Privacy Policy

Vending.forsale ("Vending.forsale", "we", "us", or "our") operates a United States marketplace where vending operators, sellers, brokers, and business owners connect around vending routes, machine placement locations, equipment financing, and operator education. This Privacy Policy explains what information we collect when you browse the site, create an account, publish a listing, unlock a lead, download a guide, or apply for financing — and what we do with that information. It applies to vending.forsale and every page and form hosted on it.

We built this marketplace on a simple principle: we ask for the minimum information required to complete the task in front of you, and we never sell your personal information to data brokers. Please read this policy alongside our Terms of Service, which govern your use of the marketplace itself.

1. Who we are

Vending.forsale is the data controller for the information described in this policy. We are a marketplace and information service. We are not a bank, a lender, a broker-dealer, an insurance provider, or a party to any transaction that users negotiate between themselves. When you buy a route, place a machine, or accept a financing offer, that agreement is between you and the other party.

2. Information we collect

Information you give us directly. This includes your name, email address, phone number, company name, and account type (buyer, seller, or both) when you register; the content of listings you publish, including route financials, machine counts, asking price, state and metro; location submission details such as business name, address, business type, staff count, foot traffic, and days open; the documents you upload to support a seller submission; and the messages you send us through the contact form.

Transaction information. When you unlock a paid lead or make any other purchase, our payment processor collects and processes your card details. We receive only payment metadata — the amount, currency, status, and a transaction reference. We never see or store full card numbers, CVC codes, or bank credentials on our servers.

Information collected automatically. When you use the site we record standard technical and usage data: IP address, browser and device type, pages viewed, referring URL, and the marketing parameters attached to your visit (utm_source, utm_medium, utm_campaign, utm_term, utm_content, gclid, and fbclid). We also log interaction events such as checklist and parts-guide downloads, FAQ expansions, and clicks through to our routes, locations, and financing pages, so we can measure which guides genuinely help operators.

Information from third parties. If you sign in with Google, we receive your name, email address, and profile identifier from Google. We also use search analytics providers to understand aggregate keyword and ranking performance; that data is statistical and is not linked to you as an individual.

3. How we use your information

We use the information we collect to create and secure your account; publish, moderate, and display listings; deliver leads you have paid to unlock; process payments and issue receipts; route financing applications to lending partners you have asked us to contact; send the guides, checklists, and follow-up emails you requested; respond to support enquiries; detect and prevent fraud, spam, scraping, and abusive listings; comply with tax, accounting, and legal obligations; and improve the marketplace by analysing which features and articles are used.

We do not sell your personal information, and we do not share it with third parties for their own independent advertising purposes.

4. Why we are allowed to use it

We process your information because it is necessary to perform the contract you enter into when you use the marketplace; because we have a legitimate interest in operating, securing, and improving a trustworthy marketplace; because you have given consent (for example, for marketing emails, SMS, or financing outreach); or because we are required to by law. Where processing rests on consent, you may withdraw that consent at any time without affecting processing that already took place.

With other marketplace users. When a buyer purchases a lead you submitted, or when you publish a listing, the contact and business details you provided for that purpose are disclosed to the other party. Do not include information in a listing that you are not willing to have a counterparty see.

With service providers. We rely on vetted processors for hosting and databases, payment processing, transactional email, file storage, error monitoring, and analytics. They may only process your data on our instructions and for the purposes described here.

With financing partners. If you submit a financing application, the details in that application are shared with the lending partners best matched to your request so they can contact you with offers.

For legal and safety reasons. We may disclose information where required by law, subpoena, or regulator, or where necessary to investigate fraud, enforce our Terms, or protect the rights and safety of our users.

In a business transfer. If Vending.forsale is acquired, merged, or reorganised, user information may transfer as part of that transaction, subject to this policy.

6. Financing applications and TCPA consent

Our financing form collects information a lender needs to evaluate a request, which may include your business entity type, time in business, requested amount, self-reported credit range, intended use of funds, employment details, and the last four digits of a tax identifier. By checking the consent box you agree, under the Telephone Consumer Protection Act, that Vending.forsale and its lending partners may contact you at the phone number you supplied — including by autodialled calls, prerecorded messages, and SMS — about your enquiry. Consent is not a condition of any purchase. You may revoke it at any time by replying STOP to a text, telling a caller to stop, or emailing us. Message and data rates may apply.

7. Cookies and analytics

We use strictly necessary cookies and local storage to keep you signed in, remember your marketplace filters, and carry marketing attribution across a session. We also use analytics to count page views and conversions in aggregate. You can block or delete cookies in your browser settings, though signing in and some marketplace features will not work correctly without the necessary ones. We honour Global Privacy Control signals where your browser sends them.

8. How long we keep data

Account records are kept for as long as your account is active and for a reasonable period afterwards to resolve disputes and enforce agreements. Purchased lead records and payment metadata are retained for at least seven years to satisfy tax and accounting requirements. Unconverted enquiry and marketing records are reviewed periodically and deleted when they are no longer useful. Analytics events are retained in aggregate form.

9. How we protect your data

All traffic to the site is encrypted in transit with TLS. Data is stored in access-controlled databases protected by row-level security policies, so a signed-in user can reach only their own records. Uploaded documents live in private storage buckets that are not publicly listable. Administrative functions require a verified admin role checked on the server, never in the browser. No system is perfectly secure, so please use a strong, unique password and tell us immediately if you suspect unauthorised access to your account.

10. Your privacy rights

You may request a copy of the personal information we hold about you, ask us to correct anything inaccurate, ask us to delete your account and associated data, object to or restrict certain processing, ask for your data in a portable format, and opt out of marketing at any time using the unsubscribe link in our emails. We respond to verifiable requests within 45 days and will never discriminate against you for exercising a privacy right.

11. State-specific disclosures

Residents of California (CCPA/CPRA), Colorado, Connecticut, Virginia, Utah, Texas, Oregon, and other states with comprehensive privacy laws have the rights described above, including the right to know the categories of personal information collected, the sources, the business purpose, and the categories of recipients. We do not sell personal information and we do not share it for cross-context behavioural advertising as those terms are defined under California law. You may use an authorised agent to submit a request on your behalf; we will ask for proof of authorisation.

12. Children's privacy

The marketplace is intended for business use by adults. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us information, contact us and we will delete it.

13. Changes to this policy

We may update this policy as the marketplace evolves or the law changes. The "Last updated" date at the top always reflects the current version. For material changes we will provide additional notice by email or an in-app notice before the change takes effect. Continued use of the site after an update means you accept the revised policy.

14. How to contact us

To exercise a privacy right, ask a question, or raise a concern, reach us through our contact page. For context on how we research and review the operator guides we publish, see our editorial standards. If you are unhappy with our response, you may lodge a complaint with your state attorney general or applicable data protection authority.

This policy is provided for transparency and general information. It is not legal advice, and it does not create a contract beyond the commitments described in our Terms of Service.