Privacy Policy

    Effective Date: 11th August 2025

    Resell Hub ("Company," "we," "our," "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our web application and services (collectively, the "Services"). By using our Services, you consent to the data practices described in this policy.

    1. Chrome Extension

    We provide a Chrome extension that enhances your experience with our platform. This extension is designed to automatically input Vinted cookies when you visit our website, creating a better user experience.

    Cookie Usage: The extension only accesses Vinted cookies when you explicitly click the "Link Account" button. These cookies are not used, stored, or transmitted outside of this specific action. The extension is simple in functionality and works solely to improve user experience by eliminating the need for manual cookie input.

    2. Information We Collect

    We collect information you provide directly to us, including:

    • Account information (email, username, password)
    • Vinted access tokens for linked accounts
    • Payment information processed through Stripe
    • Usage data and preferences

    3. Vinted Access Token Usage

    Important: Your Vinted access tokens are used exclusively for Vinted-related tools and features within our platform. We do not use these tokens for any other purpose.

    User Control: Access tokens are only utilized when you explicitly trigger actions that require them, such as:

    • InstaBuy functionality
    • Smart Offer features
    • Order tracking and management
    • Inventory synchronization
    • Price monitoring and alerts

    No Unauthorized Access: We do not access your Vinted account or use your tokens without your direct action. Every token usage is initiated by you clicking a button or enabling a feature that requires Vinted integration.

    4. Data Ownership & Access

    Your Data: You retain full ownership of your Vinted access tokens and all associated data. We act as a secure conduit for your authorized actions only.

    Staff Access: Our staff and administrators cannot view, access, or manipulate your Vinted access tokens. These tokens are encrypted and stored securely, with access restricted to automated systems that execute only your requested actions.

    No Manual Intervention: We do not manually access your Vinted account or use your tokens for any purpose other than the specific features you enable.

    5. How We Use Your Information

    We use the information we collect to:

    • Provide and maintain our Services
    • Process your transactions and manage subscriptions
    • Execute Vinted-related actions you specifically request
    • Send you service-related communications
    • Improve our Services and develop new features
    • Comply with legal obligations

    6. Data Security & Protection

    We implement industry-standard security measures to protect your information, including:

    • End-to-end encryption for sensitive data
    • Secure socket layer (SSL) technology
    • Regular security audits and updates
    • Access controls and authentication measures
    • Secure data centers with physical and digital safeguards

    7. Data Sharing & Disclosure

    We do not sell, trade, or otherwise transfer your personal information to third parties, except as described in this policy:

    • Payment processors (Stripe) for transaction processing
    • Vinted API for authorized actions you request
    • Legal requirements or law enforcement requests
    • Service providers who assist in operating our platform

    8. Your Rights & Choices

    You have the right to:

    • Access and update your personal information
    • Delete your account and associated data
    • Unlink your Vinted account at any time
    • Opt-out of non-essential communications
    • Request information about how your data is used

    9. Data Retention

    We retain your information for as long as your account is active or as needed to provide Services. When you delete your account, we will delete or anonymize your personal information within 30 days, except where retention is required by law.

    10. Third-Party Services

    Our Services integrate with third-party services including Vinted and Stripe. Each third-party service has its own privacy policy, and we encourage you to review them. We are not responsible for the privacy practices of these third-party services.

    11. Children's Privacy

    Our Services are not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us.

    12. International Data Transfers

    Your information may be transferred to and processed in countries other than your own. We ensure that such transfers comply with applicable data protection laws and implement appropriate safeguards.

    13. Changes to This Privacy Policy

    We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Effective Date" at the top. Changes take effect immediately upon posting.

    14. Governing Law

    This Privacy Policy is governed by the laws of the United Kingdom. Any disputes arising from this policy will be resolved in the courts of the United Kingdom.