Privacy Policy

Depending on how you use WorkSell, we may process the following categories of data:

• Account data (email, user ID) when you sign up or sign in (Firebase Auth).
• Usage and security data (e.g., IP/header-derived identifiers) for abuse prevention (rate limiting).
• Stripe Connect account data (e.g., Stripe account ID) when you connect Stripe to accept payments.
• Terms and privacy acceptance records: which version of the Terms of Service and which version of this Privacy Policy you accepted, when, and the IP address and browser user agent of the request. Recorded when you sign up and each time you accept an updated version.
• Seller details: whether you sell as a business (trader) or as a private individual and, as a trader, your legal name, business address, contact email and optional phone number. Buyers are entitled to know who they contract with, so these are published on your store, your product pages and purchase receipts.
• Privacy requests you make in Settings: which right you are exercising, the details you give, the request's status and when we handled it.
• Seller content: the products, files and cover images you upload, the invoices you issue, and the client records you create or import from a CSV (name, email, company).
• Data your own customers give you, which we process on your behalf so that your storefront and invoices work: buyer email addresses on orders and started checkouts, invoice recipient details, download and refund records, and messages sent to you through a contact form. You decide what goes in here; we process it to operate the service for you.
• Messages you send us through our own contact form (name, email, subject and message).
• Content reports: if you report a product or store, we store your email address, what you reported, the reason and any details you give. Reports go to WorkSell, not to the seller. We use your email address only to review the report and to contact you about it.
• Aggregate referral counts: a daily tally of visits arriving from AI answer engines, per source and page. Stored as totals only — no identifier, no profile, and no record of an individual visit — and kept for two years.

• Provide and operate the service.
• Security, abuse prevention, and rate limiting.
• Reviewing reports of content that may break our Terms or the law.
• Account management.
• Sending transactional email (login codes, invoices, download links, contact requests).
• Debugging and service improvement.

• Art. 6(1)(b) – performance of a contract (providing the service).
• Art. 6(1)(f) – legitimate interests (security, abuse prevention, reliability, reviewing reported content, and keeping evidence of which terms you agreed to).
• Art. 6(1)(f) – legitimate interests (aggregate, non-identifying measurement of which channels bring visitors).
• Art. 6(1)(c) – legal obligation (e.g., tax/accounting duties for payments).

We use the following providers (as applicable):

• Vercel – hosting/deployment and server functions.
• Firebase (Google) – authentication, database (Firestore) for user metadata, and file storage (Cloud Storage for Firebase) for product files, cover images and buyer downloads.
• Stripe – payment processing via Stripe Connect (we do not store full card details). When you enable Stripe Tax, Checkout may also collect a buyer VAT/tax ID and billing address so the correct tax can be calculated.
• Resend – delivery of all transactional email (login codes, invoices, download links, contact-form messages). Recipient names and email addresses pass through it, including those of your buyers and clients.

Depending on the provider, data may be processed outside the EU/EEA (e.g., in the United States). Where applicable, we rely on appropriate safeguards (e.g., Standard Contractual Clauses where available) and/or relevant certifications/frameworks of providers.

• Account data: until you delete your account.
• Stripe Connect data: as long as your Stripe account is connected, or until you disconnect.
• Payment, tax, invoice, consent, fraud-prevention, and paid-download entitlement records: only as long as required by law or our stated security purpose; account identifiers are pseudonymized after deletion.
• Terms and privacy acceptance records: kept as evidence of which versions you agreed to. If you delete your account, the IP address and user agent are removed from them and your user ID is replaced by a pseudonym; the versions and times are kept.
• Contact-form messages (to us or to a seller): 12 months from when they were sent, then deleted; sooner if the sender's or the receiving seller's account is deleted.
• Content reports: while the report is open, and until 12 months after it is resolved or dismissed, then deleted. If you delete your WorkSell account first, your email address is removed from reports you made and replaced by a pseudonym.
• Privacy requests (such as for access, export or deletion) and how we handled them: while the request is open, and until 12 months after it is completed, rejected or closed, then deleted. If you delete your account, any request still open is closed, the notes on it (yours and ours) are removed, and your user ID and email address are replaced by a pseudonym; the record is deleted 12 months later.

• Access (Art. 15 GDPR)
• Rectification (Art. 16 GDPR)
• Erasure (Art. 17 GDPR)
• Restriction (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Objection (Art. 21 GDPR)

You can exercise your rights from your account under Settings → Privacy requests, and follow each request's progress there, or contact us using the details in Section 1. You can also download your data and delete your account yourself in Settings.

WorkSell uses only necessary cookies where required. We set no analytics or marketing cookies and use no third-party analytics service. The aggregate referral counts described in Section 2 use your browser's sessionStorage rather than a cookie, and are discarded when you close the tab. See the Cookie Policy for detail.

We may update this Privacy Policy as our service or legal requirements change.