Privacy Policy

This Privacy Policy explains what information ShelfProud ("we", "us") collects when you use the shelfproud.com website, the ShelfProud desktop application (the "App") and our API (together, the "Service"), how we use it and the choices you have. We collect as little as we can. We do not sell personal information, we do not show ads and we do not use advertising trackers. Our website analytics work without cookies.

1. Information we collect

When you visit the website

• No visitor cookies. Our website does not set cookies for visitors. Our infrastructure provider may set strictly necessary security cookies to protect the site from abuse.
• Server logs. Like most websites, our servers keep technical logs (for example the time, requested page and browser type) for security and troubleshooting. They are kept for a short period and then deleted.
• Analytics. We use PostHog to understand, in aggregate, how the website is used: pages viewed, clicks, the page you came from, approximate location derived from your IP address, browser and device type, and how our free tools are used (for example which publisher was selected and the type of result, never anything you type that identifies you). We configure it without cookies or other storage on your device, so visits are not linked across sessions and we do not build profiles of visitors.
• Downloads. When you download the App we record the platform (Mac or Windows), the version, the country your request came from (as determined by our content delivery provider), the page you came from and the time. We do not store your IP address or browser details for downloads.

When you ask for a beta access key

If you email us, we receive your email address and whatever you include in your message (for example your name, your computer type and what you collect). We use it to reply, to issue your access key and to send you important information about the beta.

When you use the App

• Stored on your computer, not on our servers: your saved searches, the listings found, your settings and your access key are stored locally on your computer.
• Sent to our servers: your access key (to verify it, at launch and about once an hour) and, for marketplaces we search through their official interfaces (currently eBay and Etsy), the text of the search. Our servers run that search and return the results. Search text and results may be cached briefly (currently up to 10 minutes) and shared between users making the same search, to stay within the marketplaces' limits. For each access key we keep a label identifying who it was issued to, whether it is active, and when it was last used.
• Sites the App visits directly: other sites (such as AbeBooks, Vinted, PangoBooks, Catawiki, Heritage Auctions, Invaluable and the-saleroom) are searched directly from your computer, as if you visited them in a browser. Those sites receive your IP address and technical information and may set cookies inside the App, under their own privacy policies, which we do not control.

2. How we use information and legal bases

• To provide and secure the Service, verify access keys, prevent abuse and enforce our Terms (performance of our agreement with you and our legitimate interests).
• To understand, in aggregate, how people use the website and tools, and how many people download the App and from which countries (our legitimate interest in running and improving the Service).
• To communicate with you about your access and the beta (performance of our agreement, or your consent where required).
• To comply with legal obligations and to establish, exercise or defend legal claims.

3. Service providers

We use a small number of providers who process information on our behalf or as part of delivering the Service:

• Cloudflare, which delivers and protects our website and API and processes requests, including IP addresses, to do so;
• our hosting provider, which runs our servers;
• PostHog, which provides our website analytics and processes the usage information described above, including IP addresses, in the United States;
• Google Fonts and a CSS framework CDN, from which our website loads fonts and styles; your browser connects to them directly when loading our pages;
• eBay and Etsy, which receive the text of searches that our servers run through their interfaces (not your identity);
• our email provider, for messages you send us.

We may also disclose information if required by law, to protect our rights or the safety of others, or in connection with a reorganisation or transfer of the Service.

4. International transfers

Our servers and providers may be located outside your country, including in the United States. By using the Service you understand that your information may be processed there. Where required, we rely on appropriate safeguards for such transfers.

5. How long we keep information

• Download records contain no personal data and may be kept indefinitely for statistics.
• Access key records are kept while the key is active and for a reasonable period afterwards, unless you ask us to delete them.
• Emails are kept as long as needed to manage your access and the beta.
• Server logs and cached searches are kept only briefly.
• Website analytics events are used only in aggregate and are deleted according to our analytics provider's retention period.

6. Your rights

Depending on where you live, including under the EU and UK GDPR and Argentina's Personal Data Protection Law No. 25,326, you may have the right to access, correct or delete your personal data, to object to or restrict certain processing, to data portability and to withdraw consent. To exercise these rights, email [email protected]. You may also lodge a complaint with your data protection authority; in Argentina this is the Agencia de Acceso a la Información Pública (AAIP).

You can delete everything the App stores on your computer at any time by uninstalling it and removing its data folder.

7. Security

We use reasonable technical and organisational measures to protect information, including encrypted connections. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. Keep your access key confidential.

8. Children

The Service is not directed to children and is intended for users aged 18 or over. We do not knowingly collect personal information from children.

9. Changes to this policy

We may update this Privacy Policy from time to time. We will post the new version on this page and update the date above. Material changes take effect when posted.

10. Contact

Privacy questions or requests: [email protected].