Privacy Policy

Last updated: November 7, 2024

Effective Date: November 7, 2024

1. Introduction

Resellify Inc. ("Resellify," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Chrome extension, web dashboard, and related services (collectively, the "Service"). Please read this Privacy Policy carefully. By using the Service, you consent to the practices described in this Privacy Policy.

2. Information We Collect

2.1 Information You Provide

We collect information you provide directly to us, including:

  • Account Information: Email address, name, password (encrypted), and profile information
  • Payment Information: Payment card details and billing address (processed securely through Stripe; we do not store full card numbers)
  • Authentication Data: Google OAuth credentials if you choose to sign in with Google
  • Communications: Information you provide when contacting customer support or communicating with us

2.2 Automatically Collected Information

When you use our Service, we automatically collect certain information:

  • Usage Data: Task execution history, task types, timestamps, success/failure rates, and feature usage patterns
  • Device Information: Browser type and version, operating system, Chrome extension version
  • Analytics Data: Page views, session duration, user interactions, and performance metrics (collected via PostHog)
  • Technical Data: IP address, unique device identifiers, crash reports, and error logs

2.3 Third-Party Platform Data

To provide automation features, we collect limited data from third-party marketplaces:

  • Depop Integration: Access tokens, session IDs, listing preferences, and location coordinates (lat/lng) for listing management
  • Marketplace Activity: Product IDs, listing statuses, and interaction timestamps to execute automation tasks
  • We only access data necessary to perform the automation features you request
  • We do not collect or store your marketplace passwords

2.4 Cookies and Local Storage

We use cookies and browser local storage to:

  • Maintain your session and keep you logged in
  • Store user preferences and settings
  • Analyze usage patterns and improve the Service
  • Remember your marketplace authentication tokens

3. How We Use Your Information

We use the information we collect to:

  • Provide the Service: Process and execute automation tasks, manage your account, and deliver features you request
  • Process Payments: Handle subscriptions, billing, and payment transactions
  • Communicate: Send service updates, security alerts, support messages, and marketing communications (you can opt out)
  • Improve the Service: Analyze usage patterns, identify bugs, develop new features, and enhance performance
  • Ensure Security: Detect fraud, prevent abuse, monitor for security threats, and protect user accounts
  • Comply with Legal Obligations: Respond to legal requests, enforce our Terms of Service, and comply with applicable laws
  • Analytics: Generate usage statistics and insights (anonymized where possible)

4. How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

4.1 Service Providers

We share data with trusted third-party service providers who help us operate the Service:

  • Supabase: Authentication, database hosting, and data storage
  • PostHog: Analytics and product insights
  • Stripe: Payment processing and subscription management
  • Google: OAuth authentication services

These providers are contractually obligated to protect your data and may only use it to provide services to us.

4.2 Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., court orders, subpoenas).

4.3 Business Transfers

If Resellify is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you before your information is transferred and becomes subject to a different privacy policy.

4.4 With Your Consent

We may share your information with third parties when we have your explicit consent to do so.

5. Chrome Extension Permissions

Our Chrome extension requires the following permissions to function. Here's what each permission is used for:

  • storage: Save user preferences, settings, and authentication tokens locally
  • scripting: Inject automation scripts into marketplace websites (e.g., Depop) to perform tasks
  • identity: Enable Google OAuth authentication for account sign-in
  • cookies: Access marketplace session cookies to maintain authenticated state
  • alarms: Schedule automated tasks to run at specified intervals
  • webRequest & declarativeNetRequest: Monitor and modify network requests to marketplaces for task execution
  • host_permissions (all URLs): Access marketplace websites to perform automation tasks (we only interact with supported marketplaces)

We only use these permissions for the functionality described above. We do not access, collect, or transmit data from websites outside our supported marketplaces.

6. Data Retention

We retain your information for as long as necessary to provide the Service and fulfill the purposes outlined in this Privacy Policy. Specifically:

  • Account Data: Retained until you delete your account or request deletion
  • Usage Data: Retained for up to 2 years for analytics and service improvement
  • Payment Records: Retained for 7 years to comply with tax and accounting regulations
  • Support Communications: Retained for 3 years after resolution

After the retention period, we will delete or anonymize your data. You may request earlier deletion by contacting us (see Section 10).

7. Data Security

We implement industry-standard security measures to protect your information, including:

  • Encryption of data in transit using TLS/SSL
  • Encryption of sensitive data at rest
  • Secure authentication using OAuth 2.0 and hashed passwords
  • Regular security audits and vulnerability assessments
  • Access controls and monitoring to prevent unauthorized access
  • Secure payment processing through PCI-compliant providers (Stripe)

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

8. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence, including the United States, where our servers and service providers are located. These countries may have different data protection laws. By using the Service, you consent to the transfer of your information to these countries. We ensure that appropriate safeguards are in place to protect your data in accordance with this Privacy Policy.

9. Your Privacy Rights

Depending on your location, you may have certain rights regarding your personal information:

9.1 General Rights

  • Access: Request a copy of the personal information we hold about you
  • Correction: Request correction of inaccurate or incomplete information
  • Deletion: Request deletion of your personal information (subject to legal obligations)
  • Portability: Request a machine-readable copy of your data
  • Opt-Out: Unsubscribe from marketing communications (you'll still receive service-related emails)
  • Object: Object to processing of your information for certain purposes

9.2 California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act:

  • Right to know what personal information is collected, used, shared, or sold
  • Right to delete personal information
  • Right to opt-out of the sale of personal information (we do not sell your information)
  • Right to non-discrimination for exercising your rights

9.3 European Privacy Rights (GDPR)

If you are in the European Economic Area, UK, or Switzerland, you have rights under the General Data Protection Regulation:

  • Right to access, rectify, erase, or restrict processing of your personal data
  • Right to data portability
  • Right to object to processing
  • Right to withdraw consent at any time
  • Right to lodge a complaint with a supervisory authority

To exercise any of these rights, please contact us at privacy@resellify.com. We will respond to your request within 30 days (or as required by applicable law).

10. Children's Privacy

Our Service is not intended for users under the age of 18. We do not knowingly collect personal information from children under 18. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately. If we discover that we have collected personal information from a child under 18, we will delete that information promptly.

11. Third-Party Websites and Services

The Service may contain links to third-party websites (such as Depop, Grailed, etc.) that are not operated by us. We have no control over and assume no responsibility for the content, privacy policies, or practices of third-party sites or services. We encourage you to review the privacy policies of any third-party sites you visit.

12. Do Not Track Signals

Some browsers have "Do Not Track" features that allow you to tell websites not to track you. We currently do not respond to Do Not Track signals because there is no industry standard for compliance. However, you can control cookies and tracking through your browser settings or by opting out of analytics (contact us for assistance).

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by:

  • Updating the "Last updated" date at the top of this page
  • Sending an email notification to the address associated with your account
  • Displaying a prominent notice in the Service

Your continued use of the Service after the effective date of the updated Privacy Policy constitutes your acceptance of the changes. We encourage you to review this Privacy Policy periodically.

14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Resellify Inc.

Email: privacy@resellify.com

Support: support@resellify.com

Data Protection Officer: dpo@resellify.com

We will respond to your inquiry within 30 days or as required by applicable law.