Last updated: October 11, 2026
VendScout ("we", "us", or "our") operates the VendScout platform (the "Service"), a field prospecting and route management tool for vending machine sales teams. The Service is available through our website and as a mobile application ("App") downloaded from the Apple App Store and Google Play (each an "App Store"). This Privacy Policy explains how we collect, use, and protect your information when you use our Service, whether through the website or the App. By downloading and using the App, you consent to the practices described in this Privacy Policy.
Account information: Name, email address, and password when you register.
Profile information: Company name, phone number, CRM webhook configuration, and flyer branding details you provide.
Location and route data: Prospect locations, addresses, GPS coordinates, route stops, and visit records you create or import.
Usage data: Device information, IP address, and interaction logs when you use the Service.
Mobile device data: When you use the App, we collect device identifiers, operating system version, and app version to provide and maintain the Service.
QR scan data: When a prospect scans a leave-behind flyer QR code, we record the scan time, user agent, and associated location.
We do not sell your personal information. We share data only:
The App requests certain permissions to provide its core features. When you install the App from an App Store, the following permissions may be requested:
You can manage or revoke these permissions at any time in your device settings (iOS Settings > VendScout, or Android Settings > Apps > VendScout). Revoking location permission will limit route-tracking and check-in features but will not affect other functionality.
The App does not use third-party SDKs for advertising and does not share your data with third parties for advertising purposes.
We use row-level security to isolate your data from other users. CRM webhook URLs and authentication tokens are stored securely and transmitted only to the endpoints you configure. Leave-behind tracking tokens are generated using cryptographically secure random values.
We retain your data for as long as your account is active. You may delete individual locations, routes, and other records at any time within the Service.
Account deletion: If you downloaded the App from an App Store, you may request deletion of your account and associated personal data at any time. To delete your account, sign in to the Service, go to Settings, and use the "Delete account" option, or contact us through the Support option in the app. Deleting your account removes your profile, routes, stops, visits, and prospect data. Some records (such as anonymized QR scan logs) may be retained as required for analytics or legal compliance, but they are not linked to your identity after deletion.
You may access, correct, or delete your personal information through the Service or by contacting us. You may also export your data. If you are a California resident, you have rights under the CCPA. If you are a resident of the European Economic Area or the UK, you have rights under the GDPR, including the right to access, rectify, erase, restrict, or port your data, and to object to processing.
The Service is not intended for children under 13. We do not knowingly collect data from children. If you believe a child has provided us with personal information, please contact us so we can delete it.
We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the updated policy on this page. Continued use of the App after changes constitutes acceptance of the revised policy.
For questions about this Privacy Policy, including account deletion requests, please contact us through the Support option in the app or the Contact page on our website.