Privacy Policy
The short version
- We never ask for, see or store your Depop, Vinted or Mercari passwords. The browser extension works through the sign-ins already in your own Chrome.
- We store what you give us so the service can work: your email, your items and photos, your listings' links and prices, and your sales.
- We don't sell your data and we don't show ads.
- You can download everything or delete your account yourself, any time, under Settings.
1. What we collect
- Account: your email address, a hashed version of your password (we can't read it), when you accepted our terms and the IP address you accepted them from, and your plan.
- Inventory: the items you add or import: titles, descriptions, photos, sizes, brands, prices, what you paid, SKUs and private notes.
- Marketplace activity: for each listing, its link, ID, price and status; for each sale, the site, price, date and, when the site shows it, the buyer's username and order number; the shipping labels the extension downloads.
- Extension status: when the extension last checked in, its version, and which of the three sites you're signed in to. It does not send us your browsing history or anything from other websites.
- Payments: handled by Stripe. We receive your subscription status and a Stripe customer ID, never your full card number.
- Phone alerts: if you turn them on, the ntfy topic name you choose.
2. How we use it
Only to run the service: listing your items, spotting sales, taking items down, sending you alerts and labels, showing your reports, billing you, keeping accounts secure, and answering you when you write to us. We may email you about your account (sales, labels, trial and billing notices). We won't send marketing email unless you opt in.
3. Who else sees it
- The marketplaces: when you list an item, its details and photos go to that site, as if you'd posted them yourself.
- Service providers that run parts of TagSpread for us: hosting (our server and database), email delivery, Stripe for payments, and ntfy if you use phone alerts. They may use your data only to provide their service to us.
- The law: if we're legally required to, or to protect people's safety or our rights.
- A buyer of the business: if TagSpread is sold or merged, your data would move with it under this policy, and we'd tell you first.
4. How long we keep it
For as long as your account is open. When you delete your account we erase your account, items, photos, labels and history straight away. Copies in backups are overwritten within 30 days. Stripe keeps billing records as the law requires.
5. Your choices and rights
- Download your data: Settings → Your data gives you an inventory spreadsheet and a full account file.
- Delete your account: Settings → Your data → Delete account. This also cancels any subscription. Listings already on the marketplaces stay there; take them down first if you want them gone.
- Correct your data: edit it in the app, or write to us.
- Depending on where you live (for example California, the EU or the UK) you may have further rights, such as to object to processing or to complain to a data protection authority. Write to us and we'll respond within 30 days.
6. Security
Connections to TagSpread are encrypted (HTTPS). Passwords are stored as one-way hashes. Each account can only see its own data. No system is perfectly secure; if we learn of a breach that affects you, we'll tell you without undue delay.
7. Children
TagSpread is for adults: you must be 18 or older, as our terms say. We don't knowingly collect data from anyone under 18, and we delete it if we find out we have.
8. Changes
If we change this policy in a way that matters, we'll email you and update the date at the top before the change takes effect.
9. Contact
support@tagspread.com. Our Terms of Service cover the rest of our agreement with you.