SellerHint Web Privacy Policy

1. Scope and status

This is a draft for the separate SellerHint Web product operated by SHADEZCO LLC. It is not in force and has no effective date. It will be finalised against the Web application’s actual practices before launch.

SellerHint Web and SellerHint for Mac have separate accounts, billing, backends, databases, media, settings, drafts and marketplace connections. Using one does not automatically share its data with the other. The published Mac policy does not make this Web draft effective.

2. Information the Web service handles

The proposed Web service stores its working data remotely rather than primarily on your Mac. Depending on the features you use and the permissions you grant, its privacy disclosures will cover:

• Account identifiers, authentication records and subscription status.
• Product titles, SKUs, descriptions, categories, item specifics, variations, images, drafts and templates.
• eBay connection identifiers, permission scopes, authorisation records and connection status.
• Marketplace listings, quantities, seller policies, orders, delivery details, buyer information, messages, offers, campaigns and cases.
• Support messages and attachments you choose to send.
• Technical request and security information, such as IP addresses, browser details and timestamps.

3. eBay connections and authorised actions

Connecting a store involves eBay authorisation and the separate Web backend. Marketplace reads and writes process the content and identifiers needed for the action you request. Content you publish on eBay is subject to eBay’s own practices. Do not send passwords or marketplace credentials through support.

4. Storage and uploaded media

Web product records and uploaded media are held by the Web service. The final policy will identify the hosting providers, storage locations, access controls and whether media URLs are public or require authentication. No claim of private media delivery or US-only storage is made in this draft.

5. Billing and authentication

Web billing is separate from Mac App Store purchases. The final policy will name the Web payment and authentication providers and describe the transaction references, account records and payment information each receives. This draft does not assume the Mac app’s Apple billing or sign-in arrangements apply to Web.

A separate website account service is prepared for activation on Cloudflare Workers and its own D1 account database. It stores an account identifier, name, optional business name, normalised email address, salted password hash, hashed recovery code, consent acknowledgement and timestamps. Plaintext passwords, session tokens and recovery codes are not stored in that database. No account record grants access to the existing private Web workspace or supplies a paid plan.

When account sign-in is enabled, the account service issues a host-only Secure, HttpOnly session cookie at accounts.sellerhint.com. Ordinary sessions expire after 12 hours; Keep me signed in adds a persistent cookie and a 30-day server expiry. Sign-out revokes the current session. Password change and recovery revoke all sessions. Recovery uses the one-time code shown at signup; email verification and recovery emails are not connected yet.

6. Cookies, diagnostics and analytics

The final policy will describe authentication cookies or browser storage, essential security processing, optional analytics and diagnostics, consent controls and any retention periods. The public website’s appearance preference is separate from the Web application’s future session technologies.

7. Purposes and recipients

The intended purposes are to provide the requested seller workflows, maintain authorised store connections, store working records, manage access and billing, respond to support, protect the service and meet applicable obligations. The final policy will identify the actual providers, disclosures and any applicable legal bases. Advertising and data-sharing practices must be verified before a statement is made about them.

8. Retention, export and deletion

The prepared account service retains account details until a verified deletion is completed. Account deletion is a support request rather than a connected self-service control. Expired sessions and short-lived hashed rate-limit records are cleaned up by the service; no raw IP address is kept in its rate-limit table. Cloudflare may separately process network and security information. Account retention, backup handling and processing regions must be finalised before customer activation.

The final policy must explain retention for account data, marketplace records, uploaded files, subscription records, operational logs, support records and backups. It must also describe export and account deletion controls, identity verification, cleanup delays and any information retained for security or legal reasons.

Deleting Web data, disconnecting eBay, revoking permission on eBay and cancelling Web billing are separate actions. None automatically removes Mac data or cancels an Apple subscription.

9. Privacy requests and security

You can send questions about this draft to [email protected] using the subject “SellerHint Web Privacy Request”. Do not include passwords, tokens, full payment details or unnecessary buyer records. The final policy will explain applicable rights, request verification and response processes, together with technically verified security measures and international processing arrangements.

10. Finalisation and changes

Before SellerHint Web launches, this draft will be checked against the finished service, its providers, consent settings and deletion behaviour. A version and effective date will be published when the policy is finalised. Until then, this policy remains a draft.