Privacy Policy

Last updated: 2026-06-05

This Privacy Policy describes how ResellBestie ("we", "us", "our") collects, uses, and shares information when you use the ResellBestie mobile application and our website at resellbestie.com (collectively, the "Service").

The short version. We collect what we need to run the app: your account info, the photos and listings you create, and purchase records. We use AI providers to identify items and generate listing copy. We don't sell your personal data. Community pricing data is opt-in and always aggregated — we never expose individual sale prices.

What we collect

Account information

Email address (via Sign in with Apple, Google, or standard email/password sign-in)
A unique account identifier from your sign-in provider (Apple or Google sub-claim) — used only to recognize returning users
Display name, if you choose to set one

Content you create

Photos you upload of items for analysis or listing
Listing text, prices, categories, and notes you write or that the AI generates from your photos
Location codes you assign (e.g. "Cubbie B12") — private to your account only
Sale outcome data: final sale price, marketplace, and date when you mark an item sold

Usage data

Usage ledger: each item you capture and each AI operation is logged with a timestamp and type, so we can track your item allowance and billing
Crash reports and basic diagnostic events to help us identify and fix bugs
App interaction events (e.g., features used, screens visited) to understand how the app is being used — these are not linked to your identity for advertising purposes

Payment information

We do not collect or store payment card details. Subscriptions and item top-up packs are processed by Apple In-App Purchase or Google Play Billing, who handle billing and payment information under their own privacy policies. We receive purchase confirmation metadata (product ID, transaction ID, amount) via RevenueCat to apply purchases to your account.

How we use it

To provide the Service: identify items in your photos, generate listings, store your inventory, track your item allowance, and deliver content to your device.
To improve the Service: we use aggregated, anonymized sale outcome and usage data to improve pricing models and product features. Individual sale prices are never shared or exposed.
To support you: respond when you contact support@resellbestie.com or submit feedback in the app.
To send service communications: notify you of material changes to the Service, your account, or these policies. We do not send marketing emails without your consent.
To meet legal obligations: retain records required by tax authorities, respond to lawful government requests, and enforce our Terms of Service.

Legal bases for processing (GDPR)

If you are located in the European Economic Area (EEA) or United Kingdom (UK), we process your personal data on the following legal bases under GDPR and UK GDPR:

Contract performance (Article 6(1)(b)): processing your account data, content, and usage ledger to provide the Service you signed up for.
Legitimate interests (Article 6(1)(f)): crash reports and diagnostic data to maintain service quality; aggregated analytics to improve the product. Our interests are not overridden by your privacy rights given the limited nature of this data.
Consent (Article 6(1)(a)): community pricing contributions, which are opt-in. You may withdraw consent at any time.
Legal obligation (Article 6(1)(c)): retaining billing and tax records as required by law.

To exercise your GDPR rights, including access, rectification, erasure, portability, restriction, and objection, contact privacy@resellbestie.com. You also have the right to lodge a complaint with your local supervisory authority (e.g., the ICO in the UK, or your national data protection authority in the EEA).

Third-party services we use

Anthropic (Claude) and Google (Gemini) — we send your photos and a description prompt to these AI providers to identify items and write listing copy. Per their published data policies, neither provider trains general foundation models on customer API inputs by default.
Apple App Store and Google Play — handle billing, in-app purchases, and (for users who sign in with Apple/Google) authentication.
RevenueCat — receives subscription and purchase events from Apple/Google on our behalf and notifies our backend so we can apply the purchase to your account. RevenueCat sees your purchase metadata (product, amount, transaction ID) but not your payment card details.
Google Cloud Platform — our backend and database run on Google Cloud in the United States. Photos are stored in Google Cloud Storage. Google processes data on our behalf under a data processing agreement.
Cloudflare — handles DNS and domain routing for resellbestie.com. Cloudflare may process network-level data (IP addresses) consistent with their privacy policy.
Marketplaces you connect — when you link an eBay account (or other future marketplace), we receive your seller identity and the OAuth tokens needed to post listings on your behalf. We never see or store your marketplace password.

Cookies and similar technologies

Our mobile app does not use browser cookies. Our website (resellbestie.com) uses only essential cookies required for the site to function (such as session state) and does not use advertising, tracking, or third-party analytics cookies. We do not serve ads or share browsing data with ad networks.

If we add analytics to the website in the future, we will update this section and, where required, obtain your consent first.

International data transfers

Our servers and those of our primary providers (Google Cloud Platform, Anthropic, RevenueCat) are located in the United States. If you access the Service from the EEA, UK, or another region with data transfer restrictions, your personal data will be transferred to the US.

We rely on the following transfer mechanisms for EEA and UK data: Google Cloud's Standard Contractual Clauses (SCCs) for our infrastructure and storage; Anthropic's and RevenueCat's applicable data processing agreements and SCCs for AI processing and purchase data. Where an adequacy decision applies (e.g., the EU–US Data Privacy Framework for qualifying US companies), we also rely on that.

You may request more information about our transfer mechanisms by contacting privacy@resellbestie.com.

Community pricing data

If you opt in (off by default), the price you sold an item for, the marketplace it sold on, the item's category, condition, and a region code (your ZIP3 or metro area — never your full address) may be added to our community pricing dataset. The dataset is only ever exposed as aggregated ranges (25th percentile, median, 75th percentile) and requires at least five data points in a bucket before it's shown to anyone. You can opt out at any time in Account → Community pricing, and your existing contributions will be removed within 30 days.

Data retention

Account data persists for the life of your account.
Photos and listings persist until you delete them or delete your account.
Usage-ledger entries are retained for accounting and billing audit purposes.
Crash reports and diagnostic events are kept for 90 days, then automatically deleted.
When you delete your account in the app, we immediately remove personally identifying information (email address, display name, sign-in identifiers, password hash) and disconnect any marketplace accounts you connected. Listings and usage-ledger entries are retained in anonymized form for accounting purposes and, if you had opted in, for the community pricing dataset. Sign-in becomes impossible the moment deletion completes.
Records we are legally required to keep (typically billing and tax records, up to 7 years) are retained in anonymized form only.

Your choices and rights

Access and export: request a copy of your personal data by emailing privacy@resellbestie.com. We will respond within 30 days.
Correction: update your email or display name in the app under Account settings, or contact us to correct inaccurate data.
Deletion: delete your account in the app under Account → Delete account, or email privacy@resellbestie.com. See Data Retention above for details on what is removed.
Opt out of community pricing: toggle in Account → Community pricing at any time.
Marketing communications: we do not send marketing emails by default. If we introduce a newsletter or promotional emails, you will be able to unsubscribe via a link in every email.

California residents (CCPA / CPRA)

California residents have the right to know what personal information we collect, how we use it, and with whom we share it; the right to delete personal information; the right to correct inaccurate personal information; and the right to opt out of the sale or sharing of personal information for cross-context behavioral advertising.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We do not use your data for targeted advertising. If this changes, we will update this policy and provide an opt-out mechanism before doing so.

To exercise any CCPA/CPRA right, contact privacy@resellbestie.com. We will acknowledge your request within 10 business days and respond substantively within 45 days. We will not discriminate against you for exercising any of these rights.

EEA and UK residents (GDPR / UK GDPR)

In addition to the rights described above, you have the right to restrict or object to certain processing, the right to data portability, and the right to lodge a complaint with your local supervisory authority. See the "Legal bases for processing" section above for contact information.

Do Not Track

Our website does not respond to browser Do Not Track (DNT) signals because we do not engage in the cross-site tracking that DNT is designed to prevent. We do not track you across third-party websites.

Children

ResellBestie is not directed at children under 13 (or under 16 in the EEA/UK), and we do not knowingly collect personal information from anyone under these ages. If you believe a child has provided us personal information, contact us at privacy@resellbestie.com and we will delete it promptly.

Security

We use industry-standard safeguards: HTTPS for all data in transit, encryption at rest for the database, OAuth tokens stored encrypted, and no plaintext passwords (passwords are hashed with bcrypt). We limit access to personal data to personnel who need it to provide the Service. No system is perfectly secure; if we become aware of a security incident affecting your data, we will notify you as required by applicable law.

Changes to this policy

If we make material changes to this policy, we will notify you in the app and update the "Last updated" date above at least 30 days before changes take effect. Continued use of the Service after a change takes effect means you accept the updated policy.

Contact

Privacy questions and rights requests: privacy@resellbestie.com
General support: support@resellbestie.com