Privacy Notice

1. Who we are and scope

Vendlen is operated by HELODA PTE. LTD., a company registered in Singapore. In this notice, “Vendlen”, “we”, “us”, and “our” refer to HELODA PTE. LTD.

Vendlen was previously named ZonOne. In an earlier notice or communication from HELODA PTE. LTD., a reference to ZonOne, or to zonone.com, docs.zonone.com or app.zonone.com, means Vendlen and the corresponding vendlen.com address.

This notice applies to vendlen.com, the documentation site at docs.vendlen.com, the Vendlen application at app.vendlen.com or app.zonone.com, and related support interactions. It does not govern a third-party service you connect to Vendlen; that service’s own terms and privacy notice continue to apply.

2. Data we collect

The data involved depends on how you use Vendlen and which connections and permissions you enable.

Information you provide

• Account and business contact details, such as your name, email address, company, and role.
• Workspace settings, preferences, and information you choose to add to the service.
• Messages, files, and other information you send when requesting support.
• Subscription and transaction records associated with your account.

Information you send through the contact form

You do not need a Vendlen account to use the contact form on this site, so what it collects is listed separately from the account data above.

• Your name, your email address, and the brand or company name if you give one.
• The topic you select and the message you write.
• The country the request was sent from, derived from the network connection by our hosting provider. We use it to route the enquiry and to identify automated abuse.
• The IP address the request was sent from. It is used only to limit how often the same sender can submit the form, so that automated abuse cannot flood it. It is not used to identify you, and it is not combined with anything else about you.

We use what you send through that form to answer you and to keep a record of the correspondence. It is not used to build a marketing profile, and it is not sold or shared for anyone else's marketing.

Information collected when you visit this website

This site uses Cloudflare Web Analytics to count visits and see which pages are read. It sets no cookies, stores nothing in your browser, and does not fingerprint your device, which is why this site shows you no cookie banner. There is nothing here to opt out of, because nothing is kept that could identify you later.

• The page address you opened, and the page that linked you to it if there was one.
• Browser, operating system and device type, and the country of the connection.
• How quickly the page loaded and became usable.

It measures pages, not people. Visits are not linked together into a profile, not followed across other websites, and not used for advertising.

The documentation site at docs.vendlen.com is measured the same way and on the same terms. The two are counted as separate sites, so reading the documentation and reading this site are never joined into one record of you. The Vendlen application is a different surface and is covered by the sections above.

Information from services you connect

• Authorization tokens and identifiers required to maintain the connection you approve.
• Seller, advertiser, marketplace, profile, and account identifiers.
• Advertising data, including campaigns, ad groups, targets, search terms, bids, budgets, placements, and performance metrics.
• Product listing, catalog, sales, inventory, order, and other operational data available through the permissions you select, where relevant to the Vendlen features you use.

Technical and usage information

• Device, browser, IP address, timestamps, and diagnostic or security logs.
• Actions taken in the service and feature usage needed to operate, secure, and troubleshoot it.
• Strictly necessary cookies or similar storage used for sign-in, security, and preferences.

3. How we use data

We collect, use, and otherwise process data where needed to:

• create and administer accounts, workspaces, connections, and permissions;
• provide the Ads Manager, Automation, Campaign Builder, analysis, and related Vendlen features;
• carry out actions that an authorized user configures or approves;
• provide support, diagnose errors, maintain reliability, and secure the service;
• manage subscriptions, enforce our agreements, and keep business records;
• understand and improve how Vendlen performs; and
• comply with law and protect the rights, safety, and integrity of users, Vendlen, and others.

We do not use data obtained from a connected Amazon account for third-party advertising or for a purpose unrelated to providing and securing Vendlen.

4. Connected services and consent

When you authorize a connection, the authorization screen identifies the service and permissions requested. Vendlen then accesses and uses the connected data to provide the features associated with that connection. You should only connect an account if you are authorized to do so.

You may withdraw your authorization by disconnecting the service in Vendlen or through the connected service, where that option is available. Disconnecting stops new collection through that connection but may also stop related features. It does not affect processing that occurred before withdrawal, and non-Amazon administrative records may remain where needed for security or legitimate business purposes. Amazon-derived information is handled according to the deletion commitment in Section 7.

5. How we disclose data

We may disclose data only as reasonably necessary to:

• authorized members of your organization or workspace;
• service providers that host, maintain, secure, support, or otherwise process data for Vendlen under appropriate obligations;
• Amazon or another connected service when carrying out an action you configure or approve;
• professional advisers, regulators, courts, or authorities where required or permitted by law;
• a successor in connection with a merger, acquisition, financing, reorganization, or sale of all or part of our business, subject to applicable safeguards; or
• another party at your direction or with your consent.

Certain service providers

Cloudflare provides web application firewall, TLS proxy, and private infrastructure services. OpenAI and Anthropic process limited, seller-authorized Amazon Ads metrics through secure APIs to generate analyses and recommendations within Vendlen. They do not receive Amazon credentials or buyer personal information from Vendlen for this purpose. We do not permit them to use this data for advertising or their own independent purposes. Access and processing are isolated by tenant within Vendlen.

Payment transactions

For purchases completed through Paddle Checkout, Paddle.com acts as the merchant of record and handles payment details, transaction taxes, invoices, and refunds under its Privacy Notice. Vendlen does not receive full payment card details. Paddle provides us with the customer, subscription, and transaction records needed to activate a plan, administer access, provide support, and keep required business records.

6. Amazon Data

We access Amazon Data only through permissions granted by an authorized seller and use it only to provide, maintain, secure, and support the Vendlen features that seller uses. Vendlen does not sell, license, monetize, publicly disclose, or use Amazon Data for advertising or an unrelated independent purpose.

Amazon credentials are not disclosed to OpenAI or Anthropic. Service providers may process only the limited data needed to perform their contracted function for Vendlen, subject to access controls and confidentiality obligations. Amazon Data is tenant-isolated within Vendlen and is not made available to other sellers.

7. Retention

While your account remains active and authorized, personal and account data is retained as necessary to provide Vendlen services. Amazon-derived data is permanently deleted within 25 days after the Amazon connection is disconnected or authorization is revoked. Retention may continue where required by law.

8. Security and international transfers

We use reasonable administrative, technical, and organizational measures designed to protect data against unauthorized access, collection, use, disclosure, alteration, loss, or destruction. No method of transmission or storage is completely secure.

Vendlen is operated from Singapore and may use providers or infrastructure in other countries. Where personal data is transferred outside Singapore, we take steps required by applicable law to provide a comparable standard of protection.

9. Your choices and rights

Depending on applicable law and subject to relevant exceptions, you may ask to access or correct your personal data, withdraw consent, or request deletion of data that is no longer needed. An authorized workspace administrator may also manage team access and connected accounts in Vendlen.

We may need to verify your identity and authority before completing a request. Withdrawing consent or requesting deletion may prevent us from providing some or all of the service.

10. Children

Vendlen is a business service and is not directed to children. We do not knowingly request that a child create a Vendlen account.

11. Changes to this notice

We may update this notice when our practices, services, or legal obligations change. We will publish the updated notice here and revise the “Last updated” date. Where required, we will provide additional notice or request consent.

12. Contact us

For a privacy request, question, or suspected privacy or security incident, use the contact form and select “Billing, refunds, privacy, data, or terms” as the topic. To help us route an incident promptly, include the affected workspace, a concise description, and a way to contact you. Do not include passwords, access tokens, or other credentials in your message.

We acknowledge reports, record and track them through investigation, communicate with the reporter when appropriate, and resolve or escalate them under our incident-response process.

You may also write to us and mark the correspondence “Attention: Data Protection”: