Privacy Policy
This policy explains how Orbius Ventures Pty Ltd (ABN 64 670 058 858) (“Vendara”, “we”, “us”) handles personal information collected through vendara.com.au and the Vendara platform. We aim to handle personal information in line with the Australian Privacy Principles in the Privacy Act 1988 (Cth).
1. What we collect
- Enquiries and early-access requests: your name, email address, and any company, role and message you choose to give us on our forms.
- Account details: name, email, username, company, role and permissions, and a securely hashed password. If you turn on two-factor authentication, the secret used to generate your codes is also stored.
- Business data you enter: purchase orders, shipments, inventory, suppliers, kanban settings and uploaded documents. This may include names and contact details of people at your suppliers or customers.
- Security and technical data: failed-login counts by username (for lockouts), and, on our forms, a one-way hash of your IP address and your browser’s user-agent text, used to limit abuse. Our web host also keeps standard server logs.
We do not knowingly collect sensitive information. Please do not enter it into the Service.
2. How we use it
We use personal information to reply to enquiries, set up and run accounts, provide and secure the Service, send service notices, meet legal obligations, and improve the Service. We do not sell personal information and we do not use it for third-party advertising.
3. Who we share it with
We share personal information only with service providers that help us run the Service, and where the law requires it:
- Web hosting: the Service is hosted by Bluehost, with servers in Frankfurt, Germany. Information stored in the Service is therefore held overseas.
- Web fonts: our pages load fonts from Google Fonts, which means your browser contacts Google when you view them.
- AI provider (when enabled): the Vendara AI assistant is not switched on yet. When it is, the questions users ask and the business data needed to answer them will be sent to our AI provider (Anthropic, based in the United States) to generate a response.
Within the platform, each customer company’s data is separated from other companies’ data; other customers cannot see it.
4. Cookies and similar technologies
The marketing pages (the home, pricing, request-access, contact, terms and privacy pages) use Google Analytics 4, provided by Google, to count visits and see which pages people view. It sets first-party cookies in your browser and sends Google information such as the pages you view, your approximate location (city level), your device and browser type, and the site that referred you. We have turned off Google signals and ad personalisation, and we do not use advertising cookies or share this information for advertising. Google may process it outside Australia. You can block these cookies in your browser or use Google’s opt-out add-on at tools.google.com/dlpage/gaoptout. The logged-in platform does not run Google Analytics; it stores a session token in your browser so you stay signed in.
5. Security
We use HTTPS, hashed passwords, per-company data separation, login rate limiting and optional two-factor authentication, and we restrict administrative access. No online service is completely secure. If we become aware of a data breach that is likely to cause serious harm, we will notify affected people and the Office of the Australian Information Commissioner as the law requires.
6. How long we keep it
We keep personal information only as long as needed for the purposes above or as the law requires. Enquiries are kept while we deal with them and for a reasonable time afterwards. Company data is deleted or de-identified on request after an account ends, subject to routine backups.
7. Access, correction and complaints
You can ask to access or correct the personal information we hold about you, or ask us to delete it, by using our contact page and starting your message with “Privacy request”. We will respond within a reasonable time, usually within 30 days. If you are not satisfied with our response, you can complain to us, and you can also contact the Office of the Australian Information Commissioner at oaic.gov.au.
8. Free Lean Library and newsletter
When you create a free Lean Library account we collect your email address, a securely hashed password and, if you choose to give them, your name and company. We use your email to confirm your address, let you log in, reset your password and send messages about your account. We record which tools you open and download so we can improve the library.
If you tick the newsletter box, we also email you lean stories and new tools, about once a week, and we record when you gave that consent. Every newsletter has an unsubscribe link, and you can also unsubscribe by writing to hello@vendara.com.au. Unsubscribing does not close your account.
Lean Library account data is stored separately from Vendara platform customer data. We do not sell it or share it with advertisers. You can ask us to delete your Lean Library account at any time by emailing hello@vendara.com.au.
9. Children
The Service is business software and is not aimed at children.
10. Changes to this policy
We may update this policy from time to time. The date at the top shows the latest version.