My Vendor Show
Sign inGet early access

Privacy Policy

Effective November 8, 2026 · Version 2026-11-08

This policy explains what JPD Platforms LLC ("we" or "us") collects when you use My Vendor Show (myvendorshow.com) or Citywide Garage Sales (citywidegaragesales.com), how we use and share it, how long we keep it, and your choices. It covers the sites and the emails we send.

In short: we collect what we need to run shows and applications. We don't sell your information, we don't show ads, and we don't track you across other sites. A vendor's application goes to the host of that show, who uses it to run their show.

1. What we collect

From hosts:

  • your email address, and your name and picture if you sign in with Google;
  • your organization: its name, time zone and web address, the email for vendors' replies, the mailing address for your show announcements, and what you put on your public page (introduction, about, city and state, the year you started, the kinds of shows, website, social media, logo, pictures and donation link);
  • how you heard about us, if you tell us when you sign up (with which of our guides, if you signed up from one), and the host who referred you, if one did (through their link or code);
  • your venues (names, addresses, floor plans and maps) and your shows (dates, prices, forms, rules, details for vendors, and sponsors with their names, logos, links, contacts and amounts, and the invoices and receipts you have us email them);
  • vendors' records you import, and the emails you send vendors;
  • the notes you keep in My Notes about vendors, venues and shows, which only you can see;
  • for Square, which account you connected and its access tokens (kept encrypted). We never get your Square password;
  • a record of each time you agree to these documents (when, the version, your IP address and browser), and of changes to your settings and who made them.

From vendors:

  • your application: email, business name, contact name, phone, type of business, category, what you sell, website and social media, a mailing address if the host asks, your booth choice, your answers to the host's questions, and the photos and documents you add, like a certificate of insurance or a permit;
  • if you withdraw from a show after being approved, when you did and the note you send the host with it, which only the host's team sees;
  • whether you said yes to being featured in the host's posts about the show, and, if you did, what you choose to share for it;
  • if the host sends you a survey after the show, your answers to it, and whether you answered. On a survey the host keeps anonymous, your answers are kept without your name, and we note only that you answered, so you aren't asked twice or reminded;
  • your payments: amounts, dates, how you paid and receipt links. Card numbers go straight to Square and never reach us;
  • your booth, the emails sent to you and whether each was sent, delivered, bounced or marked as spam (our email provider tells us), and a record of each time you agree to these documents (when, the version, your IP address and browser);
  • if you join a host's mailing list: your name, business, email, phone, city, state, what you sell and which show you joined from, and whether you've unsubscribed (marking one of the host's emails about their shows as spam counts as unsubscribing);
  • your application's private link, which we keep only in scrambled form.

About sponsors: a host who has us email a sponsor an invoice or receipt gives us the sponsor's name, contact, email and logo, and what they pay. We use them only to send those emails and show the sponsor their own invoice through its private link, which we keep only in scrambled form. If a sponsor pays by card on that page, we keep the payment's amount, date and Square receipt link, and any refund; card numbers go straight to Square and never reach us.

From anyone: what you send us through Contact us (your name, email, what it's about and your message), what you send a host through "Email us" on their page (passed on to them), your email if you join our waitlist, your email, which guide and whether you ticked the box for our news if you ask for one of our guides' printables, what you ask John, our help chat, and a scam report through Report a scam (who contacted you, the link they sent, what they asked for, what happened, and your email if you give it). The show's host gets the report, but never your email.

From shoppers: if you sign up to hear about a host's next show (on a show's shopper's guide, its page or the host's page), your email, your first name if you give it, which show you signed up at, and whether you've unsubscribed. A host can also add you from a paper sign-up sheet you filled in at their show. Only that host sees it, and we email you for them only about their shows. If you enter a host's door prize, your first initial, last name and email, your entry's number and which show, and whether you asked to join their shopper list; the host sees your entry, to draw the winner.

Automatically: your IP address and browser details, for the check that keeps bots off our forms, for security and for the records of agreeing; technical logs kept by our hosting provider; and the cookies in section 4.

Counting visits to show pages: we count how many times each show's page and its application form are opened, each day, and the kind of site each visit came from (like Facebook, Google, an email or the show's QR code), and show those counts to the show's host. We keep only the numbers: not your IP address, not a cookie, nothing about who you are. Your browser keeps a note in the open tab that the visit was counted, so reloading doesn't count it twice; it's gone when you close the tab. We don't use any other analytics, or any advertising trackers. If we add any, we'll update this policy first.

Kept on your device, not sent to us: a vendor's application before it's sent, and their details for the next one, stay on their own phone or computer until they clear them.

2. How we use it

  • to run the sites: accounts, shows, applications, booths, payment records and the emails about them;
  • to keep the sites secure, and to prevent and look into fraud, scams and abuse;
  • to answer your questions, and to improve the sites and our help;
  • to email you a guide's printable you asked for, and our news only if you ticked the box for it (each news email has a link to stop them);
  • to meet our legal duties, such as taxes, record keeping and lawful requests, and to enforce our terms.

We don't sell personal information, share it for targeted advertising, or use it to make decisions about you that have legal or similarly significant effects.

The help chat: John is an AI. Your question, the page you're on and whether you're a host or a vendor go to Anthropic, which writes the answer. Under its commercial terms, Anthropic doesn't train its AI on what you ask. For a vendor, it also gets their business name, the show and where their application stands, and nothing else from it. No payment details go to the chat.

3. Who sees it

  • Hosts see the applications sent to their shows (everything the vendor answered, with photos and documents), with payments, booths and the emails sent and whether each arrived, plus their own mailing list, shopper list, door prize entries and imported records, and the counts of visits to their shows' pages (numbers only). They see the answers to their own post-show surveys: with each vendor's name, or, on an anonymous survey, how many answered and what was said, never who. Each host uses that information to run their shows under their own practices, and is responsible for it. A host may feature vendors who said yes in their own posts about the show, on social media and elsewhere, under those sites' rules. Ask the host about how they use it.
  • Vendors see their own application, payments and booth. Approved vendors also see a show's details for vendors and its other ways to pay.
  • Sponsors a host sends an invoice see their own invoice, receipt, card payment and logo, and the show's other ways to pay.
  • Anyone can see show pages and hosts' pages: what the host puts there, including their name, logo, the email for vendors' replies if they set one, and sponsors they choose to show. Once the host shares booths, each approved vendor's business name, category and booth number appear on the show's map for shoppers, until 30 days after the show. Vendors who said yes to being featured may also appear on show pages when the host shows them there, with the words and photo they chose and their links. Never a vendor's email, phone or address.
  • The host who referred you, if one did: its owners and admins see your organization's name, when you joined and how far along you are, and once your first show here is over, its name, when it ended and the reward we pay them from it (a third of the booking fees we kept), never your vendors or their payments. We tell them when you sign up.
  • Other hosts see a venue's rooms once a show there goes live, unless the host marked it a private place: its name, address and room layout, never the host's booths, vendors or setup, and never who uses it.
  • The services that run the sites for us, only to do that work: Supabase (database, file storage and sign-in), Vercel (hosting), Resend (sending email), Cloudflare (our domain, security and the bot check), Anthropic (the help chat) and, if you use them, Square (payments) and Google (signing in). Square and Google also follow their own privacy policies for what you give them directly.
  • When the law requires it, as with a subpoena or court order, or to protect people's rights and safety or to stop fraud. Where the law allows, we'll tell you first.
  • If the business changes hands, in a merger, sale or reorganization, your information may go with it, still under this policy.

We don't share personal information with anyone for their own direct marketing (what California's "Shine the Light" law asks about).

4. Cookies and Do Not Track

  • We use only the cookies the sites need: your sign-in, the email a sign-in code went to (for 15 minutes), a vendor's or sponsor's private link (only on their own pages), a host's referral link (for 90 days, so that if you sign up we know who sent you), one of our guides' sign-up links (for 90 days, so that if you sign up we know which guide you came from), short-lived ones while connecting Square or deleting an account, and one that remembers which site a preview address shows. None are for ads or analytics, and counting visits to show pages uses none (see section 1).
  • On forms anyone can fill in, Cloudflare's bot check (Turnstile) reads signals like your IP address and browser details to tell people from bots, not to track you. The sign-in page loads Google's button, which Google provides. These are the only outside services that may collect information about you on our pages, under their own privacy policies.
  • We don't track you across other sites, or let others do so on ours for advertising, so we treat every visitor the same whether or not your browser sends a Do Not Track or Global Privacy Control signal.

5. How long we keep it

  • An account's information: while it's open.
  • When a host deletes their account: their sign-in, public page and show pages, shows still being planned, mailing list, shopper list and vendor list, notes, vendor spotlights, post-show surveys and their answers, venues and maps, pictures and vendors' files, help chats and Square connection are deleted at once. We keep the shows that went live, with their applications, payments, refunds, invoices, a record of each email (who it went to, its subject and when) and their history, plus the organization's name, the owner's email and the records of agreeing, for 7 years, for taxes and in case a vendor, their bank or the law asks about a payment. Only we can see them, and vendors can still see their own application. Then we delete them.
  • What you ask the help chat: 90 days.
  • A vendor's or sponsor's private link is taken out of each email we keep once the email is sent.
  • Mailing list and shopper list entries: until the person unsubscribes, the host removes them or the host deletes their account. We keep an unsubscribe so that address isn't emailed again.
  • Door prize entries: 90 days after the show, unless you joined the host's shopper list with it; then as long as you're on that list and subscribed.
  • Messages to us through Contact us: as long as we need to help you, and no more than 3 years.
  • Scam reports: 3 years, to spot the same scammer again.
  • Asking for a guide's printable: a year if you didn't tick the box for our news; if you did, until you unsubscribe or ask us to delete it.
  • Counts of visits to a show's pages: as long as we keep the show.
  • Which host referred another: while both accounts are open, and until either one's records are deleted as above.
  • Records of agreeing: while the account is open, and 7 years after.
  • Backups of our database roll off within 30 days, and our hosting provider's technical logs within days.

6. Your choices and rights

  • See and change it: hosts in their account; vendors through their application's private link until the host reviews it; anyone else by emailing help@myvendorshow.com.
  • Download it: hosts can download their vendors, applications, sponsors and activity as spreadsheets. Anyone can ask us for a copy of their information.
  • Delete it: hosts can delete their account under Account, then Sign-in. Vendors and anyone else can email help@myvendorshow.com. We keep only what section 5 says we must, and a host keeps what they've already downloaded or printed.
  • Emails: every mailing list email and every email of our own news has a link to unsubscribe. Emails about an active application or account can't be turned off.

We answer requests within 45 days, and we may first confirm it's you, for example by email. We honor these requests wherever you live in the United States, including the rights some states' laws give their residents. If we turn a request down, we'll say why, and you can ask us to look again by replying. Asking never changes how we treat you.

7. Security

The sites use encrypted connections. Each host can reach only their own organization's information, private links are kept only in scrambled form, Square tokens are encrypted, card numbers never reach us, and our own admin pages need a second sign-in step. No system is perfectly secure. If a breach affects your information, we'll tell you as the law requires, including Illinois's Personal Information Protection Act, without unreasonable delay. Keep your email account safe, and never share a sign-in code or a private link.

8. Children

The sites are for adults. You must be 18 or older to use them, and vendors must be 18 or older to apply. We don't knowingly collect information from anyone under 18. If we learn we have, we delete it. Tell us at help@myvendorshow.com.

9. Where it's kept

The sites are for the United States, and your information is kept on servers in the United States.

10. Changes to this policy

We'll post any new version here with the date it takes effect. When a change matters, we'll email hosts and ask them to agree again before they keep using their account. Each application is sent under the version in effect at the time. See also our Terms of Service.

11. Contact us

JPD Platforms LLC, 2501 Chatham Rd, Suite N, Springfield, IL 62704. Email help@myvendorshow.com, or use Contact us.