Privacy Policy

Depending on how you use WorkSell, we may process the following categories of data:

• Account data (email, user ID) when you sign up or sign in (Firebase Auth).
• Usage and security data (e.g., IP/header-derived identifiers) for abuse prevention (rate limiting).
• Stripe Connect account data (e.g., Stripe account ID) when you connect Stripe to accept payments.

• Provide and operate the service.
• Security, abuse prevention, and rate limiting.
• Account and subscription management.
• Debugging and service improvement.

• Art. 6(1)(b) – performance of a contract (providing the service).
• Art. 6(1)(f) – legitimate interests (security, abuse prevention, reliability).
• Art. 6(1)(a) – consent (only if optional cookies/analytics are enabled).
• Art. 6(1)(c) – legal obligation (e.g., tax/accounting duties for payments).

We use the following providers (as applicable):

• Vercel – hosting/deployment and server functions.
• Firebase (Google) – authentication and database (Firestore) for user/subscription metadata.
• Stripe – payment processing via Stripe Connect (we do not store full card details).

Depending on the provider, data may be processed outside the EU/EEA (e.g., in the United States). Where applicable, we rely on appropriate safeguards (e.g., Standard Contractual Clauses where available) and/or relevant certifications/frameworks of providers.

• Account data: until you delete your account.
• Stripe Connect data: as long as your Stripe account is connected, or until you disconnect.

• Access (Art. 15 GDPR)
• Rectification (Art. 16 GDPR)
• Erasure (Art. 17 GDPR)
• Restriction (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Objection (Art. 21 GDPR)

To exercise your rights, contact us using the details in Section 1.

WorkSell uses only necessary cookies where required. Optional analytics/marketing cookies are used only with consent (if enabled).

We may update this Privacy Policy as our service or legal requirements change.