Privacy Policy
SellTorch ("SellTorch", "we", "us") is an app and service for resellers: it keeps your listings, publishes them to marketplaces you connect, syncs your orders and buyer conversations, drafts listings from your photos with AI, and offers an AI assistant that works with your store data. This policy explains what data we collect, how we use and share it, and the choices you have. It covers the SellTorch iOS app, the SellTorch API and MCP server, and this website.
In short: we use your data to run SellTorch for you. We don't sell it, we don't use it for advertising, and the app has no analytics or tracking SDKs. AI features send the content they need to AI providers, with provider data retention and training turned off where we can choose. You can delete your account in the app at any time.
1. Data we collect
Account
Your name, email address and whether it's verified, your default organization and app preferences, when you joined and last signed in. Sign-in is handled by our authentication provider, WorkOS: your password goes to WorkOS and is never stored by SellTorch.
Organizations and members
Your store lives in an organization. We keep its name and logo, its members (their names, email addresses, roles, invitations and when they joined), role settings, and store settings such as your ship-from address and phone number, shipping and return defaults, and notes you give the assistant to remember.
Your store content
Listings (titles, descriptions, prices, item details), photos and other files you upload, notes, tags, and records of what was published where. We also keep an activity log of recent changes (who changed what), and a record of each action sent to a connected marketplace and its result.
Marketplace data
When you connect a marketplace account (such as eBay), we sync data from it so you can manage your sales in SellTorch. This includes your listings and their status, orders and fees, and your buyers' information: names, marketplace usernames, shipping addresses, phone numbers and email addresses where the marketplace provides them, and messages with buyers including any photos they send. We also hold the access tokens the marketplace issues so we can act on your behalf; these are stored encrypted.
Assistant chats and AI features
Your conversations with the SellTorch assistant, including the messages you send, files you attach, and the assistant's replies and the actions it took. For photo-to-listing drafts, the photos and notes you submit and the drafts produced.
Support requests
When you contact us through the in-app Help Center, we keep your message, any screenshots you attach, your account email and organization, and our reply. If you email us, we receive your email and its contents.
Microphone and speech
If you use dictation, the app asks for microphone and speech recognition permission. Dictation uses your phone's built-in speech recognition (Apple's Speech framework on iOS). Depending on your device and language, Apple may process the audio on your device or on its servers, under Apple's privacy policy. SellTorch does not receive or store your audio, only the text you choose to send.
Photos and camera
The app accesses your camera and photo library only when you choose to take or add photos. Only the photos you pick are uploaded.
Technical data
Like any online service, our servers process technical data such as IP address, device and app version, request times and errors, in short-lived operational logs used to run, secure and debug the service. Our authentication provider may set cookies on its sign-in pages. This website sets no cookies and has no analytics.
2. How we use data
We use data to:
- provide SellTorch: store your listings and files, publish to and sync with the marketplaces you connect, show your orders and buyer messages, and let your organization's members work together;
- run the AI features you use (drafting listings from photos, suggesting item details, the assistant);
- sign you in and keep accounts and data secure, including preventing abuse and enforcing usage limits;
- answer your support requests and send messages about your account or the service;
- fix problems and improve the service, using operational logs and the feedback you send us;
- meet legal obligations, including marketplace requirements such as deleting data of accounts closed on the marketplace.
We don't sell your data or your buyers' data, we don't share it for advertising, and we don't use it to build advertising profiles. The app contains no advertising, analytics or tracking SDKs. We don't use your content to train AI models.
3. Who we share data with
We share data only with the services that run SellTorch on our behalf, the services you choose to connect, and others only where the law requires.
Service providers
- WorkOS (authentication): your name, email, password at sign-in, organizations, memberships and invitations. WorkOS also sends sign-in, verification and invitation emails.
- Cloudflare (hosting, databases, file storage, image processing, logs): runs our servers and stores all of the data described above, including your photos and files. Cloudflare also creates resized copies of your images.
- OpenRouter and the AI model providers it routes to (currently OpenAI models): used for the assistant, photo-to-listing drafts and item-detail suggestions. What is sent depends on the feature:
- Assistant: your messages, files you attach, the conversation so far, and any store data the assistant reads to answer you, which can include listings, photos, orders and buyers' names, addresses and messages.
- Photo-to-listing drafts: your photos, your notes about the items, and your organization's assistant notes. If web search is on for your organization (it is by default; you can turn it off in organization settings), the model may search the web about your items.
- Item-detail suggestions: the listing's title, condition, description and photos.
- Resend (email): our replies to your support requests, sent to your account email, which quote your original message.
Services you connect
- Marketplaces (such as eBay): when you connect one, we send it the listings, photos, prices, shipping details (including your ship-from location) and replies you publish through SellTorch, and receive the marketplace data described above. The marketplace's own privacy policy governs what it does with data.
- AI apps connected through MCP (such as Claude or ChatGPT): if you connect SellTorch to an AI app, that app can read and change the store data your role allows, including buyer information, as you direct it. What it does with that data is governed by its provider's terms and privacy policy.
Other members of your organization
Members of an organization see its data according to their roles, and see each other's names and email addresses and who made which changes.
Image links
To show photos in the app and in connected AI apps, SellTorch creates image links that are hard to guess and work without signing in. Anyone who has such a link can open the image. Other files (such as PDFs) are only available when signed in.
Legal and business transfers
We may disclose data if required by law or to protect the rights, safety and security of our users, buyers, or SellTorch. If SellTorch is transferred to a new owner, your data would move with it under this policy.
4. Retention and deletion
We keep your data while your account is active and you use SellTorch. You can delete individual items (listings, files, notes, assistant chats) in the app at any time. The activity log keeps only the most recent 500 changes per organization.
Deleting your account
Delete your account in the app: Settings → Profile → Edit → Delete account. (Instructions are also on our Support page.) When you delete your account:
- your account is deleted from our authentication provider and you can no longer sign in;
- every organization you own is deleted with all its data: listings, photos and files, notes, tags, orders, buyer information and messages, marketplace connections and the access tokens for them, and settings;
- your assistant chats and support requests (including screenshots) are deleted;
- you're removed from organizations owned by others. Their data stays with them, including changes and notes you made there, which continue to show your name.
If you own an organization that has other members, you'll need to hand ownership to one of them before deleting your account. We keep only an anonymous placeholder for a deleted account, shown as "Deleted user", so that history in organizations you were part of still makes sense; your name and email are removed.
Disconnecting a marketplace removes the access tokens and the orders, buyer information and messages synced from it. Listings already published on a marketplace remain there until you end them, and the marketplace keeps its own copy of your data.
Backups and logs
Deleted data can remain in our database's point-in-time backups for up to 30 days, and in operational logs for up to 30 days, after which it is gone. Copies of images may persist briefly in caches.
5. Security
All data is encrypted in transit (HTTPS) and stored with our infrastructure provider, Cloudflare, which encrypts data at rest. Marketplace access tokens are additionally encrypted by us. Access to an organization's data is limited to its members according to their roles, and connected apps act with the permissions of the person who connected them. No system is perfectly secure; if we learn of a breach affecting your data, we'll notify you as the law requires.
6. Children
SellTorch is a tool for sellers and is not directed at children. You must be at least 18 to create an account, and we don't knowingly collect personal data from anyone under 16 (13 in the US). If you believe a child has given us personal data, contact us and we'll delete it.
7. Your rights and choices
You can see and edit most of your data directly in the app, and delete your account at any time. You can also email support@selltorch.com to:
- request a copy of your data;
- ask us to correct or delete it;
- object to or ask us to limit how we process it;
- ask questions about this policy.
We'll respond within 30 days, and may need to verify that the request comes from you. Depending on where you live (for example in the EU, UK or California), you may have additional rights, including to complain to your data protection authority. We don't sell or "share" personal data as those terms are defined under California law.
Buyers: if you bought from a seller who uses SellTorch, the seller controls your order data. Contact the seller, or the marketplace you bought on; you can also contact us and we'll help route your request.
Where we process data on a seller's behalf (such as buyer information), the seller is responsible for having a lawful basis to collect it, and we process it only to provide SellTorch to them. Where GDPR applies, we rely on performing our contract with you, our legitimate interests in running and securing the service, and your consent where we ask for it (such as microphone access).
8. International transfers
SellTorch is operated from the United States, and our service providers process data in the United States and other countries. Where the law requires it, we rely on appropriate safeguards (such as our providers' standard contractual clauses) for transfers.
9. Changes to this policy
We'll update this policy when our practices change, and change the effective date above. If a change is material, we'll tell you in the app or by email before it takes effect.
10. Contact
SellTorch is operated by an individual in the United States. Questions or requests about privacy: support@selltorch.com.