Privacy Policy

2.1 Account Information

When you sign up, we collect:

• —Email address
• —Name
• —Venda account password — handled by Clerk, our sign-in provider; Venda never stores it
• —Phone number (optional, for contact)
• —Subscription tier and billing information

2.2 Listing and Product Data

• —Photos and descriptions you upload
• —Pricing, quantities, SKUs, and product categories
• —AI-generated listing titles and descriptions
• —Cost of goods sold (COGS) for profit tracking

2.3 Marketplace Connection Data

For eBay, Etsy and Shopify we use each marketplace's official API. We store:

• —OAuth access and refresh tokens (encrypted in our database)
• —Your seller username and store information (name, location, rating)
• —Sales and order data those APIs return (order history, prices, fees)

For Etsy, Venda's servers check your shop's recent paid orders through Etsy's API to detect sales; Venda keeps only the order and listing numbers and the quantity, not the buyer's details.

For Poshmark, Mercari, Depop, Facebook Marketplace, Grailed and Whatnot there is no public listing API. You sign in on the marketplace's own login page inside the Venda app (phone) or in a Venda-managed browser window (desktop). Venda never sees or stores your password. After you sign in, Venda stores an encrypted copy of that login session (the cookies the marketplace issued to you) — AES-256-GCM, in our database in the United States — and which of your devices saved it. We use it only to:

• —restore your login on your own devices so you are not asked to sign in again;
• —check your Grailed listings for sales and complete Grailed removals from our servers;
• —complete a Poshmark removal from our servers when an item sold on Poshmark and your device has not removed it within 20 minutes.

Important: We never ask for, see, or store marketplace passwords. You can delete the saved session for any platform at any time in Settings → Platforms; it is also deleted when you disconnect the platform or delete your account. See How Venda Connects for the platform-by-platform detail.

2.4 Device and Session Data

• —Device type (iPhone, Android, Windows, Mac, etc.)
• —App version and OS version
• —Push notification token for sale alerts
• —Browser user agent
• —IP address (for rate limiting and fraud detection)
• —Crash reports: when the Venda app crashes or hits an error, a report with the error details, app and OS version, device model and the app screens used just before it. Crash reports do not include your name, email, listings or marketplace logins.
• —App launch counts: how often the mobile app is opened, by app version and platform, so we know which versions are in use

4.1 To Provide the Service

• —Generate listings using AI (Claude)
• —Publish, edit and remove listings on the marketplaces you connect
• —Detect when items sell and remove them from your other marketplaces (target: within 2 minutes)
• —Calculate pricing, profit, and analytics
• —Manage your subscriptions and billing

4.2 Communications

• —Send push notifications about sales and delisting status
• —Send transactional emails (password resets, billing confirmations)
• —Send product updates and feature announcements (if you opt in)

5.1 What We Do NOT Do

• —We do NOT sell or rent your personal data to third parties.
• —We do NOT share your data with marketing or advertising companies.
• —We do NOT use your data for purposes unrelated to providing Venda.

5.2 What We Share (Only as Necessary)

We share data only with:

• —Marketplaces: eBay, Etsy, Shopify (official APIs); Poshmark, Mercari, Depop, Facebook Marketplace, Grailed, Whatnot (your own signed-in session) — to fulfill publish, edit and removal requests
• —Venda-operated services that read marketplace listing pages to detect sales (hosted on Vercel and on Venda-operated servers)
• —Cloud infrastructure: Supabase, Vercel, Firebase, Clerk
• —Crash reporting: Sentry (Functional Software, Inc.) receives crash reports from the Venda apps, only to find and fix bugs
• —App delivery: Expo (EAS) delivers mobile app updates and counts app launches by version
• —Payment processor: Stripe — subscriptions are purchased on venda-list.com; Venda never sees your card details
• —AI services: Claude (Anthropic) — for listing generation

7.1 Access, Correct, Delete

You can request a copy of your data or update your account info by emailing support@venda-list.com (we'll respond within 30 days). You can delete your account at any time from your Account page on the web, or in the mobile and desktop apps under Settings → Delete Account.

7.2 GDPR (EU Users)

EU users have the right to access, rectify, erase, restrict processing, and port your data. You may also lodge a complaint with your local data protection authority.

7.3 CCPA (California Users)

California residents have the right to know what data is collected, request deletion, and opt out of "sale" — which we don't do.