Privacy Policy

Last updated: November 5, 2026. This policy covers SellFound (https://sellfound.vercel.app). We wrote it in plain words on purpose: you should be able to read what happens to your data without a law degree.

The short version

We collect very little. The listing facts you type are sent to our AI provider so it can write your draft — we do not store them. If you sign in with Google, your email address lives only in a cookie on your own device; we keep no account database. We store only a scrambled (hashed) version of your IP address, for one day, to enforce the free daily limits. Ads load only if you say yes. We sell no data, we track you on no other site, and we run no analytics tool.

What we collect

Listing facts you type. Product name, details, materials, use, and (for eBay) brand, condition and variant. When you ask for an AI draft, these facts are sent to our AI provider (Groq — or Google Gemini, only when Groq is rate-limited) so it can write the draft. They are not stored by us, and the draft is returned to you and then forgotten by our server.
Your email address — only if you sign in. Signing in uses Google. Google checks your address; we never see or store your Google password. Your email is kept in a signed cookie on your own device for 30 days, or until you sign out. We keep no account database and no list of signed-in users.
A scrambled version of your IP address. To stop one person burning the whole free AI allowance, we keep a SHA-256 hash of your IP address (a one-way scramble — it cannot be turned back into the address). It is used only to count daily use, and it expires after 24 hours. We never store the raw IP address.
Things saved in your own browser. Your free-use count and any drafts you save are stored in your browser's local storage, on your device. They never leave your device unless you ask for an AI draft (see above).
Cookies. A sign-in cookie (30 days, deleted when you sign out), a short sign-in security cookie (10 minutes), and your cookie-consent choice (kept on your device until you change it).
Advertising data — only if you accept ads. Our ad partner Monetag loads only after you press Accept on the cookie banner. Monetag may collect device and advertising data under its own privacy policy. If you press Decline, no ad code loads at all.
Hosting logs. Our host (Vercel) keeps standard server logs for security and reliability, as every host does.

What we never collect

No names, phone numbers, or home addresses.
No passwords — Google handles sign-in, and we never see yours.
No payment details — the free tier takes no payment.
No tracking across other websites, and no analytics tool.
No selling, renting, or sharing of your data for marketing.

Who we share data with

Only the services the site needs to work:

Groq (AI drafts) — receives the listing facts you type, only when you ask for a draft.
Google Gemini (AI draft fallback) — receives the same listing facts, only when Groq is rate-limited.
Google (sign-in) — verifies your email address when you choose to sign in.
Monetag (ads) — loads only after you accept cookies.
Vercel (hosting) — serves the site and keeps standard server logs.
Upstash (rate limits, when enabled) — stores only the scrambled IP hashes described above, for 24 hours.

We share nothing else with anyone, and we disclose data to authorities only if the law requires it.

How long we keep things

Listing facts sent for a draft: not stored at all.
Scrambled IP hashes: 24 hours, then deleted.
Sign-in cookie: 30 days, or until you sign out.
Your consent choice: until you change it.
Drafts and usage counts in your browser: until you clear them.

Your rights

You can ask us what data we hold about you, ask us to correct it, or ask us to delete it. Because we store almost nothing, deletion usually means: sign out (which deletes your sign-in cookie) and clear this site's data in your browser (which deletes saved drafts and usage counts). To make a request, or to ask anything about this policy, email us at privacy@sellfound.vercel.app. We will answer within 30 days.

If you are in India, your rights under the Digital Personal Data Protection Act, 2023 apply, including the right to withdraw consent at any time. If you are in the EU or UK, your rights under the GDPR apply, including access, correction, deletion, and restriction. Withdrawing consent for ads simply stops the ads loading — the free tools keep working.

Children

SellFound is a tool for sellers. If you are under 18, please use it only with a parent or guardian. We do not knowingly collect data from children.

Changes to this policy

If we change how we handle data, we will update this page and the date at the top. If a change affects your rights in an important way, we will say so clearly here before it takes effect.

Contact

Questions or requests about your data: privacy@sellfound.vercel.app.