Privacy Policy

SoldLoop is a tool for people who buy clothing bales and resell the items on marketplaces like Depop, Poshmark, eBay and Whatnot. This page explains what we collect, why, and what we do with it. It is written in plain language on purpose.

What we collect

• Account details. Your email address and name when you sign up, whether by email link or with Google. If you sign in with Google we receive your name, email and profile picture from Google and nothing else.
• Your inventory. The bales, items, photos, prices, costs and sales you enter or upload. Photos are stored privately and are only shown to people in your organization and to the marketplaces you choose to list on.
• Marketplace connections. If you connect eBay, we store the access tokens eBay gives us, encrypted. If you run the local poster on your own computer, your Depop, Poshmark and Whatnot logins stay on that computer. We never see those passwords.
• Usage basics. Standard server logs (time, page, IP address) so we can keep the service running and secure. We do not run advertising trackers.

How we use it

• To run the product: price your items, keep your listings in sync, take listings down when something sells, and send you the emails you asked for (invites, alerts, digests).
• To analyze item photos. Photos you upload are sent to an AI vision service (Anthropic) to name, describe and price the item. They are not used to train models.
• To publish listings on marketplaces you choose. Only the listing details you approve (photos, title, description, price, size, condition) are sent.

What we don't do

• We do not sell your data.
• We do not share your inventory, sales or photos with other users or with anyone outside the services above.
• We do not use Google user data for advertising, and we do not transfer it to anyone except as needed to sign you in.

Who else touches your data

We rely on a few providers to run SoldLoop: Supabase (database, authentication and file storage), Vercel (hosting), Anthropic (photo analysis), Resend (email) and the marketplaces you connect. Each only receives what it needs for its job.

Keeping it and deleting it

We keep your data for as long as your account exists. Email rewbiz05@gmail.com from your account address and we will delete your account and everything in it within 30 days, except records we must keep for accounting or legal reasons.

Security

Data is encrypted in transit. Marketplace tokens are encrypted at rest. Access to your organization's data is limited to members you invite. No system is perfectly secure; if we learn of a breach affecting you, we will tell you.

Changes

If this policy changes in a way that matters, we will update the date above and, for significant changes, email you.

Contact

Questions about privacy go to rewbiz05@gmail.com.