Privacy Policy

Scope and operator

This policy describes how Reseller's Best Friend handles personal information in the Reseller's Best Friend website, mobile app, support forms, and related services.

Reseller's Best Friend is the service name used in this policy.

Information we collect

Account and authentication information includes the identifiers and profile details used to create, secure, and access an account. Clerk handles the hosted authentication flow when configured.

Service content includes locations and search terms you enter, saved or pasted sale details and links, uploaded sale photos, photo labels, detected item details, marketplace research, resale scores, saved jobs, and feature-usage records.

Vercel Web Analytics records redacted page-route views and a limited set of first-party organic-launch funnel events, together with approved campaign source labels when present. Query strings, fragments, record IDs, and storefront slugs are removed or replaced with route templates before analytics events are sent. Analytics event properties do not include uploaded images, item names, listing URLs, prices, account identifiers, or other customer content.

Billing information includes Stripe, Apple, or Google customer and transaction identifiers, subscription status, purchase status, credit balances, and credit-use records. Payment-card details are entered with the billing platform and are not stored in the app database.

Support information includes the name, email address, category, subject, and message you submit. The support form also records the browser user-agent and referring page for abuse prevention and troubleshooting.

Hosting, authentication, storage, and security providers may generate device, request, diagnostic, and security logs when you use the service. The product code does not include an advertising network.

How information is collected and used

We receive information from you, from the features you use, from payment and authentication providers, and from public or user-supplied sale and marketplace sources.

We use it to authenticate accounts; provide sale search, storage, photo analysis, item detection, marketplace research, resale scoring, billing, credits, support, and account deletion; secure and troubleshoot the service; prevent abuse; and comply with applicable obligations.

A location you type into sale search may be sent to Google Maps or Places for geocoding when that integration is enabled. The current product does not require device-level precise location access.

AI and uploaded photos

Uploaded images are stored by Vercel Blob at hard-to-guess public URLs. They are not private to a signed-in session: anyone who obtains an image URL can view the image.

When you choose photo analysis, the uploaded photo URL, photo label, and relevant sale title and description are sent to OpenAI to identify resale-relevant items. Analysis results are returned to and stored with your account.

Do not upload payment cards, identity documents, medical information, private correspondence, faces, license plates, or unrelated personal information. Only upload content you are allowed to use.

AI output can be wrong or incomplete. Verify condition, authenticity, safety, demand, and resale value before acting on it.

Service providers and other disclosures

Depending on the enabled feature, information is processed by Vercel for hosting, Blob storage, and limited web analytics; Neon for database storage; Upstash for job caching; Clerk for authentication; Stripe for website billing; Apple or Google for mobile purchases; OpenAI for photo analysis; Google for location lookup; and SerpApi, eBay, or Etsy for marketplace research.

When a company processes information as our service provider, we require it to protect that information consistently with this policy and applicable requirements and to use it only for the services it provides to us. Providers may also process information under their own consumer terms when you interact with them directly, such as a store purchase.

We may also disclose information when reasonably necessary to comply with law or valid legal process, protect users or the service, investigate fraud or abuse, or complete a business transaction subject to appropriate safeguards.

This service version does not include advertising networks or functionality intended to sell personal information or share it for cross-context behavioral advertising.

Retention and deletion

Account-linked sale records, uploads, analysis, saved research, job records, billing rows, and linked support requests remain until deleted or no longer needed to provide the service. The app does not yet apply fixed automatic deletion periods to every record type.

Self-service deletion removes referenced app database rows and attempts to remove app-owned uploaded files and the Clerk identity. Support requests submitted while signed out or otherwise not linked to the account require a separate support request so they can be located.

After account deletion starts, the app retains a one-way cryptographic marker derived from the authentication identifier so delayed Stripe, Apple, or Google events cannot recreate credits or subscription access. The marker does not retain the raw authentication identifier and is not used to reconstruct the deleted identity.

Payment platforms, authentication providers, hosting logs, backups, fraud-prevention records, and records needed for legal, tax, accounting, dispute, or security purposes may follow separate retention schedules. We limit retained information to what is reasonably needed for those purposes.

See the Data Deletion page for the deletion process and provider follow-up.

Your choices and requests

You can choose what sale information and photos to submit, manually enter a location instead of granting device location, cancel a subscription on its billing platform, and delete the account after active billing is canceled.

If an optional feature asks for consent, you may decline it or later withdraw it through the feature or support. Withdrawal does not affect processing already completed before it was withdrawn.

Depending on where you live, you may have rights to request access, correction, deletion, restriction, objection, portability, or an appeal. Submit a privacy request through support. We may need to verify account ownership before acting on a request.

Security and changes

We use authentication, access controls, provider-managed encryption in transit, secret management, and monitoring intended to protect information. No online service can guarantee absolute security.

We may update this policy when product behavior, providers, or legal requirements change. The last-updated date identifies the published version. Material changes should be presented through an appropriate notice before they take effect.

Contact

Use the support form.

Postal correspondence can be arranged through support.