Sign in

Privacy

Privacy policy

Last updated: 10 October 2026

Who is responsible

SellerGuard EU is in a closed pilot. The operator's company details will be published here before the service is offered to customers.

What we process and why

  • Your account: name, e-mail address and a user identifier from the sign-in, so you can sign in and so we know which organization you belong to. Purpose: providing the service (Art. 6(1)(b) GDPR).
  • Your organization: its name, the countries you sell to, and who is a member or owner.
  • Your product data: SKUs, titles, categories and the information you record for the checks, such as the manufacturer's or EU responsible person's name, address and e-mail. These can be personal data of the people named; you decide what you enter.
  • Shopify: if you connect a shop, we store the shop address and an access token (encrypted) and read your products only. We have read-only access and never read customers or orders; Shopify's customer privacy requests need no action because we hold no customer data.
  • Documents you upload (declarations, test reports, photos) and your tracking notes (who is working on a check, notes and reasons).
  • Label photos you scan are read on our server and deleted immediately. Only the values you choose to copy are saved. No photo is sent to a third party.
  • Security records: an audit trail of important actions (who, what, when) and short-lived technical logs. Purpose: keeping the service and your data secure (our legitimate interest, Art. 6(1)(f) GDPR).

Cookies

We use only cookies that are strictly necessary for signing in: session (your encrypted sign-in session) and oidc_tx (used for ten minutes during sign-in). There are no analytics, advertising or tracking cookies, so we do not ask for cookie consent.

Where your data is and who can see it

Everything is stored and processed on servers of Hetzner Online GmbH in Germany, our hosting provider, acting on our instructions. We do not sell data, do not use it for advertising, and do not send it to analytics or AI services. Your organization's data is visible only to its members. We do not transfer personal data outside the EU.

How long we keep it

As long as your organization uses the service. Documents and notes you delete are removed. The owner of an organization can delete it at any time on the Team page: all its products, notes, documents, the Shopify connection and the team are deleted immediately (only a minimal record that a deletion took place is kept). Backups are overwritten within 7 days. Technical logs are rotated and overwritten within a short time.

Your rights

The owner of an organization can download all of its data as one file (JSON) on the Team page. You can also ask for access to your data, correction, deletion, restriction of processing, a copy in a portable format, and you can object to processing based on legitimate interests. Write to the contact above. You may also complain to a data protection supervisory authority, for example the one in your country.