correction questions that are not available as an in-product control, use the contact form.

Feature data is retained while it is needed to operate the account or feature, unless you remove or revoke it through an available control. Operational, security, moderation, delivery, and audit records may be retained longer. VendorWize has not yet published a fixed record-by-record retention schedule; this notice will be revised when one is adopted.

VendorWize uses account-scoped authorization, managed cloud identities, encrypted connections, and the token protections described above. No online service can promise absolute security, so calendar-feed URLs and signed-in sessions should be treated as private capabilities.

Material changes will receive a new effective date on this page. The addition of marketing analytics, advertising technology, or stored feedback prompts outside the disclosed Contact Us, Discover, and Saved surfaces requires an updated disclosure before activation.

Questions about this policy may be sent through the contact form.