Privacy Policy

1. Controller

Bawa Ecom LLC (Florida, United States) operates Sellvela and is responsible for your personal data. Contact for any privacy request: support@example.com.

2. Data we collect

Account: email, password (stored hashed, never readable), language, plan, billing status (payment details are handled by Stripe; we never see your card number).

Sign in with Google: if you choose it, Google sends us your email address, whether Google has verified it, and a Google account identifier. We never see your Google password and we do not access any other Google data.

Browser extension: if you install it, it stores a connection key in your browser and sends us only the identifier of the CJdropshipping product you choose to analyze or save (with its title and image for your ideas list). It does not read your browsing history or other websites, and it never reads eBay pages.

Connected accounts: access tokens for eBay and your supplier, stored encrypted; your listings, orders, amounts and tracking numbers.

Your buyers' shipping details are read from eBay only at the moment an order is placed with the supplier, sent to the supplier to deliver the order, and are not stored in our database.

Leads: the email you give us when using a free tool, if you choose to.

Technical data: server logs (IP address, date, pages) kept for security for up to 30 days.

3. Why we use it (legal bases)

To provide the service you signed up for (contract); to bill you and meet legal and tax obligations (legal obligation); to secure the service and prevent fraud (legitimate interest); to send service emails such as password resets, payment failures and order alerts (contract); to send you tips or offers only if you agreed (consent), with an unsubscribe link in every email.

4. Who we share it with

Only the providers needed to run the service: eBay and your supplier (CJDropshipping) to perform the actions you request; Stripe (payments); Google (only if you sign in with Google); our hosting and database provider; Resend (emails); Anthropic (AI writing of listing texts: only product information is sent, never buyer data). We never sell your data.

5. International transfers

Our servers and several providers are located in the United States. When data from the European Union or the United Kingdom is transferred, we rely on the providers' standard contractual clauses or equivalent safeguards.

6. How long we keep it

Account data: as long as your account is open, then deleted within 90 days of closure, except invoices and accounting records kept as required by law (generally up to 7 years). Password reset links expire after 1 hour.

7. Cookies

We use essential cookies only: session (keeps you logged in), lang (your language), consent (your cookie choice). With your consent, a ref cookie keeps the affiliate code you arrived with for 60 days; without consent, it is deleted when you close your browser. We use no advertising or third-party tracking cookies.

8. Your rights

You can access, correct, export or delete your data, object to or restrict its use, and withdraw consent at any time by writing to support@example.com. We answer within 30 days. If you are in the EU or the UK, you can also complain to your data protection authority. California residents have the rights provided by the CCPA/CPRA; we do not sell or share personal information for cross-context advertising.

9. Security

Passwords are hashed, platform tokens are encrypted at rest, connections use HTTPS, and access to data is limited to what is needed to run the service.