Privacy policy

Vendor Roster ("we") helps wedding and event venues keep track of the outside vendors who work their events. We don't sell your data and we don't show ads.

What we store

• Your account: your email address and a securely hashed password, handled by Amazon Cognito.
• Your venue's records: each venue's name, address, loading instructions, insurance requirements and rules; events with their dates, times, client names, coordinator, planner email and notes; team roles and which venue each person works at.
• Vendors: each vendor's business name, category, contact name, email and phone numbers; for each event, their load-in and load-out times, vehicles, power needs, staff count and status; and the name, time and rules version when they agreed to your venue rules.
• Certificates of insurance: the insurer, coverage amount, effective and expiry dates, whether the venue is listed as additional insured, the review result and who reviewed it, and the certificate file itself, stored privately in Amazon S3 and shown only through short-lived signed links.
• Page-view analytics: the page visited, referring site, browser user agent, rough location when available, and a one-way hash of the IP address that changes daily. We never store the raw IP address.
• Feedback you send, with your email if you give it.
• Billing: Stripe processes payments. We store Stripe customer and subscription IDs and your plan, never your card number.

Vendor links

Venue staff (and a couple's planner, for the vendors they add) can create a link for one vendor on one event. Anyone with the link can see that event's date, the venue's loading instructions and rules, and that vendor's own details, and can fill them in without signing in. Send it only to the vendor. Turning the link off stops it working at once.

Email

We send sign-in codes and invites. Vendor links are sent by you, from your own email or phone.

Cookies

We use first-party cookies to keep you signed in and random IDs to count visits and sessions. We do not use third-party advertising cookies.

Who processes your data

Amazon Web Services provides hosting, database, file storage, and sign-in; Stripe processes payments; and Resend sends email. Each processes data only to provide its service to us.

How long we keep it

Your records stay until you delete them or ask us to close the account. Deleting a vendor deletes its certificates and event bookings. Analytics are kept in aggregate form for as long as they remain useful.

Your choices

You can export your vendor directory and each event's vendor list as CSV. To get a copy of everything, correct personal information, or delete your account and venue data, contact us.

Contact

Questions about privacy: use the feedback form.