Security and data/Data handling and retention

What is collected, where it goes, how long it stays, who can delete it.

The customer owns the record at every stage. Vendidit operates the application. This page states what is collected and why, who can see it, and how deletion works.

Request the data flow summary Trust center

Six stages · one owner · deletion in the customer's control

Data lifecycle

Six stages, one owner.

The customer owns the record at every stage. Vendidit operates the application.

CapturePhotograph taken on the phone. Item data derived from it. Location is attached to every photo when the phone's location permission is on — the OS permission is the control, not an in-app setting.

TransitEncrypted connection from the phone to the AIMIS cloud.

ProcessingIdentification suggestions from the identification service, confirmed by a staff reviewer before they become part of the record.

StorageRecords and photographs stored on Vendidit operated infrastructure on AWS.

ExportThe customer takes the record as a CSV spreadsheet or PDF report whenever they choose.

DeletionRetained until the customer deletes them. Deletion is the customer's control, not Vendidit's.

What is collected

Only what the record needs.

Each data type is listed with the reason it is collected, who can see it, and how long it stays.

DataWhy it is collectedWho can see itRetention

Photographs of itemsThe evidence on the record and the input to identificationThe customer's users, the identification service during processingUntil the customer deletes

Item data (title, description, condition, value, basis)The record itselfThe customer's usersUntil the customer deletes

Location metadataAttached to every photo when the phone's location permission is on — the OS permission is the control, not an in-app toggle. Ties a capture to a place. Retention is configurable and location data can be stripped on request.The customer's usersConfigurable

Account data (name, email, role)To provision and administer usersThe moving company's own staff accounts. Vendidit has no support-access path into inventory records; platform administrators can see invitation and signup metadata across companies to operate the platform.Deleted promptly on account closure, except records under active custody-chain or regulatory retention, which are kept until that hold lifts

Usage and diagnostic dataError and performance monitoring, to keep the application running. Personal data collection is off by default.Vendidit operationsConfirm

Use of AI servicesPhotographs go to an identification service.

Item identification uses a commercial identification service. Every suggestion is reviewed by a staff member before it becomes part of the record. The architecture is provider agnostic and the underlying service can be changed without changing the product.

Customer photographs are never used to train provider models. Data residency for processing: United States, in AWS us-east, the same region as AIMIS storage.

Ownership and portabilityThe record is the customer's.

The customer owns the records and photographs. The export is a spreadsheet and photograph files, readable without AIMIS.

Deletion is prompt and event-driven, not on a fixed day-count timer — it begins as soon as the customer requests it. Records under active custody-chain or regulatory retention are kept until that hold lifts, not deleted on a schedule. Backup deletion timing: data removed from the live database ages out of automated backups within the 3-day backup-retention window.

Access and administration

Who can do what.

Role based access, administered by each moving company's own staff. Vendidit has no support-access path into inventory records; platform administrators can see invitation and signup metadata across companies to operate the platform.

RoleCanCannot

CustomerCapture items, view and export their own records, delete their own account and dataEdit or delete an item once it is locked at capture

Moving company staffView, manage and export a client's moves and items within their own moving companyEdit or delete an item once it is locked at capture. Staff permissions are not yet split further by role.

VendiditOperates the underlying infrastructureAccess or impersonate a customer's inventory account — platform administrators can see invitation and signup metadata across companies, but not inventory records

Request the data flow summary.

One page, plain language, for the reviewer who has to sign.

Request the security overview