Privacy Policy
What SnapSell collects, why, who else sees it, and how to get it deleted. We do not sell personal data, and we never see your full card details.
Not yet in effect — draft
Draft — not legally binding yet
This describes how SnapSell actually works today, but it has not been reviewed by a lawyer and is not in force. Still outstanding:
- legal entity name, registered address and contact details
- governing law and dispute venue
- retention periods and liability limits
- a lawyer’s review of both documents
- an Arabic translation (these pages are English-only, unlike the rest of the storefront)
Who we are
SnapSell is a marketplace platform operated by legal entity name, registered address. For anything in this policy, or to exercise any right described here, write to support@snapsell.io.
SnapSell hosts independent sellers. When you buy from a shop, that seller is responsible for the goods and for their own handling of your order details; we are responsible for the platform that carries them.
What we collect
Only what the product needs to work:
- Account details — name, email address, phone number, and a one-way hash of your password. Signing in with Google, Apple or Facebook gives us the name and email address that provider releases.
- Seller and shop details — shop name, handle, description, logo, business contact details, and payout onboarding status.
- Content you upload — product photos, videos, descriptions, prices and stock.
- Order details — items, prices, delivery name, phone number and address, and delivery notes.
- Payment status — whether a payment succeeded, was refunded, or is disputed, plus the last digits and brand of the card as Stripe reports them. Full card numbers never reach our servers.
- Messages you send through the app to a seller, a buyer, or support.
- Device details for notifications and sign-in — push tokens and a device key when you enable biometric quick sign-in.
- Usage — which listings are viewed, so sellers can see their own shop’s statistics. Views are recorded against a salted hash, not a raw identifier.
- Delivery data, where an order is delivered by a courier on the platform — the delivery address, the courier’s location while a job is in progress, and delivery proof such as a photo, a signature, or a one-time code.
- Courier identity documents, where someone applies to deliver — verified through an identity provider, not held in raw form by us.
Why we use it
- To run the marketplace — create your account, show listings, take orders, and let buyers and sellers talk to each other.
- To take payments and pay sellers out, and to charge subscription fees and commission.
- To get orders delivered, including passing the delivery address to the courier handling it.
- To generate listing content with AI when you ask for it (see below).
- To send you the messages you have opted into, plus the ones we cannot skip — order confirmations, sign-in codes, and account or security notices.
- To detect and prevent fraud, abuse, and prohibited listings.
- To meet accounting, tax and other legal obligations.
AI features
When you use Snap, Enrich or Studio, the images and text you supply are sent to third-party AI providers to produce the listing content you asked for. Which providers are in use is a platform setting and can change; the current set is disclosed on request.
We do not use your content to train our own models, and we do not use it for advertising. Providers process it under their own terms as our processors.
Who else sees your data
Service providers, each handling only what their job requires:
- Stripe — payments, subscriptions and seller payouts, including the identity checks Stripe requires before it will pay a seller.
- Our email and SMS providers — delivery of order mail, sign-in codes and notifications.
- Cloud storage and hosting — where uploaded media and the database live.
- Push notification services — Firebase Cloud Messaging and Apple Push Notification service.
- Mapping and geocoding providers — turning a delivery address into a location and estimating arrival times.
- AI providers — as described above.
- Identity verification providers — for couriers only.
- Couriers and delivery partners — the delivery details needed to complete a specific order.
We also disclose data where the law requires it, or to establish or defend legal claims. We do not sell personal data and we do not share it for cross-context behavioural advertising.
How long we keep it
Account and shop data for as long as your account exists. Order, payment and invoice records for retention period after the order, because tax and accounting rules require it — deleting your account does not erase records we are obliged to keep.
Delivery logs of the emails and text messages we send, including one-time codes, are kept for 30 days and then deleted automatically.
Content you delete — a listing, a photo, a message — is removed from the product promptly and from backups within backup retention period.
Your choices and rights
- Access and correction — most of what we hold is visible and editable in the app.
- Deletion — Account → Delete account removes your account and personal data, subject to the records we must keep above.
- Marketing — every marketing email carries an unsubscribe link, and turning it off does not affect order or security messages.
- Notifications — per-event controls live in the app’s notification settings.
- Depending on where you live, you may also have rights to a copy of your data, to object to or restrict processing, and to complain to your local data protection authority.
To exercise any of these, use the in-app controls or write to support@snapsell.io.
Security
Traffic is encrypted in transit. Access to data is enforced at the database row level, so one shop cannot read another’s. Platform credentials are held in an encrypted vault, not in application code or configuration files. Payment card details are handled entirely by Stripe and never touch our systems.
No service can promise perfect security. If a breach affects you, we will notify you and the relevant authority as the law requires.
Children
SnapSell is not intended for anyone under minimum age, and we do not knowingly collect their data.
Where data is processed
Our infrastructure and our providers operate in regions, so your data may be processed outside your own country under appropriate safeguards.
Changes
When this policy changes we update the effective date at the top of this page, and for material changes we tell you in the app or by email before they take effect.
Terms of Service and Privacy Policy are also linked from every SnapSell app under Account.