Legal

Privacy Policy

How Relistly collects, uses, shares and protects personal data across our website, web app and browser extension.

Last updated: [effective date] · Applies to relistly.io and the Relistly browser extension.

Contents

Who we are
Scope
Information we collect
How the browser extension handles data
How we use information
How we share information
Cookies & similar tech
International transfers
Data retention
Your rights
Security
Children
Changes
Contact

1. Who we are

Relistly is Europe-first crosslisting and inventory-management software for resellers, provided by [legal entity name], [company/VAT number], registered at [registered address] (“Relistly”, “we”, “us”). For the purposes of the EU/UK General Data Protection Regulation (GDPR), we are the data controller for the personal data described in this policy.

If you have any questions, contact us at [privacy@relistly.io].

2. Scope

This policy covers the Relistly website (relistly.io), the Relistly web app / dashboard, and the Relistly browser extension. It does not cover the third-party marketplaces you connect (such as Vinted, eBay, Etsy or Shopify), which each have their own privacy policies.

3. Information we collect

Account & contact details

Your name, email address, and account credentials or login keys used to sign in.

Listing & inventory content

The product information you create or import — titles, descriptions, prices, sizes, conditions, categories, SKUs and photos — and the record of which marketplaces each item is listed on.

Connected-marketplace information

When you connect a marketplace, we store the connection status and account identifiers (such as your username/handle on that marketplace) needed to publish, import and manage your listings. For marketplaces without a public API, Relistly acts through your own signed-in browser session via the extension — see §4.

Sales, fees & financial analytics

Data about your sales, fees, costs and payouts used to produce your analytics (e.g. net profit, fees paid, sell-through). This reflects your own reselling activity.

Payment information

Subscription billing is processed by Stripe. We receive limited billing details (e.g. plan, status, last card digits) but do not store your full card number. See Stripe's privacy policy for how they process payment data.

Usage, device & log data

Technical data such as IP address, browser/device type, pages viewed, feature usage and error/diagnostic logs, used to operate, secure and improve the service.

Support communications

Messages you send us and their contents.

4. How the browser extension handles data

The Relistly extension has a single purpose: to help you crosslist, import and manage your own listings across the marketplaces you connect.

It operates within your own signed-in browser session on those marketplaces, acting on your accounts and only when you initiate an action (e.g. publish, import, delist).
It requests the minimum permissions needed for the marketplaces you use, and does not collect data unrelated to this purpose.
We do not sell your data, and we do not use data obtained through the extension for advertising or any purpose other than providing the crosslisting features you request. This is consistent with the Chrome Web Store Limited Use requirements.
When you trigger an action, the extension reads only the listing and account data needed for that action from the marketplace pages you are signed in to (for example your existing listings when importing, or a listing's status when delisting), and sends the resulting listing content — titles, descriptions, prices, photos, categories and listing identifiers — to Relistly servers so we can store your inventory and perform the crosslisting you requested.
Your marketplace login cookies and session tokens stay in your browser and are used only to act on your behalf within those sessions. They are not transmitted to or stored by Relistly.
The extension does not read pages, tabs or browsing activity unrelated to the marketplaces you connect.

5. How we use information

We use personal data to:

provide and operate the service (create, import, adapt, publish and delist listings; sync inventory);
produce your analytics and reports;
process subscriptions and billing;
provide support and respond to you;
secure the service, prevent fraud/abuse, and keep your connected accounts healthy;
improve our features; and
comply with legal obligations.

Legal bases (GDPR): performance of our contract with you; our legitimate interests (operating, securing and improving the service); your consent (where required, e.g. certain cookies); and compliance with legal obligations.

We do not sell your personal data. We share it only as needed to run the service:

Marketplaces you connect — to publish, import and manage your listings on your behalf.
Payment processor — Stripe, for subscription billing.
Service providers (sub-processors) — providers that process data on our behalf under contract:
- Fly.io — application hosting (EU region);
- Supabase — managed PostgreSQL database;
- Stripe — subscription payments and invoicing;
- TransIP — website hosting and email (Netherlands);
- Self-hosted, cookieless analytics — aggregate usage statistics, run on our own infrastructure.
Legal & safety — where required by law or to protect rights, safety and the integrity of the service.
Business transfers — in connection with a merger, acquisition or asset sale, subject to this policy.

7. Cookies & similar technologies

We use strictly-necessary cookies only — for example a session cookie to keep you signed in and to secure the app. For usage statistics we use privacy-friendly, cookieless analytics that count visits in aggregate without tracking cookies, cross-site identifiers or profiling, so no analytics consent banner is required. We do not use advertising or third-party tracking cookies. Any small amounts of data the app stores in your browser (e.g. local preferences) are used solely to run the service.

8. International data transfers

Relistly is Europe-first, and we host your account and listing data within the EU. Some sub-processors (for example Stripe for payments) may process limited data outside the EEA; where that happens, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses and the providers' own transfer frameworks.

9. Data retention

We keep personal data for as long as your account is active and as needed to provide the service. When you close your account, we delete or anonymise your account and listing data within a limited wind-down period (typically up to 90 days), except where we must keep certain records longer. In particular, invoicing and financial records are retained for 7 years to meet Dutch/EU tax-administration obligations, and security/diagnostic logs are kept for a short period. You can ask us to delete your account and data at any time (see §10).

10. Your rights

Subject to applicable law (including GDPR), you may have the right to: access your data; correct it; delete it; port it; restrict or object to certain processing; and withdraw consent. To exercise these rights, contact [privacy@relistly.io]. If you are in the Netherlands, you also have the right to lodge a complaint with the Dutch data protection authority, the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl); you may alternatively contact the supervisory authority in your own EU country.

11. Security

We use technical and organisational measures to protect personal data, including encryption in transit, access controls and session-security safeguards. No method of transmission or storage is completely secure, but we work to protect your information and to respond to incidents appropriately.

12. Children

Relistly is intended for business/reseller use and is not directed to children. We do not knowingly collect personal data from anyone under 16.

13. Changes to this policy

We may update this policy from time to time. We will post the updated version here and change the “Last updated” date; where changes are material, we will take additional steps as required by law.

14. Contact

Questions or requests about this policy or your data: [privacy@relistly.io], [legal entity name, address]. [DPO / EU representative contact, if applicable.]

This document is the official privacy policy for Relistly at relistly.io.

Frequently asked questions

Is my marketplace password shared with Relistly?

No. Relistly never asks for your marketplace password. Marketplaces without a public API are reached through the Relistly browser extension, which acts inside your own signed-in browser session and only when you start an action. Your marketplace login cookies and session tokens stay in your browser and are not transmitted to or stored by Relistly (§4).

What data does Relistly store?

Your account and contact details; the listing and inventory content you create or import (titles, descriptions, prices, sizes, conditions, categories, SKUs and photos) and which marketplaces each item is listed on; connection status and your account identifier on each connected marketplace; your sales, fees and analytics data; limited billing details from Stripe; usage, device and log data; and your support messages (§3).

Does Relistly sell my data or use it for advertising?

No. Relistly does not sell personal data and does not use data obtained through the extension for advertising or for any purpose other than the crosslisting features you request. Data is shared only with the marketplaces you connect, with Stripe for billing, with the named sub-processors, and where required by law (§4, §6).

Where is my data stored?

Account and listing data is hosted within the EU. The named sub-processors are Fly.io for application hosting (EU region), Supabase for the managed PostgreSQL database, Stripe for subscription payments, TransIP for website hosting and email (Netherlands), and self-hosted cookieless analytics. Some sub-processors — Stripe, for example — may process limited data outside the EEA under safeguards such as the European Commission's Standard Contractual Clauses (§6, §8).

Does Relistly use tracking cookies?

No. Relistly uses strictly-necessary cookies only, such as the session cookie that keeps you signed in. Usage statistics come from privacy-friendly, cookieless analytics that count visits in aggregate without tracking cookies, cross-site identifiers or profiling — which is why there is no analytics consent banner. There are no advertising or third-party tracking cookies (§7).

Does Relistly store my card number?

No. Subscription billing is processed by Stripe. Relistly receives limited billing details such as your plan, status and the last digits of your card, but does not store your full card number (§3).

How long does Relistly keep my data after I close my account?

Account and listing data is deleted or anonymised within a limited wind-down period, typically up to 90 days. Invoicing and financial records are kept for 7 years to meet Dutch and EU tax-administration obligations, and security or diagnostic logs are kept for a short period (§9).

What are my rights over my data?

Subject to applicable law including the GDPR, you may have the right to access your data, correct it, delete it, port it, restrict or object to certain processing, and withdraw consent. Sellers in the Netherlands may also lodge a complaint with the Autoriteit Persoonsgegevens, or with the supervisory authority in their own EU country (§10).