SellerMind

Privacy Policy

Last updated: June 2026

Introduction

SellerMind ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and AI-powered tools.

SellerMind is not affiliated with, endorsed by, or connected to Etsy, Inc. Etsy is a trademark of Etsy, Inc.

AI Transparency Notice: This service uses artificial intelligence (DeepSeek) to generate content. AI-generated outputs may contain inaccuracies, errors, or omissions. Users should verify all information independently before making any business decisions or publishing any content. SellerMind does not guarantee the accuracy or completeness of AI-generated content.

Geographic Restriction Notice: SellerMind services are not intended for users located in mainland China, the Hong Kong Special Administrative Region, Macau Special Administrative Region, or Taiwan. If you are located in these regions, please do not use our services. Our website may restrict access from these regions in accordance with applicable laws and regulations.

Information We Collect

Information You Provide

  • Product details you enter for AI content generation
  • Customer messages or reviews you submit for response generation
  • Any other information you voluntarily provide through our tools

Automatically Collected Information

  • Device type and browser information
  • Pages visited and time spent on our site
  • Referring website addresses
  • General geographic location (country-level only)

How We Use Your Information

We use the information we collect to:

  • Provide and improve our AI-powered tools
  • Generate content based on your inputs
  • Analyze usage patterns to enhance user experience
  • Protect against fraud and abuse
  • Comply with legal obligations

What we retain: We retain your email address and per-account usage counts (free quota used, subscription status) in our database (Supabase) to enforce free-tier limits and to honor your subscription if you upgrade.

What we do not retain: We do not retain the content of your Etsy listings, products, customer messages, AI prompts, or AI-generated outputs beyond the immediate API request lifecycle (typically a few seconds). AI processing is performed in real-time and the input/output payloads are not written to long-term storage.

You can request deletion of your retained account data (email and usage counts) at any time by emailing [email protected].

AI Data Processing

Our AI-powered services utilize third-party AI APIs for content generation. When you use our tools:

  • Your inputs are processed in real-time through AI APIs to generate content
  • We do not retain the content of your Etsy listings, products, customer messages, or AI prompts; AI generation runs in-memory and is not written to long-term storage
  • AI-generated content is displayed to you and is not retained after the API response is returned
  • Your data is processed solely for the purpose of providing AI-generated responses
  • We implement appropriate technical safeguards to protect data during transmission

⚠️ Important Notice for EU/EEA Users: Our primary AI provider (DeepSeek) processes data on servers located in China. By using our Service, you acknowledge and consent to the transfer and processing of your data on servers in this jurisdiction. DeepSeek processes data in real-time and does not retain your input after generating the response.

Note: When you use our AI tools, your input data may be transmitted to AI service providers. Please review their privacy policies to understand how they handle data.

GDPR Safeguards (Article 44+): For international data transfers, we rely on Standard Contractual Clauses (SCCs) as the legal basis, in accordance with GDPR Article 46(2)(c). All data transfers are encrypted in transit using TLS 1.2+. We minimize the data sent to AI providers — only product details and customer messages, no personal identifiers beyond your email.

Cookies and Tracking

We use only essential cookies to ensure our website functions properly. We do not currently use any third-party analytics or tracking cookies.

Cookie Categories

  • Essential Cookies: Required for the website to function properly. These cookies enable core functionality such as security, session management, and accessibility. You cannot opt out of essential cookies as the Service would not function without them. Examples include authentication tokens and load balancing cookies.
  • Analytics Cookies: We do not currently use any analytics cookies. If we introduce analytics services in the future, we will update this policy and provide appropriate consent mechanisms before enabling them.
  • Functional Cookies: Enable enhanced functionality and personalization, such as remembering your preferences. These are optional and you can disable them without affecting the core functionality of the Service.

Managing Your Cookie Preferences

You can control cookies through your browser settings or the Cookie Consent Banner displayed on your first visit. Disabling cookies may affect some functionality of our tools.

Do Not Track: We respect Do Not Track (DNT) signals from browsers. If you have DNT enabled, we will not set non-essential cookies.

Third-Party Services

We use the following third-party services:

  • DeepSeek: Primary AI content generation provider - servers located in China - subject to their privacy policy
  • Dodo Payments: Payment processing and subscription management — servers located in the United States (Merchant of Record / payment processor)
  • Supabase: Database and user data storage - servers located in Tokyo, Japan
  • Vercel: Website hosting and deployment - servers located in the United States
  • Cloudflare, Inc.: Content Delivery Network (CDN), Web Application Firewall (WAF), and DDoS protection — servers located globally. Data processed: IP address, request metadata, TLS handshake information. Retention: less than 30 days. Subject to Cloudflare's privacy policy.

International Data Transfers

Your information may be transferred to and processed in countries other than your own, including the United States and other jurisdictions where our service providers operate.

When we transfer personal data outside of the European Economic Area (EEA) or your jurisdiction, we ensure appropriate safeguards are in place, which may include:

  • Standard Contractual Clauses (SCCs) approved by relevant authorities
  • Data processing agreements with service providers
  • Verifying that service providers maintain appropriate data protection standards

For Users in Restricted Regions: If you are accessing our services despite geographic restrictions, please note that your data may be processed outside your country of residence. We do not target or intentionally collect data from users in mainland China, Hong Kong, Macau, or Taiwan.

Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the Internet is 100% secure.

GDPR Compliance (European Users)

For users located in the European Economic Area (EEA), this section provides additional information about our data processing practices in compliance with the General Data Protection Regulation (GDPR).

Data Controller

SellerMind

Contact: [email protected]

Data Protection Officer (DPO)

For GDPR-related inquiries, please contact us at: [email protected]

Legal Basis for Processing

We process your personal data based on one or more of the following legal grounds:

  • Performance of Contract: Processing necessary to provide our services to you
  • Legitimate Interests: Processing for our legitimate business interests, provided these are not overridden by your rights
  • Consent: Where you have given explicit consent for specific processing activities

Your GDPR Rights

If you are an EEA resident, you have the right to:

  • Access: Request a copy of your personal data
  • Rectification: Request correction of inaccurate personal data
  • Erasure: Request deletion of your personal data ("right to be forgotten")
  • Restriction: Request restriction of processing
  • Portability: Receive your data in a structured, machine-readable format
  • Object: Object to processing based on legitimate interests
  • Withdraw Consent: Withdraw consent at any time where processing is based on consent

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 30 days.

Right to Lodge a Complaint

You have the right to lodge a complaint with your local data protection authority if you believe we have violated your GDPR rights.

CCPA Compliance (California Users)

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA):

  • Right to Know: You can request information about the personal data we collect and how it is used
  • Right to Delete: You can request deletion of your personal information
  • Right to Correct: You can request correction of inaccurate personal information
  • Right to Opt Out: We do not sell personal information. There is nothing to opt out of
  • Right to Non-Discrimination: We will not discriminate against you for exercising your rights

We do not sell, rent, or share personal information with third parties for marketing purposes. To exercise these rights, contact us at [email protected].

Data Breach Notification

In the event of a data breach that affects your personal information, we will:

  • Notify affected users via email within 72 hours of becoming aware of the breach, as required by GDPR Article 33
  • Notify the relevant supervisory authority if the breach poses a risk to individuals' rights and freedoms
  • Take immediate steps to contain the breach and prevent further data loss

EU AI Act Compliance

Our Service uses artificial intelligence to generate content. In accordance with the EU Artificial Intelligence Act:

  • Transparency: All AI-generated content is clearly labeled and includes a disclaimer about potential inaccuracies
  • Human Oversight: Users can review, verify, and edit all AI-generated content before use
  • Accuracy: We use state-of-the-art AI models and encourage users to cross-reference with original sources
  • No Automated Decisions: The Service does not make decisions that produce legal effects for users

Your Rights

Depending on your location, you may have the right to:

  • Access your personal information
  • Correct inaccurate information
  • Request deletion of your information
  • Object to certain processing activities
  • Data portability
  • Opt out of certain data collection practices

To exercise these rights, please contact us at [email protected]

Children's Privacy

Our services are not intended for individuals under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal data from a child under 16 without verified parental consent, we will take steps to delete that information promptly.

If you are a parent or guardian and believe your child under 16 has provided us with personal information, please contact us at [email protected].

EU Consumer Rights (14-Day Withdrawal Right)

If you are located in the European Union (EU) or European Economic Area (EEA), you have the right to withdraw from a distance contract within 14 days without providing any reason, in accordance with the EU Consumer Rights Directive 2011/83/EU.

The withdrawal period expires 14 days after the day on which you enter into the subscription contract. To exercise your right of withdrawal, you must notify us of your decision to withdraw before the withdrawal period has expired.

How to Withdraw

To exercise your right of withdrawal, you may contact us:

If you withdraw from a subscription contract within the 14-day period, we will reimburse all payments received from you, without undue delay and in any event no later than 14 days from the day on which we are informed about your decision to withdraw.

Important: This right of withdrawal does not apply to digital content that has been delivered to you with your prior express consent and you acknowledge that you lose this right once the digital content has been delivered and used.

Online Dispute Resolution (ODR)

In accordance with EU Regulation No 524/2013 on online dispute resolution for consumer disputes, EU consumers may use the EU Online Dispute Resolution platform to resolve disputes out of court. The ODR platform is available at: https://ec.europa.eu/consumers/odr

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date.

We encourage you to review this policy periodically.

Contact Us

If you have any questions about this Privacy Policy, please contact us:

For GDPR requests or data protection inquiries from EEA users: [email protected]