Privacy policy
The short version
Product titles and review text you submit are sent to a third-party classification model so it can answer questions about them. Uploaded files and generated output are deleted after 7 days. We do not sell data, we do not run advertising trackers, and the only third parties involved are the ones listed below.
Who we are
SellerSort operates sellersort.com. For any privacy question, write to support@sellersort.com.
What we collect
If you never sign in
- What you type into a tool. A product title, or review text. Single lookups are not stored; an uploaded file is (see below).
- Your IP address, used for rate limiting. Only a one-way hash of it is kept, next to a counter on our own servers, and the counter expires once its window has passed.
- A verification token if Cloudflare Turnstile challenges you.
- Usage events. Which tool ran, how many rows, whether it succeeded. These are counts, not content.
If you have an account
- Your email address and, if you give one, your name. The name is only shown in the header and your account area. There is no profile.
- Your password, if you set one. It is stored as a salted scrypt hash, never as the password itself, so we cannot read it or send it back to you. An account can also sign in with an emailed link and no password at all.
- If you sign in with Google, Google tells us your email address, that Google has verified it, and your name. We keep the address and, if the account has no name yet, the name. We do not receive or keep your Google password, and we ask for no access to your Google account beyond that.
- Session, sign-in and password-reset tokens, stored as SHA-256 hashes rather than as the tokens themselves, so a copy of our database yields no usable session or link. An emailed link also records the IP address that asked for it, and is purged with it.
- Your credit ledger: every purchase, spend and refund, with the job it relates to.
- Your jobs: the filename, the row counts, and the per-row results.
If you buy credits
Lemon Squeezy is the merchant of record. They take the payment and handle sales tax and VAT. We never see or store your card details. What we receive from them is an order identifier, the amount, and the email or account the order belongs to.
What gets sent to the classification model
This is the part worth reading carefully, because it is where your data leaves our systems.
The tools work by asking a third-party model, TypeSafe’s System One, a set of narrow typed questions about your text. To do that, the text is sent to their API. For the category tools that means the product title and whichever of description, brand and product type you mapped, truncated to a few hundred characters each. For the Review Analyzer it means the review body, truncated, plus the star rating and date if your file had them.
What we can tell you about their handling, from their own published terms:
- Their privacy policy states that customer data submitted through the API is not used to train their models.
- Their services are hosted in the United States. If you are in the UK, the EEA or elsewhere, using these tools involves a transfer of that text to the United States.
- The relationship is governed by their Master Cloud Agreement, which incorporates their Data Processing Addendum.
We deliberately do not claim they retain nothing. Zero-retention handling is an enterprise arrangement rather than the default on the interface this product uses, and we are not going to describe our setup as something it is not. If your data cannot leave a particular jurisdiction, or cannot be sent to a third-party model at all, these tools are not suitable for it, and the honest thing is to say so here rather than in a footnote.
We do not name their subprocessors, because their subprocessor list is published through a trust centre we were unable to read programmatically, and naming one on inference would be worse than naming none. Their agreements are the place to look.
How long things are kept
| What | How long |
|---|---|
| Uploaded files and generated output | 7 days, then deleted automatically |
| Single lookups (Finder, pasted reviews) | Not stored |
| Cached model answers | Up to 30 days, keyed by a hash of the question and the text, then expired |
| Job records and row results | Kept with your account, so your history stays available |
| Credit ledger | Kept for as long as the account exists. It is append-only and is the record of what you paid for |
| Sessions and emailed links | Sign-in links 15 minutes, password-reset links 30 minutes, sign-up confirmation links 24 hours, sessions 30 days, all then purged |
| Rate-limit counters | Expire once the window has passed |
Cookies
Our own cookie is the session cookie, set when you sign in. It is HTTP-only and SameSite=Lax. Signing in with Google also sets a second HTTP-only cookie that holds the one-time values checked when Google sends you back. It is deleted on return and expires after 10 minutes either way. We set no advertising cookie.
Google Analytics sets its own cookies, _ga and _ga_<ID>. They hold a random identifier so that visits from the same browser can be counted together, and by default they expire after two years. You can block them in your browser settings; every tool on the site works without them.
Page views are also counted by Cloudflare Web Analytics, which sets no cookie and stores nothing in your browser. It reports totals such as page and referrer counts, not a profile of you.
Cloudflare Turnstile may set its own storage when it challenges you. It is an abuse control, not a tracker.
Third parties
- TypeSafe: the classification model. Receives the text described above.
- Lemon Squeezy: payments and merchant of record. Receives your payment details directly; we never handle them.
- Cloudflare: the network the site runs behind, so every request passes through it, including your IP address. Cloudflare also runs the Turnstile challenges, counts page views with Web Analytics, and stores uploaded files and generated output in its R2 object storage until they are deleted.
- Resend: sends sign-in, confirmation and password-reset emails and job notifications. Receives your email address and the message.
- Google: Google Analytics measures which pages are visited and how. It receives the pages you view, the page you came from, and basic browser and device details, linked to the random identifier in its cookie. It does not receive what you type into a tool, and it is not run on password-reset or job pages, whose addresses are private.
- Google sign-in, only if you choose it: Google confirms who you are and sends us the details listed above, and learns that you signed in to SellerSort.
Your rights
You can ask us for a copy of what we hold about you, ask for it to be corrected, or ask for your account and its data to be deleted. Write to support@sellersort.com. Deleting the account removes the email address, the name, the password hash, the sessions, the jobs and the stored files; the credit ledger entries are retained where we need them as a financial record, with the account reference removed.
If you are in the UK or EEA, the lawful basis is contract performance for running a job you asked for, and legitimate interests for rate limiting and abuse prevention.
Children
These are business tools and are not directed at children. We do not knowingly collect data from anyone under 16.
Changes
If this policy changes in a way that affects what we do with your data, the date at the top changes and the change is described here rather than applied quietly.
See also the terms of service and the refund policy.