Privacy Policy

1. Information We Collect

When you register for and use Partzer, we collect the following categories of information:

Account Information:

• Full name and company name (optional)
• Email address (used as your login identifier)
• Password (stored as a one-way cryptographic hash — we never store your plain-text password)
• Account role (user or admin), subscription tier, and account status

Usage & Session Data:

• Timestamp of your last successful login
• Session token stored in a secure, server-side session (not in your browser's localStorage)
• Password reset tokens (temporary, expire within 24 hours and are cleared upon use)

eBay Account Data:

• eBay OAuth access and refresh tokens, used to authenticate API requests on your behalf
• eBay listing data (titles, SKUs, prices, images, descriptions) that you choose to view or manage through the app — this data originates from eBay and is not permanently stored by Partzer beyond your active session

Content You Provide:

• Product images you upload or capture for AI listing generation
• Custom listing preferences (shipping, return policy, description templates, tag layout settings) stored in your browser's localStorage
• CSV files you upload for bulk listing management — processed in memory and not permanently stored

2. How We Use Your Information

We use the information we collect to:

• Provide the service — authenticate you, connect to eBay on your behalf, and display your listings
• Generate AI-assisted listings — send product images and text to Google's Gemini API to produce listing titles and descriptions
• Manage your account — process subscription tiers, account status, and administrative operations
• Security & fraud prevention — track login activity, detect unauthorized access, and enable password reset functionality
• Service communications — deliver password reset links and account-related notices when requested by you or an administrator
• Internal administration — allow authorized admin users to manage accounts, track activity, and export user records for support purposes

We do not use your data for advertising, behavioral profiling, or selling to data brokers.

3. eBay Integration & OAuth

Partzer connects to your eBay seller account using eBay's official OAuth 2.0 authentication system. When you authorize the connection, eBay issues us a time-limited access token and a refresh token. These tokens allow us to perform actions (such as creating listings, fetching active inventory, or ending listings) without ever knowing or storing your eBay password.

• eBay tokens are stored in your server-side session and are used only to make API calls on your behalf
• Tokens are cleared when you disconnect your eBay account or log out
• We request only the eBay API scopes necessary to operate the features you use (listing creation, inventory access, item management)
• All eBay API communication occurs over HTTPS

You may revoke Partzer's access to your eBay account at any time through your eBay account settings under "Connected Applications."

4. AI Processing (Google Gemini)

The AI Listing Assistant feature sends data to Google's Gemini API to generate eBay listing titles, descriptions, part numbers, and pricing suggestions.

• Images you capture or upload, along with any text context you provide, are transmitted to Google's Gemini API over an encrypted connection
• Google may process this data in accordance with their own Privacy Policy and Generative AI usage policies
• Partzer does not permanently store the images you submit for AI generation — they are processed in memory and discarded
• AI-generated descriptions, once created, are displayed to you. If you apply a listing theme and create a listing, the final description HTML is sent to eBay via the eBay API

We recommend not submitting images containing sensitive personal information (such as faces, license plates, or identifying documents) to the AI tool.

5. Data Storage & Security

User account data is stored in a SQLite database on the server hosting Partzer. We implement the following security practices:

• Password hashing: Passwords are hashed using the scrypt algorithm with a unique random salt per account — the original password is never stored or recoverable
• Session security: Sessions are managed server-side with a cryptographically random secret. Session cookies are HTTP-only where applicable
• Password reset tokens: Reset tokens are cryptographically random (256-bit), single-use, and expire after 24 hours
• HTTPS: All data in transit between your browser and our server is encrypted via TLS/HTTPS
• Rate limiting: Login endpoints are rate-limited to prevent brute-force attacks
• Input validation: All user inputs are validated and sanitized before processing

While we take these precautions, no system is completely immune to attack. You should use a strong, unique password and notify us immediately if you suspect unauthorized access to your account.

6. Subscription & Billing

Partzer offers tiered subscription plans (Free, Basic, Pro). Your subscription tier and status are stored in your account record and used to control access to features.

• Subscription tier, status, and any administrative billing overrides (e.g., voided billing for partner accounts) are stored in your user record
• Payment processing is handled by PayPal — Partzer does not store full payment card numbers or banking information; all billing data is held by PayPal under their own privacy policy
• Admins may view and modify subscription details for support and account management purposes

7. Cookies & Local Storage

Session Cookie: We set one session cookie when you log in. This cookie contains only a session ID and is required for the application to function. It is cleared when you log out or your session expires.

Browser localStorage: Your listing preferences (description templates, color themes, tag layout, tag size, shipping and return policy preferences) are saved in your browser's localStorage. This data never leaves your device and is not transmitted to our servers. You can clear it at any time through your browser settings.

We do not use tracking cookies, advertising cookies, or third-party analytics cookies.

8. Third-Party Services

Partzer integrates with the following third-party services. Each operates under its own privacy policy:

• eBay Inc. — For listing management and seller account access. eBay Privacy Policy
• Google LLC (Gemini API) — For AI-assisted listing generation. Google Privacy Policy
• PayPal — Used as the payment processor for paid subscription plans. PayPal handles all payment card and billing data; Partzer never stores your full card number or banking details. PayPal Privacy Policy
• Google Fonts — The Inter typeface is loaded from Google Fonts, which may log your IP address per Google's standard CDN practices
• Tailwind CSS CDN & Lucide Icons CDN — UI assets loaded from third-party CDNs; no personal data is transmitted beyond a standard HTTPS request

We do not integrate advertising networks, social media trackers, or data broker services.

9. Data Sharing & Selling

We do not sell your personal data. We do not trade, rent, or sell your information to third parties for marketing or commercial purposes.

We may share information in the following limited circumstances:

• With eBay: When you perform listing actions, your listing content (title, description, price, images, SKU, etc.) is transmitted to eBay via their API. eBay's use of that data is governed by their own terms and privacy policy
• With Google Gemini: Images and text you submit to the AI tool are sent to Google's API for processing as described in Section 4
• Legal compliance: We may disclose information if required by law, court order, or governmental authority
• Business transfer: In the event of a merger, acquisition, or sale of the business, user data may transfer to the new owner, who will be bound by this policy or a successor policy

10. Data Retention & Deletion

Your account data (email, name, password hash, subscription status) is retained for as long as your account is active. If you request account deletion, we will remove your personal data from our database within a reasonable timeframe.

• Session data is cleared on logout or session expiry
• Password reset tokens are single-use and auto-expire after 24 hours
• Uploaded images processed by the AI tool are not persistently stored and are discarded after processing
• eBay OAuth tokens are cleared when you disconnect your eBay account
• Browser localStorage data (preferences, templates) is stored on your device and can be cleared by you at any time via browser settings

To request account deletion or a copy of your data, please contact us using the information in Section 14.

11. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you
• Correction: Request that we correct inaccurate or incomplete information
• Deletion: Request that we delete your account and associated personal data
• Portability: Request your data in a structured, machine-readable format
• Objection / Restriction: Object to or request restriction of certain processing activities
• Withdraw consent: Disconnect your eBay account at any time through eBay's settings

To exercise any of these rights, contact us at the address in Section 14. We will respond within a reasonable timeframe and no later than required by applicable law.

12. Children's Privacy

Partzer is intended for use by eBay sellers and business operators. It is not directed at children under the age of 13. We do not knowingly collect personal information from anyone under 13. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes to our practices, features, or legal requirements. When we make material changes, we will update the "Last Updated" date at the top of this page. Continued use of the service after a policy update constitutes acceptance of the revised policy. We encourage you to review this page periodically.

14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us: