Privacy Policy

Summary

• The extensions work only on marketplace pages you open, and only when you click one of their buttons. ResellSmith for Whatnot doesn't run on any website: it reads only the report files you choose.
• Listing notes, photos, and prices are sent to us only when you click an AI feature (such as "Generate draft" or "Suggest a price"). We pass them to our AI provider to produce the result and do not store them.
• ResellSmith for eBay connects to your eBay account only through eBay's official API, after you approve access on eBay's own page. We keep an encrypted eBay access grant (never your eBay password), and delete it when you disconnect or close your eBay account.
• Your email address comes from Stripe checkout, not from the extension.
• Anonymous usage events can be turned off in the extension's options.
• We do not sell data, use it for advertising, or use it to decide creditworthiness or lending.

AI features: notes, photos, and prices

When you click an AI feature, the extension sends what that feature needs to our API:

• Listing writer: the notes you type in our panel, the photos you already added to the marketplace's listing form (up to 4), and, only if you tick the box, the title and description you have already typed in the marketplace's form.
• Price suggestion: your search words and the sold prices (numbers only) summarized from the sold-search page you opened. Other sellers' names, photos, and listing text are not sent.

Our API forwards this content to Anthropic, which provides the AI model, and returns the draft or price range to your browser. We do not save the content of these requests or the AI's answers. For each AI request we record only a usage count and token totals against your account for the month, to enforce your plan's quota. Anthropic processes the content as our subprocessor under its commercial terms, which do not allow it to train models on this data; Anthropic may keep it for a limited period for abuse and safety monitoring as described in its own policies.

ResellSmith for eBay

When you click "Connect eBay", you sign in on eBay's own page and choose to allow access. eBay then gives our API a refresh token (a revocable access grant, not your password). We store it encrypted (AES-256-GCM) with your account and use it to make short-lived eBay access tokens, which stay on our server and are never sent to your browser. To match eBay's account-deletion notices we store only irreversible SHA-256 hashes of your eBay user id and username, never the id or username itself.

The extension asks our API for your active listings, the listings eBay says have interested buyers, and your listings' traffic figures (views, impressions, sales). We keep short-lived copies on our server so we stay within eBay's usage limits: listings for about 10 minutes and traffic figures for up to 12 hours. A change you are reviewing (an offer, a markdown sale, a price, title, or item-specifics edit) is kept for up to 15 minutes, until you confirm or it expires. Nothing is sent to eBay until you click the confirm button for that change.

When you click "Suggest improvements" on a listing, our API sends that listing's title, category, condition, price, item specifics, and a short excerpt of its description to Anthropic to produce the suggestion, as described above. We do not store it.

Disconnecting (in the extension) deletes the stored grant and every copy of your eBay data, and asks eBay to revoke the grant. If you close your eBay account, eBay notifies us and we delete the same data automatically. You can also remove access in your eBay account settings. Connections that expire (about 18 months after you connect) are deleted daily.

ResellSmith for Whatnot

ResellSmith for Whatnot does not run on whatnot.com and has no access to your Whatnot account. It works only from the reports you download from Whatnot yourself (the Weekly Orders Report and the Show Report) and pick in the extension. The file is read in your browser; we don't upload it.

From each report the extension keeps, in your browser only: order ids, item titles, categories, formats, quantities, SKUs, your cost of goods, sale prices, coupons, Whatnot fees, shipping charges, tips, refunds, show names and times, shipment ids and buyer usernames. It does not keep buyer addresses, shipping or tracking details, buyers' states or countries, or listing descriptions. Your run sheets, shipping checklist, follow-up marks and message template are stored the same way. None of this is sent to us or to our AI provider. Thank-you messages are copied to your clipboard for you to paste into Whatnot; the extension never sends messages. You can delete everything from the extension's settings, and it is removed when you uninstall the extension.

License and device data

To activate and refresh a license, the extension sends your license key and a random device id (created on install and stored in your browser) to our API. We store which devices are active on your license and when each was last seen, so we can enforce the device limit and let you free a slot.

Anonymous usage events

Unless you turn it off, the extension sends anonymous usage events tied to a random install id (not to your license, email, or identity): the product and version, event names such as "draft generated", "field filled" (with the field name), "sold prices viewed" (with a count), whether the review request was shown, opened or dismissed, and "page element not found" reports (which element, the site, and the page path with ids and numbers removed). Events never include listing text, prices, search words, usernames, or page content. You can turn this off at any time in the extension's options; when it is off, nothing is sent, including page-element reports.

Stored in your browser

The extension keeps its license token, device id, install id, your usage-data setting, simple usage counters, your most recent sold-price check (search words and prices), whether you accepted the AI notice, whether you've seen the review request, for eBay, your stale-listing settings, and for Whatnot, the reports you import, your run sheets, checklists and message template, in your browser's local extension storage. This data stays on your device and is removed when you uninstall the extension.

What we never collect

• Marketplace passwords, cookies, or session tokens, or your eBay user id or username in readable form
• Your browsing activity outside the marketplace pages the extension supports
• Buyers' or other sellers' names, messages, or photos (when eBay returns masked buyer names with a sent offer, we discard them; buyer usernames in the Whatnot reports you import stay in your browser)
• Your full card number (Stripe handles payment details)

Account and payment data

When you start a trial or subscription, Stripe collects your email address and payment details on its checkout page. We receive and store your email address, your Stripe customer id, your subscription status and plan, your license key, and your referral code (and the referral or affiliate code you signed up through, if any). We use this to verify your subscription, email your license key and account notices, and provide support. Stripe processes payments under its own privacy policy; we never see or store your full card number.

Referral and affiliate codes

If you open this site through a link with a referral or affiliate code (?ref=), your browser keeps that code in its local storage for up to 60 days. It is not a cookie, and it leaves your browser only if you start a checkout, where it is sent with your checkout request and stored with your account.

For referral credits we record who referred whom, the credit amount, and Stripe's reference for the credit. For our affiliate program we record, for each paid invoice of a customer an affiliate referred, the invoice amount excluding tax, the commission, any refund reversal, and payouts. Affiliates see only counts and amounts (signups, paying customers, earnings), never a customer's name or email. For affiliates themselves we store their name, contact email, PayPal email, code, and whether we have received their W-9 (not the form itself).

Service providers (subprocessors)

• Anthropic: runs the AI model for listing drafts and price suggestions.
• Stripe: checkout, subscriptions, billing portal, and payment processing.
• Resend: sends license-key and account emails to your email address.
• Cloudflare: hosts this website and our API and database. Like any web host it handles your IP address to deliver requests, and it keeps short-lived request logs (such as time, URL path, status, and error messages) that we use to fix problems.

We share data with these providers only to run the service.

How we use data, and what we don't do

We use the data above only to provide and improve ResellSmith: running AI features you request, managing licenses and billing, sending account emails, providing support, and fixing problems. We do not sell or rent your data, do not use it for advertising, do not transfer it to third parties except the providers listed above (or where required by law), and do not use or transfer it to determine creditworthiness or for lending.

Data retention

• AI request content (notes, photos, prices): not stored by us; used only to answer the request.
• eBay access grant (encrypted) and hashed eBay ids: until you disconnect, eBay tells us your account was closed, or the grant expires. Cached eBay listings: about 10 minutes; traffic figures: up to 12 hours; changes under review: up to 15 minutes.
• AI usage counts: kept with your account for quota and billing records.
• Account, subscription, and device data: kept while your account is active and afterward as needed for accounting, tax, and fraud prevention. You can ask us to delete your account data at any time.
• Referral credit, affiliate commission, and payout records: kept as needed for accounting and tax.
• Anonymous usage events: kept for up to 12 months, then deleted.
• Hosting request logs: kept by Cloudflare for a short period (days), then deleted.

This website

This site does not use advertising or third-party tracking scripts. It uses the data needed to start a checkout and to show your license key after payment, plus the referral code described above when you arrive through a referral link.

Children

ResellSmith is not directed to anyone under 18, and we do not knowingly collect their data.

Changes

If we change how we handle data, we will update this page and its date. Material changes will also be noted in the changelog.

Contact

Questions, access requests, or deletion requests: email contact@resellsmith.com . Red Kodiak Labs LLC is responsible for the data described here.