Wendor resource

Privacy Policy

What Wendor collects on this website, why, who processes it and how to exercise your rights.

Effective date: 9 October 2026

This policy explains how Wendor handles personal data collected through this website (wendor.ai, including its regional pages). Wendor designs and sells vending machines and vending software to businesses. The policy for the Wendor Stock operator app is separate: see the Stock App privacy policy.

Who is responsible for your data

Wendor is responsible (the “controller”) for the personal data described here. Enquiries about our US software platform are handled by Wendor, Inc., a Delaware corporation. Enquiries about machines and other markets are handled by Wendor’s team in India, at Khasra No 1518, 907/2/3, Behrampur Rd, near Kumar Auto, Sector 72A, Sector 74, Gurugram, Haryana 122004, India.

For any privacy question or request, email [email protected]. You can also reach our Data Protection Officer at [email protected].

What we collect

Information you give us

When you request a callback, a quote, a demo or a brochure, or leave your details in the website chat, we collect what you enter. Depending on the form, this is:

  • your name, phone number with country code, and email address;
  • your company, country, state or city;
  • the purpose of your enquiry, the machines or plan you are interested in, and any message you write;
  • whether you agree to be contacted on WhatsApp about your request.

With each form we also record the page you sent it from, the time it was sent, and any campaign tags in the page address (such as utm_source, utm_medium, utm_campaign and gclid). Forms may use Cloudflare Turnstile to check that the sender is not a bot.

The chat assistant on this site is a scripted form, not a live agent or an AI service. If you start a conversation that leads to an enquiry, it collects your name, phone number, country, message and your answer to the WhatsApp question, and sends them to us like any other enquiry form. If you describe a failed vending transaction, the chat shows refund guidance and does not save your message as an enquiry.

Information collected automatically

When you use the site, our hosting provider and analytics tools receive technical information such as your IP address, browser and device type, the pages you visit, the links and buttons you click, how far you scroll, and the website or campaign that referred you.

If analytics are allowed (see Cookies and similar technologies), Microsoft Clarity and PostHog may also record sessions: how the page looked and how you moved, scrolled and clicked on it, so we can find problems with the site. These recordings are set up to mask what you type into form fields and chat messages.

How we use your information

  • To answer your enquiry: to call or email you, send the brochure or quote you asked for, arrange a demo, and follow up on your request.
  • To contact you on WhatsApp, only if you agreed to it on the form or in the chat.
  • To manage our sales pipeline: enquiries are stored as leads in our CRM, and our sales team receives a notification when a new enquiry arrives.
  • To understand and improve the website: to measure which pages and campaigns bring enquiries and to fix pages that do not work well.
  • To protect the website: to filter spam and automated form submissions and keep the site secure.
  • To meet legal obligations and to establish or defend legal claims.

We do not use your information for automated decisions that have legal or similarly significant effects on you.

Legal bases (EEA and UK visitors)

We use enquiry information to take the steps you asked for before a possible contract and, for follow-up, on the basis of our legitimate interest in responding to business enquiries. WhatsApp contact and analytics cookies or session recordings rely on your consent, which you can withdraw at any time. Security and spam prevention rely on our legitimate interest in keeping the site safe. Where the law requires us to keep information, we do so to meet that legal obligation.

Cookies and similar technologies

We use cookies, local storage and similar technologies for the following purposes:

  • Necessary: to remember your cookie choice (wendor_consent_v1 in local storage), your regional site preference (the wendor_region cookie, kept for 180 days), whether you dismissed a banner or the chat prompt, and to pass a completed enquiry to the thank-you page. To decide whether to ask for cookie consent, we also keep the country your IP address points to (wendor_geo_cc, session storage) until you close the browser.
  • Analytics and session recording: Google Analytics 4 (through Google Tag Manager), Microsoft Clarity and PostHog. These tools set their own cookies or local storage entries (for example _ga, _clck, _clsk and PostHog’s ph_ entries) to recognise repeat visits and group page views into sessions. Their lifetimes are set by each provider.
  • Site testing: a value in local storage keeps the same version of a page section for you while we compare two designs.

Your choice. If you visit from the European Economic Area, the United Kingdom or Switzerland, or open a page of our UK, German, French or Spanish sites, analytics and session recording stay off until you accept them in the cookie banner. If your browser sends a Global Privacy Control signal, we treat it as a refusal wherever you are. Elsewhere, analytics run by default and you can turn them off. You can change your choice at any time: open Cookie settings.

Who we share it with

We do not sell your personal information. We share it only with service providers that help us run the website and handle enquiries, and only for those purposes:

  • Cloudflare: website hosting and delivery, security, bot protection (Turnstile) and visitor statistics.
  • n8n: the workflow automation that receives form submissions (n8n.wendor.in) and passes them on.
  • Supabase: the database where enquiries are stored.
  • Frappe CRM: the customer relationship management system our sales team works from.
  • Telegram: internal notifications that tell our sales team a new enquiry has arrived, including the details you submitted.
  • Google (Google Tag Manager and Google Analytics 4), Microsoft (Clarity) and PostHog (hosted in the EU): website analytics and session recording.
  • Interakt: provider of a WhatsApp chat script that the site loads.
  • Google (YouTube and Google Maps): some pages embed videos, maps and link icons served by Google, which receives your IP address when they load.
  • WhatsApp: if you agreed to WhatsApp contact, our team may message you there.

We may also disclose information when the law requires it, to protect our rights or the safety of others, or to a buyer or successor if our business is reorganised or sold.

International transfers

Wendor works from India and serves customers in several countries, and our service providers operate in different countries, including the United States and the European Union. Your information may therefore be processed outside the country where you live. Where the law requires it, we use appropriate safeguards for these transfers.

How long we keep it

We keep enquiry information as long as needed to respond to your enquiry and manage our relationship with you, and as required by law. Analytics data and session recordings are kept for the periods configured in each analytics tool and are then deleted by the provider.

Security

The site is served only over HTTPS, and access to enquiry data is limited to the people and services that need it. No method of transmission or storage is completely secure, but we work to protect your information against loss and unauthorised access.

Your rights

Depending on where you live, you can ask us to:

  • tell you what personal data we hold about you and give you a copy;
  • correct or complete it;
  • delete it;
  • restrict or object to how we use it, including for direct marketing;
  • give it to you, or to another organisation, in a portable format;
  • withdraw your consent at any time, without affecting what we did before you withdrew it.

EEA and UK: these are your rights under the GDPR and the UK GDPR. You can also complain to your local data protection authority (in the UK, the Information Commissioner’s Office).

California: under the CCPA you have the right to know what personal information we collect, use and disclose, to delete and correct it, and to opt out of its sale or sharing. We do not sell personal information. To opt out of analytics cookies, use Cookie settings or turn on Global Privacy Control in your browser. We will not treat you differently for exercising these rights.

India: under the Digital Personal Data Protection Act, 2023 you have the right to access information about your personal data, to correct, complete, update and erase it, to withdraw consent, to nominate another person to exercise your rights, and to have your grievances addressed. Send grievances to [email protected]. If you are not satisfied with our response, you may approach the Data Protection Board of India.

To make a request, email [email protected] from the address or with the phone number you used with us, so we can verify it is you.

Children

This website is for businesses. It is not directed at children, and we do not knowingly collect personal data from children.

Changes to this policy

We will update this policy when our practices change and show the new effective date at the top of this page. If a change is significant, we will make it clear on this page.

Contact

Email [email protected] (Data Protection Officer: [email protected]), or write to Wendor, Khasra No 1518, 907/2/3, Behrampur Rd, near Kumar Auto, Sector 72A, Sector 74, Gurugram, Haryana 122004, India. See also our Terms of Use.