Privacy Policy

Account and identity information. Email address, password hash for email accounts, Google account identifier and basic profile information when you choose Google sign-in, email-verification status, account role, session records, and workspace membership.

Authorized eBay seller information. OAuth tokens, seller and marketplace identifiers, listings, SKUs, titles, prices, quantities, listing dates and status, views and watchers where available, inventory, orders, limited buyer display information returned by eBay, fulfillment and return status, financial transactions, selling fees, promoted listing fees, shipping-label costs, refunds, advertising campaigns, and campaign performance.

Information you enter. Inventory source costs, purchase details, suppliers, storage locations, notes, recommendation actions, selected Prompt Studio items, prompts, contact messages, and other information you submit.

Billing information. Stripe customer and subscription identifiers, plan, subscription status, and checkout or billing events. Stripe processes payment-card and bank information; SellerCommand does not receive or store full payment-card numbers.

Technical and activity information. IP address and request metadata available in server logs, device and browser information, session and security events, pages and features used, sync history and errors, report activity, and approximate location inferred by service providers from IP address.

Cookies and similar technologies. Necessary session and OAuth state cookies and local storage used to remember privacy choices. With your permission, we also use pseudonymous first-party visitor and session identifiers to measure page views, button clicks, form submissions, referral and campaign attribution, account milestones, eBay connections, and billing conversions, together with Google Analytics and X pixel identifiers and events. Our first-party analytics does not record form field values or retain the IP address used for event rate limiting.

We collect information directly from you; from Google when you choose Google sign-in; from eBay when you authorize the connection; from Stripe about subscriptions and payment status; automatically from your browser and use of the Service; and from service providers that help us prevent abuse, monitor errors, deliver email, host the Service, and provide analytics you accept.

We use information to create and secure accounts; verify identity; connect and sync eBay data; calculate seller metrics; provide listings, inventory, order, profit, advertising, recommendation, prompt, and reporting workflows; process subscriptions; deliver transactional email; respond to support; monitor reliability; detect fraud and abuse; enforce our Terms; comply with law and eBay developer obligations; and improve the Service.

Where applicable law requires a legal basis, we process information to perform our contract with you, pursue legitimate interests in operating and securing the Service, comply with legal obligations, and, for non-essential analytics or advertising technologies, based on consent. You may withdraw consent at any time without affecting earlier lawful processing.

We do not use automated processing to make decisions that produce legal or similarly significant effects about you.

We disclose information only as reasonably needed to operate the Service, honor your choices, or comply with law. Categories of recipients include:

• Infrastructure and hosting: Railway and database infrastructure used to run the Service.
• Marketplace integration: eBay, when exchanging authorized API requests and responding to marketplace account events.
• Authentication and email: Google for optional sign-in and Resend for transactional messages.
• Payments: Stripe for checkout, recurring billing, invoices, fraud prevention, and the customer portal.
• Reliability and security: Sentry for error and performance monitoring.
• Analytics and campaign measurement: Google Analytics and X only when you accept non-essential tracking.
• Professional and legal recipients: advisers, regulators, law enforcement, courts, or counterparties when reasonably necessary to protect rights, investigate misuse, comply with valid legal process, or complete a merger, financing, acquisition, reorganization, or asset sale.

We do not sell personal information for money. Some privacy laws may define analytics or advertising disclosures as “sharing,” “targeted advertising,” or a “sale” even when no money changes hands. SellerCommand keeps those technologies off unless you accept them through our privacy choices control.

Necessary technologies support sign-in, session security, OAuth redirects, and core application operation. Because the Service cannot function securely without them, they are used when needed.

Optional technologies include SellerCommand first-party product analytics, Google Analytics, and the X conversion pixel. First-party analytics helps us understand anonymous and signed-in journeys through the Service; Google Analytics measures visits and product use; and the X pixel measures advertising campaigns. These technologies may process online identifiers, device and browser information, referring pages, campaign parameters, and interaction events. Google and X may also receive IP-derived information under their own policies. We do not activate these technologies unless you choose “Accept.” Choosing “Reject” does not reduce core Service functionality.

Your choice is stored in your browser’s local storage and a first-party consent cookie so server redirects can honor it. Clearing site data may reset the choice. You can reopen the panel below and change your selection. Rejecting after previously accepting prevents future collection on SellerCommand and removes our first-party analytics identifiers from that browser, but does not automatically erase information already received by a provider; contact that provider or use its privacy controls for those requests.

SellerCommand also recognizes browser controls by allowing you to block cookies or scripts, though blocking necessary technologies may prevent sign-in or other features.

Prompt Studio currently builds structured text from listing facts selected in your workspace. You decide whether to copy that text into ChatGPT or another third-party tool. SellerCommand does not automatically send Prompt Studio content to OpenAI through the current production workflow. If we later add direct AI processing, we will update this policy and provide any notice or choice required by law before using it.

We retain account and workspace information while your account is active and as reasonably necessary to provide the Service, maintain security and audit records, resolve disputes, enforce agreements, and satisfy legal, tax, accounting, and marketplace obligations. Retention varies by data type, sensitivity, and purpose. First-party analytics events are automatically removed after approximately 13 months unless a shorter period is configured.

Disconnecting or revoking eBay stops future authorized syncs but may not automatically delete information already imported. You may request account or workspace deletion by emailing us. We will verify the request and delete or de-identify information not subject to a valid retention exception. Residual copies may remain temporarily in protected backups or logs until they are overwritten under routine retention cycles.

We receive eBay marketplace account deletion or closure notifications at a dedicated endpoint and process related requests in accordance with applicable eBay developer requirements and law.

We use administrative, technical, and organizational safeguards designed for the nature of the information we process. These include HTTPS in transit, workspace access controls, signed sessions, restricted production configuration, and encrypted storage for eBay OAuth credentials.

No system is perfectly secure. You are responsible for using a unique password, protecting your email and marketplace accounts, and notifying us promptly of suspected unauthorized access.

Depending on where you live, you may have rights to know or access personal information; correct inaccurate information; delete information; receive a portable copy; object to or restrict certain processing; withdraw consent; opt out of sale, sharing, or targeted advertising; limit certain sensitive-information uses; and receive equal service without unlawful discrimination for exercising privacy rights.

Submit a request to [email protected] with “Privacy request” in the subject. Describe the right you wish to exercise and the account email involved. We may request information reasonably necessary to verify identity and authority. An authorized agent may submit a request where permitted by law, but we may require proof of authorization and verification from the account holder.

We will respond within the time required by applicable law. Some requests may be denied or limited where an exception applies, including security, fraud prevention, legal compliance, transaction completion, or protecting another person’s rights. You may appeal a denial by replying with “Privacy appeal.”

California and other U.S. states. The categories collected during the preceding 12 months are identifiers; customer records; commercial, internet or network activity; geolocation approximated from IP; professional or employment-related information you provide about a seller business; and inferences drawn for recommendations. We use and disclose these categories for the business purposes described above. We do not knowingly sell or share personal information of anyone under 16.

EEA, United Kingdom, and Switzerland. SellerCommand is operated from the United States. Information may be processed in the United States and other countries where our providers operate. Those countries may have different data-protection laws. Where required, transfers rely on recognized safeguards or provider contractual mechanisms. You may lodge a complaint with your local supervisory authority, though we encourage you to contact us first.

This section applies only to the extent the referenced law applies to SellerCommand or your information and does not grant rights excluded by law.

The Service is intended for business users age 18 or older. We do not knowingly collect personal information from children under 13, or under a higher age where local law requires parental consent. If you believe a child provided information, contact us so we can investigate and take appropriate action.

We may update this policy as the Service, providers, or law changes. We will post the revised policy and change the effective date. We will provide additional notice of material changes when required, such as through the Service or by email.

Questions, complaints, and privacy requests may be sent to [email protected]. Please do not email passwords, eBay tokens, payment-card details, or other secrets.