Privacy policy

1. Introduction

SellFaster ("we", "us", "our"), operated at sellfaster.ai, is a UK-based service that generates eBay listing content from photographs and basic item information you supply.

This policy explains what information we collect, how we use it, and your rights over your personal data under the UK General Data Protection Regulation (UK GDPR) and the EU General Data Protection Regulation (GDPR). By using SellFaster you agree to information being collected and used in line with this policy.

2. What we collect

Information you give us

Photographs and descriptions. You upload images and type a description of the item you want to list. This content is processed in real time to generate listing text.

Anything you send us. If you email us, we hold the information you chose to put in that message.

Information collected automatically

Analytics. We use TelemetryDeck, a cookieless analytics service, to collect anonymised, aggregated information about how the website is used. Each page view sends one signal, from a sender we host ourselves, carrying:

• The page's address with any query stripped - never a search or anything you typed
• The site that linked you here - the site's address only, not the page within it
• Your browser's language

No cookie is set and no identifier is stored in your browser. This analytics data cannot be used to identify you.

Rate limiting. Separately from analytics, when you generate a listing we read your IP address to count generations against the daily free limit. We do not store the address itself: we derive an identifier from it using a secret key, and that identifier changes every day. What is kept, and for how long, is under Retention.

What we do not collect

• We do not require or collect account registration details
• We do not store your uploaded photographs or descriptions on our servers
• We do not use tracking or advertising cookies
• We do not collect payment information
• We do not build user profiles. To enforce the daily limit of free listings we hold a count against a rotating identifier derived from your IP address, which changes every day and is deleted once its day has ended and the service is next used - see Retention.

3. How we use it

We process your information on the following lawful bases under GDPR.

Legitimate interests

We process your photographs and descriptions to provide the service itself - generating eBay listing text. This processing is necessary for our legitimate business interests and does not override your fundamental rights.

We rely on legitimate interests separately for the daily rate-limiting record described under Retention. The interest is keeping a free service available to everyone and bounding what we spend on the paid API behind it. We judged this not to override your rights because the identifier changes daily, cannot be linked across days by anyone without our secret key, and is deleted once the day it counts has ended and the service is next used.

Consent

Where processing depends on consent - for example, marketing messages if we ever offer them - we ask for it, and you can withdraw it at any time.

Specific uses

• Delivering the service. Your photographs and description are sent to Google's Gemini API for processing. The generated listing is shown to you immediately. We do not retain it.
• Improving the service. Anonymised analytics help us understand how the site is used.
• Correspondence. If you contact us, we use your details to reply.
• Legal compliance. We may process information where we have to, to meet a legal obligation or respond to a lawful request.

4. Third-party services

SellFaster depends on a small number of third-party services. When you use it, your data may be processed by:

Google Gemini API

• Purpose: generating the listing content
• Data shared: the photographs and description you provide
• Processing: in real time; nothing is stored by SellFaster
• Privacy policy:policies.google.com/privacy

Google processes this data under its own privacy policy and may process it across its global infrastructure. We recommend reading their practices if that matters to you.

Cloudflare

• Purpose: hosting, content delivery and security
• Data shared: website traffic data and IP addresses, as any host handles to serve a request
• Privacy policy:cloudflare.com/privacypolicy

TelemetryDeck

• Purpose: cookieless, anonymised analytics
• Data shared: the anonymised page-view signal described above - page address, referring site, browser language
• Website:telemetrydeck.com

Email (Google Workspace)

• Purpose: business email
• Data shared: whatever you put in a message to us
• Privacy policy:policies.google.com/privacy

Independence and responsibility

These providers operate independently and have their own privacy policies. We choose them carefully, but we cannot control their practices and are not responsible for them.

5. Retention and storage

SellFaster is built to keep as little as possible:

• Your uploads. Photographs and descriptions are processed in real time and are not stored on SellFaster servers. Once the listing is generated they are discarded.
• Third-party retention. Data sent to the Google Gemini API is subject to Google's retention policies. We do not control how long Google keeps API request data.
• Analytics. TelemetryDeck retains anonymised, aggregated statistics under its own retention policy.
• Rate limiting. To give everyone the same number of free listings a day, we record a count against an identifier derived from your IP address using a secret key. That identifier changes every day, so records from different days cannot be linked to one another by anyone without our secret key, and we never store your IP address itself. Each day's records are deleted once that day has ended and the service is next used - so on a quiet day they can outlast the day they count, though they are never read again once it is over.
• Correspondence. Emails are kept for as long as we need them to answer you and for our business records, and no longer than that unless the law requires it.

6. Your rights under GDPR

As a UK service processing data belonging to people in the UK and the EU, we respect the following rights.

• Access. You can ask whether we process your personal data and receive a copy of it.
• Rectification. You can ask us to correct inaccurate personal data.
• Erasure. You can ask us to delete your personal data in certain circumstances. Given how little we retain, there is usually nothing to erase beyond two things: the daily rate-limiting record described under Retention, which is deleted once its day has ended and the service is next used, and any correspondence you have sent us.
• Restriction. You can ask us to limit how we use your data.
• Portability. You can ask for your data in a structured, commonly used format and have it sent to another controller.
• Objection. You can object to processing based on legitimate interests. If you do, we will stop unless we have compelling legitimate grounds to continue.
• Withdrawing consent. Where processing rests on consent, you can withdraw it at any time. That does not affect processing carried out before you withdrew it.

Automated decision-making

Our AI generates listing suggestions, but you keep full control of the final content. You are not subject to automated decisions producing legal or similarly significant effects.

Exercising your rights

Write to legal@sellfaster.ai. We will respond within one month. Because we retain so little, there may be limited personal data available to access, correct or delete beyond the scope of real-time processing.

7. International transfers

SellFaster operates from the United Kingdom. Some of our providers - Google and Cloudflare in particular - operate globally and may process data outside the UK and the European Economic Area.

Where data is transferred internationally, appropriate safeguards apply:

• Google processes data globally using Standard Contractual Clauses and other transfer mechanisms approved under GDPR
• Cloudflare maintains GDPR-compliant data processing agreements and appropriate transfer mechanisms
• TelemetryDeck (Germany) processes analytics data in the EU under GDPR

Wherever it is processed, your data remains subject to this policy and to applicable data protection law.

8. Security

Technical measures

• Encryption in transit. Everything between your browser and SellFaster is encrypted with HTTPS/TLS.
• Infrastructure. We use enterprise-grade protections including DDoS mitigation, a web application firewall and a content delivery network.
• Minimal retention. Not storing uploaded photographs or descriptions is itself a security measure: it substantially reduces both the likelihood and the impact of a breach.
• API protection. Our endpoints carry rate limiting, input validation and abuse detection.

Organisational measures

• Access to our systems, and to any data we do retain, is limited to authorised people
• We select providers with demonstrated security practices
• We review and improve our security position as threats change

Breach notification

In the unlikely event of a breach affecting personal data, we will:

• Assess the risk to individuals' rights and freedoms
• Notify the Information Commissioner's Office within 72 hours where the law requires it
• Notify affected individuals where the breach poses a high risk to them
• Document the breach and our response

No absolute security

No method of transmission or storage is completely secure. We take the measures above seriously, but we cannot guarantee absolute security.

9. Cookies and tracking

SellFaster uses no cookies for tracking, advertising or profiling. We may use strictly necessary technical cookies or local storage to make the site work - remembering your colour theme, for example. These do not follow you across websites and collect no personal information.

Our analytics are provided by TelemetryDeck and do not use cookies. The data collected is anonymised and aggregated, which is why this site carries no cookie consent banner.

Third-party providers may set their own cookies when you interact with their services directly. We do not control those, and we suggest reading their policies.

10. Children's privacy

SellFaster is not intended for use by anyone under 18, and we do not knowingly collect personal information from children.

If you are a parent or guardian and believe your child has given us personal information, write to legal@sellfaster.ai and we will delete it promptly.

11. Changes to this policy

We may update this policy to reflect changes in our practices, technology or legal obligations. When we do:

• We update the "last updated" date at the top of this page
• For material changes affecting your rights or how we process your data, we give prominent notice on the website or by other appropriate means

Continuing to use SellFaster after a change takes effect means you accept the updated policy.

12. Contact and complaints

For questions about this policy, your privacy rights, or to exercise any right under GDPR, write to legal@sellfaster.ai.

You also have the right to complain to the Information Commissioner's Office, the UK's supervisory authority for data protection, at ico.org.uk/make-a-complaint or on 0303 123 1113. If you are in the EU, you may also contact your local data protection authority.