EUSellKit

Privacy Policy

Last updated: 2026-08-31. This page describes what our software actually does with your data. Data controller: Cormindy (Canada). Contact: packs@eusellkit.com.

What we collect and why

  • Free product check: the listing URL you paste, the page text we fetch from it, and the product/manufacturer details you enter or confirm. The listing title and description text are sent to an AI extraction provider (OpenAI, Google Gemini or Anthropic — whichever is configured, in that order of fallback) to pre-fill the product fields. No e-mail or payment data is sent to those providers.
  • Free tools and the notification decoder: the form fields / pasted text are processed on our server to produce the result and are not stored in our database.
  • Account: your e-mail address. Sign-in is passwordless: a one-time magic link sent by e-mail (valid 15 minutes; expired tokens are purged after 24 hours) or Google sign-in, from which we receive only your verified e-mail address (scope: openid email). A signed session cookie (esk_session, strictly necessary, 90 days) keeps you signed in; signing out deletes it.
  • Purchases: payment is processed by Stripe; card details never reach our servers. We store your e-mail, the Stripe session/customer/subscription identifiers, and invoice numbers and links so you can find your invoices in your account.
  • Generated packs: the product data you confirmed and the generated documents (ZIP), kept in our S3-compatible object storage.
  • "Notify me" list: e-mail, language and the page you signed up from, used to send rule-change digests. Every digest contains an unsubscribe link.
  • Analytics: self-hosted Umami — cookieless, anonymous page views and button events (e.g. "check started"). No cross-site tracking, no advertising trackers.
  • Seller Pro monitoring: we compare your confirmed product data with the public EU Safety Gate alerts and e-mail you if something matches.

E-mails we send

Transactional e-mails go through Resend: pack ready, generation-failure notice (with automatic refund or credit return), sign-in link, Seller Pro welcome, rule-update notices and safety alerts. Digests go only to the "Notify me" list, each with an unsubscribe link.

Retention

  • One-time packs: the download link is valid for 30 days after purchase.
  • Seller Pro packs: kept for 10 years (the GPSR Art. 9(3) technical documentation retention period); the horizon is extended while the subscription is active, and packs are silently regenerated when our rule set changes.
  • Sign-in tokens: deleted 24 hours after they expire.
  • Expired pack files are not currently deleted automatically from storage; we delete your packs, and any other data about you, on request.

Your rights and choices

E-mail packs@eusellkit.com to access, correct or delete your data. Your data is never sold. Processors we use: Stripe (payments), Resend (e-mail), Google (only if you choose Google sign-in), AI extraction providers (OpenAI / Google / Anthropic — listing text only), and our hosting and object-storage infrastructure.