Privacy Policy

Last updated: 6 August 2026

This policy explains what data the VintedBot app and browser extension (the “App”) collect, why, and your choices. The App helps you create and manage second-hand clothing listings on marketplaces such as Vinted. By using the App you agree to this policy.

The short version. We collect only your account email so you can sign in. Your photos are turned into listings by an AI provider — either one you configure with your own key, or, if you buy credits, Google Gemini via our server. Your marketplace login stays on your device — we never see or store it. We don’t sell your data.

1. Who we are

The App is operated by the VintedBot team (“we”, “us”). For any privacy question, contact us at support@vintedbot.org.

2. What we collect

Account details. When you sign up, we store your email address (and, if you use Google or Facebook sign-in, the basic profile that provider returns — typically your name and email). Authentication is handled by Supabase on our behalf.
Item photos & listing text. Photos you select are used to generate the listing (title, description, price suggestion). With your own AI key they go directly to the provider you choose (Anthropic, Google or OpenAI). With managed credits they are sent through our server to Google Gemini using our key. We do not keep a copy of your photos on our servers.
Credits. If you buy AI credits, we store your credit balance and a record of credit purchases and use. Payments are processed by Lemon Squeezy; we do not store card details.
On-device data. Your settings, your API key, sign-in token, and any cost figures you enter for profit tracking are stored locally on your device, not on our servers.
Marketplace session. To create drafts on your behalf, the App works inside your own logged-in marketplace session on your device. We never collect, transmit, or store your marketplace username, password, or session cookies.

3. What we do NOT collect

We don’t collect your Vinted/eBay password or payment details.
We don’t track your location.
We don’t sell or rent your personal data to anyone.

4. How we use data

To let you sign in and keep you signed in.
To generate listings from your photos (via your chosen AI provider).
To provide app features you trigger — relisting, price drops, replies, offers, and cross-listing to marketplaces you connect.

5. Third parties we share with

Data is shared only as needed to provide the features you use:

Supabase — stores your account/email for authentication.
Your chosen AI provider (Anthropic / Google / OpenAI) — receives the photos and prompts needed to write a listing, under that provider’s own privacy terms and your API key.
Marketplaces you connect (Vinted, and eBay if you link it) — receive the listing content you choose to post there.

6. Data retention & deletion

Your account email is retained while your account exists. You can delete your account and the associated data at any time by emailing support@vintedbot.org. On-device data is removed when you sign out or uninstall the App.

7. Security

Sign-in tokens and keys are kept on your device. Network requests use HTTPS. No method of storage or transmission is 100% secure, but we take reasonable measures to protect your data.

8. Children

The App is not directed to children under 16, and we do not knowingly collect their data.

9. Changes to this policy

We may update this policy; the “Last updated” date will change. Continued use after an update means you accept the revised policy.

10. Contact

Questions? Email support@vintedbot.org.