Privacy Policy

1. Who is responsible for your information

The data controller is Kamil Praczyk, trading as SellerTemplate. This means I decide why and how personal information is used for SellerTemplate. For privacy requests or questions, email clingykoala.ask@gmail.com.

2. Information I use

• Account and sign-in details: your email address, account identifier, account creation date, and any first name and last name you provide. The account creation date is used to determine eligibility for the six-hour new-account credit discount. If you use Google or Facebook sign-in, that provider sends the email and profile details you authorise to Cognito and SellerTemplate. Amazon Cognito handles password authentication; the SellerTemplate application does not store your password in its template or payment database.
• Templates and listing content: the template name and design you save, including text, product details, layout choices and image URLs you add.
• eBay import details: when you ask to import a public eBay item, the item URL is sent to the service to retrieve and extract listing details. The imported content is returned to you and is saved only if you choose to save it as a template.
• Generated history: a listing name, generation identifier, date and generated HTML associated with your account, so you can retrieve a previous result.
• Credits and payment records: account identifier, credit balance and ledger entries, package, price, currency, payment status and transaction or Stripe Checkout identifiers. Stripe collects payment details in its hosted checkout.
• Operational information: API request identifiers, route, response status, response size, integration errors, and service timing. These records help diagnose errors, protect the service and respond to support requests.
• Messages you send: the email address and information in messages you send to the privacy or support contact.

Please do not put sensitive personal information about yourself or another person into a listing template. The tools are designed for item descriptions, not sensitive data.

3. Why I use it and the legal bases

• To provide the service you request, including creating your account, signing you in, saving and retrieving templates, importing item details, generating HTML, keeping your generation history, managing Generation Credits and applying the new-account promotion. The legal basis is that this processing is needed to provide the service under our agreement with you.
• To take and record payments, issue credits after verified payments, handle payment questions and maintain transaction records. Processing needed to provide a paid feature is based on our agreement; records required by law are kept to meet legal obligations.
• To operate and protect the service, prevent misuse, investigate failures, maintain security and answer requests. The legal basis is legitimate interests in running a secure and reliable service, balanced against your rights.
• To meet legal requirements, such as applicable tax, accounting, regulatory or lawful disclosure duties. The legal basis is compliance with a legal obligation.

SellerTemplate does not use account or listing data for targeted advertising, and does not sell personal information. It does not make decisions about you solely by automated processing that produce legal or similarly significant effects.

4. Services that help run SellerTemplate

I share information only as needed with service providers that operate parts of the service, or when disclosure is required by law:

• Amazon Web Services (AWS): hosts the website and backend, user authentication and verification emails, saved templates, private generated files, payment records and operational logs. The main backend resources are in the AWS London region (eu-west-2).
• Stripe: provides hosted checkout and payment processing. Stripe handles payment details under its own privacy information and may act as a separate controller for some payment processing.
• Google: if you choose Google sign-in, Google authenticates you and shares the profile details you authorise. Google also provides the mailbox used for privacy and support contact. See Google's privacy policy.
• Meta: if you choose Facebook sign-in, Meta authenticates you and shares the profile details you authorise, such as your name and email address, with Cognito and SellerTemplate. See Meta's Privacy Policy.
• eBay: when you request an import, the backend requests the public listing page at the URL you submit. SellerTemplate does not send your account email or account identifier to eBay for this request.

These providers may use their own service providers and may process information in other countries. AWS, Stripe, Google and Meta publish information about their data protection and international transfer arrangements in their AWS privacy notice, Stripe data protection terms and Google transfer information and Meta's privacy information. Where UK data protection law requires a transfer safeguard, I rely on an applicable legally recognised mechanism. You can email me for details about a particular transfer.

5. How long I keep information

• Account and saved listing designs: saved designs are kept until you delete them, your account is closed, or three years pass without an update to the design, whichever happens first. Updating a design restarts its three-year period. Expired designs are removed from your account and may then be permanently deleted. Account deletion removes the Cognito identity, saved designs, generated HTML history and remaining Generation Credit balance from the service. Payment records may be de-identified and retained where needed for accounting, legal or dispute-handling purposes.
• Generated HTML history: retained for up to two years from creation, or until you delete your account. Items created before this retention change may have an earlier displayed expiry date. The service stops offering an item when its displayed expiry date passes; deletion by cloud storage systems can take additional time to complete.
• Payment, credit and accounting records: credit-balance records are removed when you delete your account. Limited payment records may be de-identified and retained for as long as needed to resolve payment issues and meet applicable legal and accounting requirements. Stripe and other providers may retain records under their own privacy notices and legal obligations.
• Operational logs: API and backend logs are configured for retention of up to three months in production and one week in development.
• Support messages: for as long as needed to answer and document the request, then as needed for legal or dispute-handling purposes.

When information is no longer needed, it is deleted or, where appropriate, kept in a form that no longer identifies you.

6. Browser storage and cookies

The application uses essential browser storage to keep your Cognito sign-in session, protect social sign-in redirects, and preserve temporary editor or checkout state while you use the app. Cognito stores its session tokens in your browser's local storage; short-lived sign-in state and temporary drafts use session storage. Cognito's managed sign-in service may also use essential cookies on its own sign-in domain. These storage items support login and app functions. The marketing pages do not load analytics or advertising scripts, and SellerTemplate does not set analytics or advertising cookies. If you dismiss the cookie notice, this preference is saved in your browser so the notice does not appear again on each visit. You can reopen it using “Cookie settings” in the footer.

If you add an image URL to a template, your browser may request that image from the external image host when showing a preview. That host receives ordinary connection data such as your IP address and browser information. The same applies to third-party pages you choose to open.

7. Security

The service uses access controls and AWS encryption features for stored application data. Generated HTML files are private in cloud storage and are retrieved through authenticated requests. No internet service can be guaranteed completely secure; keep your sign-in details private and contact me promptly if you believe your account has been accessed without permission.

8. Your choices and data rights

Depending on the circumstances, UK data protection law gives you rights to request access to your personal information, correction, deletion, restriction or portability, and to object to processing based on legitimate interests. If processing relies on consent, you can withdraw it. These rights are not absolute and some exceptions apply.

You can delete your account from the account menu in the app. For other rights requests, email clingykoala.ask@gmail.com. Include enough information for me to identify your account, but do not email your password or payment card details. You can also complain to the UK Information Commissioner's Office (ICO) at ico.org.uk/make-a-complaint/ if you are concerned about how your information is handled.

9. Changes to this policy

I may update this policy when the service or its data practices change. The latest version will be published on this page with its updated date. If a change materially affects how account information is used, I will take reasonable steps to notify affected users.

10. Contact

For privacy questions, rights requests or complaints, contact Kamil Praczyk, trading as SellerTemplate, at clingykoala.ask@gmail.com.