Privacy Policy

1. About Us

VendorDSS is a product name and brand of QuestFeed Pty Ltd. This privacy policy is issued by, and all data protection obligations are held by:

2. Information We Collect

Information You Provide

Automatically Collected

During the free early-access preview we do not collect any payment information. If paid plans are introduced, payment processing terms will be added to this policy before any payment details are collected.

3. Public-Record Business Information

The platform's content — awards, tenders, grants, and business listings — is compiled from official government publications. Most of it concerns companies and government bodies rather than individuals. Where public records do touch individuals, we apply these rules:

• — Grant recipients without a published business registration are not named. An unregistered recipient may be a private individual, so those records display no recipient name — by design, enforced in how the data is built.
• — Personal applicant names in public records are masked by default and shown only where a deliberate, jurisdiction-specific decision permits it.
• — Sole traders appear as their registered business identity, exactly as the government register publishes them.
• — Anyone may request correction or removal of information about their business or themselves — see the process in our Terms, and Section 8 below for your privacy rights.

Removal from VendorDSS does not remove the underlying record from the government register that published it — that register remains the authoritative source.

4. How We Use Your Information

• Operate your account and authenticate you securely
• Run your saved searches and send the watchlist digests you asked for
• Provide customer support and respond to correction or removal requests
• Improve the platform's search, resolution, and presentation
• Send service communications (sign-in codes, security notices, material changes to terms)
• Comply with legal obligations and enforce our Terms

5. Email Preferences

• — Watchlist digests are sent only for searches you saved with notifications on, and only when new matching records are published.
• — Every digest carries a working one-click unsubscribe. Unsubscribing stops all digest email to your address immediately; you can re-enable notifications any time from a saved search's settings in the app.
• — Transactional email (sign-in codes, password resets, security notices) is sent only when you or your account's security requires it.
• — We do not send marketing email during the early-access preview.

6. What We Do NOT Do

7. Data Security and Retention

You may request deletion of your data at any time. We process deletion requests within 30 days, subject to legal retention requirements.

8. Your Rights

Under the Australian Privacy Principles and applicable international regulations, you have the right to:

9. Cookies and Local Storage

The platform uses only what it needs to function:

• — Essential session storage in your browser keeps you signed in and remembers preferences like your selected market. Clearing it signs you out.
• — No advertising or cross-site tracking cookies. We do not run third-party advertising or tracking technologies.

10. International Transfers and Third-Party Services

VendorDSS operates from Australia with infrastructure in the United States. Your data may be processed in:

• — United States (AWS infrastructure — primary application data storage)
• — Australia (company operations)
• — Cloudflare's global edge network (content delivery)

Where data is transferred internationally, we take reasonable steps required by APP 8 (cross-border disclosure) and, for EU individuals, rely on appropriate safeguards.

These are currently our only material service providers. If paid plans introduce a payment processor, this policy will be updated before any payment data is collected.

11. Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices or legal requirements. Material changes will be notified by email to registered users or by a prominent notice on the platform. Continued use of VendorDSS after changes constitutes acceptance of the updated policy.