Privacy Policy

Who handles your information

We decide how to administer Sellify accounts, secure the service and provide support. Sellers decide which marketplace accounts and orders to manage; we process buyer information for those workflows and have our own responsibilities for its protection. A seller's agreement with Sellify does not mean every buyer has consented to every use. eBay, Amazon, Google and other external services have their own policies for their services.

Information we collect and why

• Account details: name, username, email, profile image if supplied, role, preferences, legal acknowledgement versions, password hashes for email accounts, verification records, and revocable session and device identifiers. Google sign-in supplies an account identifier and verified profile information. These let us create, authenticate and protect your account.
• Connected eBay accounts: seller identifiers, authorisation tokens, listings, prices, stock, performance information, orders and messages obtained through authorised marketplace connections. These support your selected selling workflows.
• Supplier products: URLs, identifiers, images, descriptions, variations, prices, availability and delivery information from supported product pages and monitoring. These support imports, drafts and supplier checks.
• Buyer and delivery information: marketplace order identifiers, buyer usernames, recipient names, addresses, phone numbers where provided, order items, messages, purchase references, delivery status and tracking. These come from sellers, connected marketplaces and the supplier order pages used for fulfilment and support.
• Verified Amazon sessions: account identity and verification status, region and device binding, selected order and tracking information. Sellify does not ask for or upload Amazon passwords or Amazon session cookies to its server.
• Operational records: jobs, status observations, error and security records, support correspondence, privacy requests, billing records and credit activity where applicable. We use these to operate and protect the service, handle disputes and meet applicable obligations. Do not include unnecessary sensitive information in notes or messages.

Your browser and the extension

Sellify uses browser storage to remember your login and preferences; server sessions can expire or be revoked. The extension uses supported Amazon pages for imports, product monitoring, session verification, order linking, shipment monitoring and checkout assistance. Public product monitoring can work without a verified private Amazon session; private order workflows need a verified session. Checkout assistance passes the selected buyer's delivery information to Amazon, prepares the supported checkout steps and leaves the final purchase click to you. It does not collect general browsing history, log keystrokes or read payment-card details. The eBay linking flow may temporarily manage eBay browser cookies and keep an encrypted recovery record on your device so the previous browser session can be restored. That recovery record can survive a failed restoration or sign-out until restoration succeeds; it is not necessarily memory-only. Signing out does not erase every local browser or extension record.

Purpose and lawful handling

We use information to provide the requested service, support sellers' order workflows, maintain security and reliability, respond to requests and comply with applicable obligations. The appropriate lawful basis depends on the activity and applicable law; it may involve the service contract, a legal duty, legitimate interests subject to applicable safeguards, or specific consent. Acknowledging this policy is not consent to unrelated marketing. Where a use depends on consent, you may withdraw it by contacting support; this may stop that feature without undoing earlier lawful processing. We do not sell personal information or provide it to advertising networks.

Providers and other recipients

• DigitalOcean hosts the primary production application and database in Sydney, Australia. Wasabi holds encrypted offsite backups in its Sydney region.
• Cloudflare provides DNS for the domain. The production website currently uses DNS-only records rather than Cloudflare's HTTP proxy.
• Google provides optional sign-in. Google Workspace supports confirmation emails and support correspondence. These services may process information outside Australia.
• eBay and Amazon receive and supply the information needed for the marketplace, import, fulfilment and monitoring workflows you use. Removing a connection from Sellify does not erase those companies' independent records.
• If a seller enables Discord notifications, selected notification details are sent to the configured Discord destination. The seller controls that destination and who can access it.
• We may disclose necessary information to advisers or authorities where lawfully required, to protect rights or safety, or in a business transfer subject to appropriate safeguards. Any future payment service will be identified when introduced; the current invitation gate does not itself take a payment.

International processing

Sydney hosting does not mean every copy or every access stays in Australia. Our operator is based in Indonesia, and authorised administration or recovery work may involve access or protected recovery copies there. Google, Cloudflare, Discord, eBay and Amazon can process information in the United States and other countries where they operate. Laws may differ from yours. We must assess the applicable cross-border requirements and use the safeguards they require; choosing Australian hosting alone is not proof of compliance.

Security

Controls include HTTPS, password hashing, revocable sessions, account-scoped access, encrypted production storage and encrypted offsite backups. No service or device is completely secure. Report suspected exposure promptly to support@itssellify.com without sending passwords, session cookies or payment-card details. We will investigate and take the containment and notification steps required by applicable law.

Retention and backups

We retain information for the service, support, security, dispute handling and applicable recordkeeping duties, and assess what can be erased when it is no longer needed. Signing out, archiving an order, ending a listing or disconnecting a marketplace is not erasure of all related records. Some recovery copies may still contain information removed from the active application. Current offsite backups have a 31-day minimum protection period; reaching that age does not automatically delete them. Immediate erasure from every backup is not promised. For a deletion request, we must assess the affected records, explain any specific lawful retention, and track outstanding copies and review dates. Deleting an account removes access and removable active workspace data. Restricted retained records and other copies are tracked separately; account deletion is not a claim that every copy has been erased.

Access, correction, deletion and complaints

In Settings → Profile, Privacy & account data provides a JSON account download. The download is limited to the categories described there; it is not a complete database export. These controls are also available on the invitation-only screen. Delete account lets the account owner directly delete their Sellify account after password or Google confirmation, without waiting for a support review. This revokes Sellify access and removes connected credentials and removable workspace data. It does not close marketplace accounts, cancel purchases or end eBay listings. Cancel any paid subscription first. Shared workspaces, the last platform administrator and unresolved in-flight operations may require resolution before deletion can safely complete. For privacy questions, concerns, access, correction, deletion, restriction or complaints, email support@itssellify.com. Buyers and people without a Sellify account can also contact us there. No particular subject line or legal wording is required. We may ask for proportionate proof of your identity and authority, but do not send identity documents unless we explain a safe way to provide them. We will assess the request under applicable law, meet applicable deadlines, and explain any lawful refusal, redaction or retention and how to challenge it. We do not disclose another person's information simply because it appears in the same workspace.

Australian and Indonesian rights

We accept privacy concerns from Australian users whether or not an exemption from the Australian Privacy Act applies. Where that Act applies, statutory access, correction and complaint rights remain available. If a concern remains unresolved, the Office of the Australian Information Commissioner explains its complaint process and jurisdiction at www.oaic.gov.au/privacy/privacy-complaints. Rights under Indonesian law and other applicable laws are not excluded by this policy.

Children and extension limited use

Sellify accounts are intended for adults using business software. Seller-provided orders may nevertheless identify a younger buyer or recipient; do not provide unnecessary age, health or other sensitive details. Extension information is used for the user-facing import, listing, fulfilment and monitoring purposes described here, not advertising, creditworthiness, lending decisions or unrelated activities. Contact support if inappropriate information has been provided.

Changes and earlier versions

We will publish the version and effective date when this policy changes, give additional notice where required and obtain appropriate consent for a new consent-dependent purpose. Existing acknowledgement records are not rewritten to imply acceptance of a later version. The September 2, 2026 version remains available at /privacy/versions/2026-09-02. Contact support@itssellify.com for this policy in an accessible format or assistance in Bahasa Indonesia.