# Privacy Policy

**ResellEngine AI - Scan. Evaluate. Sell.**

Last updated: May 11, 2026

---

## 1. Introduction

ResellEngine AI ("we", "us" or "our") operates the ResellEngine AI mobile application (the "App"). This Privacy Policy explains how we collect, use, and protect your personal data when you use our App.

By using ResellEngine AI, you agree to the collection and use of information in accordance with this policy.

---

## 2. Data Controller

Tobias Lochau
Teltower Straße 15
14109 Berlin
Email: resell.engineai@gmail.com

---

## 3. What Data We Collect

### 3.1 Camera Images
- When using the product scanner, the App accesses your camera to photograph products
- Photos are sent to Google Gemini AI for product identification and condition assessment
- Photos are **not** permanently stored on external servers
- Images are only processed for analysis and are not retained on our systems afterwards

### 3.2 eBay Account Data
- When connecting your eBay account, we store an OAuth access token encrypted on your device (Secure Store)
- The token is used exclusively to create and publish listings on your behalf
- We never have access to your eBay password
- Your eBay seller data (location, shipping settings) is stored locally on your device

### 3.3 Drafts and Settings
- Listing drafts (title, description, price, images, item specifics)
- Seller settings (location, shipping, returns)
- App settings (language, pricing strategy)
- Scan history and usage statistics
- All this data is stored **exclusively locally** on your device (AsyncStorage)

### 3.4 Technical Information
- Device type and operating system (for error reports)
- App version
- Anonymized crash reports (in case of app crashes)

---

## 4. Purpose of Data Processing

| Data Type | Purpose | Legal Basis |
|-----------|---------|-------------|
| Camera images | Product identification and condition assessment via AI | Art. 6(1)(a) GDPR (consent) |
| eBay token | Creating and publishing listings | Art. 6(1)(b) GDPR (contract performance) |
| Drafts | Local storage of your work | Art. 6(1)(b) GDPR (contract performance) |
| Crash reports | Bug fixing and app improvement | Art. 6(1)(f) GDPR (legitimate interest) |

---

## 5. Third-Party Services and Data Transfer

### 5.1 Google LLC (Gemini AI)
- **Purpose**: Product identification and condition assessment from camera images
- **Data transmitted**: Camera images (temporarily for analysis)
- **Privacy policy**: https://policies.google.com/privacy
- **Location**: USA

### 5.2 eBay Inc.
- **Purpose**: Publishing listings on the eBay platform
- **Data transmitted**: Listing title, description, images, price, item specifics
- **Privacy policy**: https://www.ebay.de/help/policies/member-behaviour-policies/datenschutzerklrung
- **Location**: USA / international

### 5.3 Functional Software Inc. (Sentry)
- **Purpose**: Anonymized crash reporting for quality assurance
- **Data transmitted**: Device type, OS version, stack traces (no personal data)
- **Privacy policy**: https://sentry.io/privacy/
- **Location**: USA

**Note on data transfer to the USA**: When using Google Gemini, eBay, and Sentry, data may be transferred to the USA. Transfer is based on:
- Art. 49(1)(a) GDPR (your explicit consent)
- Standard Contractual Clauses (Art. 46(2)(c) GDPR)

---

## 6. Data Retention

| Data Type | Retention Period |
|-----------|-----------------|
| Camera images | Only during analysis, immediately discarded afterwards |
| eBay token | Until you disconnect your eBay account |
| Drafts | Until you manually delete them |
| App settings | Until you uninstall the App |
| Crash reports | 90 days (Sentry default) |

---

## 7. Your Rights (GDPR Art. 15–21)

You have the following rights regarding your personal data:

- **Right of access** (Art. 15 GDPR): You have the right to obtain information about your stored data.
- **Right to rectification** (Art. 16 GDPR): You have the right to have inaccurate data corrected.
- **Right to erasure** (Art. 17 GDPR): You have the right to request deletion of your data.
- **Right to restriction** (Art. 18 GDPR): You have the right to request restriction of processing.
- **Right to data portability** (Art. 20 GDPR): You have the right to receive your data in a common format.
- **Right to object** (Art. 21 GDPR): You have the right to object to processing.

### How to delete your data:
- **Delete drafts**: Settings → Delete All Drafts
- **Disconnect eBay**: Settings → eBay Account → Disconnect
- **Delete all data**: Uninstall the App (removes all local data)

### Right to complain
You have the right to file a complaint with a data protection supervisory authority.

---

## 8. Data Security

- eBay access tokens are stored encrypted in the device's Secure Store
- All data is stored locally on your device and not transmitted to our servers
- Communication with third parties is exclusively via encrypted HTTPS connections
- The App does not collect tracking data and does not use advertising SDKs

---

## 9. Minors

ResellEngine AI is not intended for persons under 16 years of age. We do not knowingly collect personal data from children under 16.

---

## 10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. In case of significant changes, you will be informed through an in-app update or an App Store update.

---

## 11. Contact

For privacy questions, please contact us at:

**Email**: resell.engineai@gmail.com

---

*This Privacy Policy complies with the requirements of the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG).*
