Privacy Policy
DRAFT for review (2026-10-09). Not legal advice. Have it reviewed before the first paying user. Fill in every [BRACKETED] item.
Last updated: [DATE]
[LLC NAME] ("we") runs Vastra ("the service"), a tool that turns photos of clothing into eBay listings and helps manage them. This policy says what we collect, why, who else sees it, and how to delete it. Plain English on purpose.
What we collect
- Your account: your email address and a scrambled version of your password (we can't read your password).
- Your eBay connection: when you tap Connect eBay, eBay gives us a long-lived key that lets the service act on your eBay account. We store it encrypted. We never see or store your eBay password.
- Your photos: the pictures you take of garments, to write and post listings.
- Your selling data: the listings, prices, orders, fees and shipping costs we read from eBay to run the service and show you your profit.
- Your settings: price floors, shipping choices, the automatic tools you turned on, your ZIP code (to set where items ship from).
- Usage records: sign-ins, the number of eBay calls made for your account, and error logs, to keep the service working and fair for every user.
Why we use it
Only to run the service for you: write and post your listings, price them, manage them the way you chose, show your results, keep the service secure, and bill you. We don't sell your data, and we don't use it for advertising.
Who else sees it
- eBay: your listings and account actions go to eBay, because that's the point of the service.
- Anthropic (AI): your garment photos are sent to Anthropic's AI to read the garment (brand, size, condition) and draft the listing. [Confirm Anthropic's current data-use terms for API customers before launch.]
- [PAYMENT PROCESSOR, e.g. Stripe]: handles your card payments. We never see or store your full card number.
- [HOSTING PROVIDER]: the servers the service runs on.
- [EMAIL PROVIDER]: sends password-reset and service emails.
We don't share your data with anyone else unless the law requires it.
How long we keep it
As long as your account is open. If you delete your account, your eBay connection is removed immediately, and your photos, listings data and settings are permanently deleted within 30 days. Billing records may be kept longer where tax law requires.
Your choices
- Delete your account any time from the Account page. This is permanent after 30 days.
- Disconnect eBay any time from the Account page, or from your eBay account's own settings.
- Ask us what we hold about you, or to correct it: anthonyleblanc9@gmail.com.
Security
Passwords are stored scrambled (scrypt). eBay keys are encrypted at rest with a key kept separately from the data. Each user's data is stored separately from every other user's. All traffic uses HTTPS.
Changes
If this policy changes in a way that matters, we'll tell you by email before it takes effect.
Contact
[LLC NAME], [MAILING ADDRESS], anthonyleblanc9@gmail.com