VendOS is a private, internal software application built and operated by 27 Grand LLC, a Kansas limited liability company doing business as 27 Grand Vending ("we," "us"). It manages our own vending machine fleet: product catalog, inventory, sales reporting, sales tax reporting, and accounting integration. It is not offered to the public, is not listed on any app store, and has no third-party users.
Information VendOS handles
VendOS processes operational data belonging to our own business: vending machine sales transactions (products, quantities, amounts, and sales tax amounts collected), inventory and restock records, and product information. Vending customers pay at the machine through the machine vendor's payment system; VendOS never receives or stores cardholder data, payment card numbers, or the personal identity of vending customers.
QuickBooks Online connection
With our authorization through Intuit's OAuth 2.0 consent process, VendOS connects to our own QuickBooks Online company to record daily sales summaries and sales tax amounts. Access is limited to the QuickBooks Online Accounting scope. OAuth tokens are stored encrypted (AES-256-GCM) on our servers, are never shared with any third party, and can be revoked at any time from the application or from Intuit's connected-apps settings. Accounting data retrieved from QuickBooks is used solely for our own bookkeeping and tax reporting.
Sharing & scope
Data handled by VendOS is not sold, rented, or traded. It is shared only with the service providers that host our own infrastructure (database and application hosting) and with Intuit (QuickBooks) as described above, and otherwise only as required by law. This policy covers the VendOS application specifically; any consumer data collected at the machines themselves is handled in compliance with applicable privacy and data protection laws, including the California Consumer Privacy Act and applicable Kansas privacy legislation, as provided in our machine placement agreements.
Security & retention
Data is transmitted over HTTPS and stored in access-controlled databases with row-level security. Administrative access requires authentication. Business records, including sales and tax records, are retained as required for tax and accounting purposes.
Contact
Questions about this policy: [email protected]