Privacy policy

Last updated: August 28, 2026 · DRAFT pending attorney review

This Privacy Policy describes how Vendor Network ("Company," "we," "us," or "our") collects, uses, discloses, and retains personal information in connection with hoavendornetwork.com and related services (the "Platform"). This Policy is incorporated into and forms part of our Terms of Service. By using the Platform, you acknowledge the practices described in this Policy.

1. Information we collect

Information you provide. When you submit a bid request: your name, email address, telephone number if provided, your role, your community's name, type, size, and ZIP code, and project details, including any photographs, documents, budget information, and address you include. When you list a business: your name and contact details, company information, service categories and service areas, license numbers, certificates of insurance, tax forms, logo, and project photographs. When you submit a review: your name, role, community, rating, and the content of the review. When you refer a vendor or join the early-access list: the contact details you enter.

Information collected automatically. Standard server logs (IP address, browser type, and pages requested); a session cookie used to maintain your signed-in state; and, on review submissions, the submitting IP address and browser signature, which we use to detect fraudulent reviews. If you begin a vendor listing application and do not complete it, we retain the information entered so that the application can be resumed and so that we may follow up regarding it.

Payment information. Card payments are processed by Stripe, Inc. Card numbers are transmitted directly to Stripe and never touch our servers. We store only Stripe's account and transaction identifiers, the card brand and last four digits, and records of your payment history.

The Platform is intended for business use. We do not knowingly collect personal information from anyone under 18 years of age.

2. How we use information

We use personal information to: operate the Platform, including matching bid requests with Vendors, delivering bids, publishing vendor profiles and reviews, billing, and providing support; protect the integrity of the Platform, including reviewing vendor applications and bid requests before distribution, detecting and preventing fraud and abuse, and enforcing rate limits and our Terms of Service; and communicate with you regarding your account and activity on the Platform, including transactional email concerning bid requests, listing applications, and payments. We do not send third-party advertising email, and we do not use personal information to build advertising profiles.

3. How we disclose information

To Vendors, at your request. When you submit a bid request, the project details are disclosed to the Vendors matched to your requested services and area. Your contact information is disclosed to a Vendor only after that Vendor commits to your request and we confirm the introduction; Vendors who receive the request but do not commit do not receive your contact information.

To Buyers. A Vendor's profile, reviews, performance record, and submitted bids are displayed to the Buyers to whom the Vendor markets its services through the Platform.

To service providers. We disclose information to service providers that process it on our behalf, subject to confidentiality obligations, solely to provide services to us: Stripe (payments), Resend (email delivery), DigitalOcean (hosting), and Cloudflare (DNS and email routing).

For legal purposes. We may disclose information where required by law, to enforce our Terms of Service, or to protect the rights, property, or safety of the Company, our users, or the public. If the Company is party to a merger, acquisition, financing, or sale of assets, personal information may be transferred as part of that transaction, subject to this Policy.

We do not sell personal information, and we do not share personal information for cross-context behavioral advertising.

4. Cookies

The Platform uses a session cookie to maintain your signed-in state and account context, and a preview cookie during the prelaunch period. The Platform does not use advertising cookies or third-party analytics trackers. Because the Platform does not track users across third-party sites, it does not respond to "Do Not Track" browser signals.

5. Retention

We retain account, listing, project, review, and payment records for as long as your account is active and thereafter as necessary for the purposes described in this Policy, including: reviews, which remain associated with the business they describe; payment records, which are retained as required for tax and accounting purposes; and fraud-prevention signals, which are retained for as long as they remain useful for preventing abuse. When content is removed from display, we generally retain the underlying record with a changed status so that administrative decisions can be reviewed and corrected.

6. Your rights and choices

You may access and update most of your information by signing in to your account. You may request a copy of your personal information, correction of inaccurate information, or deletion of your account and associated personal information by replying to any email from the Company. We will respond within thirty days. We verify requests by confirming control of the email address associated with the account. We will not discriminate against you for exercising any privacy right. Depending on your state of residence (including California), applicable law may grant you specific rights to access, correct, delete, or port your personal information and to appeal a denial of a request; the process described above is the means of exercising those rights with us. Certain records are exempt from deletion while retention is required by law (including payment and tax records), and published reviews of a business may be retained in de-identified or attributed form to the extent permitted by law.

7. Security

Traffic to and from the Platform is encrypted in transit. Authentication is by emailed sign-in link; the Platform does not store passwords. Card numbers are processed by Stripe and never touch our servers. Access to administrative tools is restricted to authorized personnel. No security measure is infallible; if we learn of a breach of security affecting your personal information, we will notify you as required by applicable law.

8. Changes; contact

We may update this Policy by posting a revised version with a new "Last updated" date. Material changes will be communicated by email to account holders. Questions and requests regarding this Policy may be submitted by email by reply to any communication sent by the Platform.