Privacy Policy
This policy explains, in plain language, what SaleSafe stores and why. We do not claim any regulatory certification.
Who is responsible for your data
Kevin Douglas Ellsworth II is the data controller for personal data processed through SaleSafe. For any privacy request, including access, correction, deletion or objection, email support@salesafe.app.
Categories of personal data we collect
- Identity and contact data: email address, optional display name, buyer first name and optional last name and email.
- Account and authentication data: hashed password or sign-in provider identifier, session and sign-in timestamps.
- Transaction data: item details, condition, price, currency, payment method, acknowledgements, timestamps and evidence fingerprints.
- Photographs you upload as condition evidence.
- Purchase and billing data: purchase records, amounts, currency, status and the payment provider's customer and transaction identifiers. We never receive card numbers.
- Technical and usage data: coarse device information, security and rate-limit logs, and coarse analytics events.
Who we share data with
- Paddle.com Market Ltd — our payment provider and Merchant of Record. Paddle receives the data needed to take payment, invoice you, handle tax and process refunds, and processes it under its own privacy notice.
- Our hosting, database, storage and authentication providers, which process data on our instructions.
- The other party to your transaction, limited to the sanitized sale details shown on the buyer link and receipt.
- Authorities, where we are legally required to disclose.
We do not sell personal data or use it for advertising.
Information you provide
- Seller account: email address, password (stored hashed by our auth provider), optional display name.
- Transaction data: item title, description, category, condition, known issues, included items, optional identifier, price, currency and optional payment method.
- Photographs you upload as condition evidence.
- Buyer information: first name, optional last name, optional email address, and which acknowledgements were confirmed.
What we deliberately do not collect
- No card or bank details — card payments for SaleSafe credits are handled entirely by our payment provider.
- No government ID and no identity verification.
- We do not store raw IP addresses against transaction records.
How the information is used
Solely to create and display the transaction record and its receipt, to let a receipt number be verified, to run your account and credits, and to keep the service secure.
Who can see what
- Only you can see your own sales, photos and account data. Other sellers cannot.
- A buyer sees only the sanitized sale details through their one-time link — never your email, account ID or other sales. Device identifiers are shown partly masked.
- The public verification page shows only the receipt number, item title, amount, currency, date, status and shortened evidence ID.
Photographs
Photos are stored in private storage. They are never in a public bucket. Buyers see them through short-lived signed links generated only for a valid buyer session.
Retention
Draft and cancelled sales can be deleted by you at any time. Accepted transaction records are retained as a shared record for both parties, because deleting one side's copy would defeat the purpose of the receipt. We do not promise permanent storage.
Deleting your account
Request deletion from the Account page. We will remove your account, drafts, cancelled sales and stored photos for non-accepted sales. Accepted transaction records may be retained in a reduced form.
Analytics
If analytics are enabled, only coarse event names such as "sale created" are recorded. No item details, prices, names or photos are sent to analytics.