Privacy Policy — Vend402

This Privacy Policy explains how Vend402 handles information when you use our website, catalog, playground, and beta faucet ("Service").

1. What we collect

Account data: email address and authentication identifiers when you sign in.
Faucet claims: wallet address, email, IP address, user agent, and an optional referral code.
On-chain data: public wallet addresses and transaction hashes related to x402 settlements.
Operational logs: standard request logs for security and abuse prevention.

2. How we use it

Operate the Service, process faucet claims, and prevent abuse (rate limiting, deduplication).
Communicate operational updates (e.g., claim status, security notices).
Comply with legal obligations.

3. What we do NOT do

We do not sell your personal data.
We do not expose other users' emails, IPs, or wallet logs publicly. Faucet claim records are write-only from the public API.
We do not custody your funds or private keys.

4. Third-party services

The Service uses infrastructure providers (hosting, database, authentication) that process data on our behalf under their own privacy terms. On-chain transactions are publicly visible on Base.

5. Retention

We retain faucet and account records for as long as needed to operate the Service and meet legal obligations. You can request deletion of your account data by emailing us.

6. Your rights

Depending on your jurisdiction, you may have rights to access, correct, or delete your personal data. To exercise these rights, contact legal@vend402.com.

7. Changes

We may update this policy. Material changes will be announced on the Service.