Privacy Policy

Last updated: [EFFECTIVE DATE] · Version 1.0

Template — not legal advice. This is a starting point for ResalerHQ. Have a lawyer review it against your jurisdiction and the laws that apply to your customers (for example, GDPR, UK GDPR, CCPA/CPRA) before you rely on it. Replace every placeholder ([COMPANY], [CONTACT EMAIL], [EFFECTIVE DATE]) and update the sub-processor list to match the vendors you actually use.

This Privacy Policy explains how [COMPANY] ("ResalerHQ," "we," "us") collects, uses, and shares information when you use the ResalerHQ application and websites (the "Service"). By using the Service you agree to this Policy.

1Information we collect

Account information — your name, email address, and password (stored only in hashed form by our authentication provider).
Workspace & inventory data — the records you create: devices, serial numbers/IMEIs, prices, suppliers and buyers, orders, photos, locations, team members, hours, and notes.
Team & activity data — who created, moved, or sold a device, and hours logged, so workspace admins can see team performance.
Usage & device information — basic technical data such as browser type, IP address, and interactions, used to operate and secure the Service.
Cookies & local storage — we use essential cookies and browser storage to keep you signed in and remember preferences such as your theme. We do not use advertising cookies.

2How we use information

To provide, maintain, and improve the Service;
To authenticate you and secure your workspace;
To perform device-information lookups you request (see sub-processors below);
To communicate with you about your account, updates, and support;
To bill you for paid plans;
To detect, prevent, and address fraud, abuse, and security issues;
To comply with legal obligations.

We do not sell your personal information, and we do not use your Customer Data to train third-party advertising or unrelated machine-learning models.

3How information is shared

We share information only as needed to run the Service:

Within your workspace — data is visible to other members of your workspace according to the roles and access their admin assigns. Workspaces are isolated from one another at the database level.
Sub-processors — vendors that process data on our behalf (below).
Legal — when required by law, or to protect rights, safety, and the integrity of the Service.
Business transfers — in connection with a merger, acquisition, or sale of assets, subject to this Policy.

4Sub-processors

Provider	Purpose
Cloud database & authentication host	Stores your account, workspace, and inventory data; handles sign-in and file/photo storage.
Application & website hosting	Serves the ResalerHQ app and marketing site.
Device-lookup provider	When you run an IMEI/serial lookup, the identifier you enter is sent to the lookup provider to return device details.
Payment processor	Processes subscription payments (added when paid plans launch); card details are handled by the processor, not stored by us.
Email provider	Sends transactional email such as invites and password resets.

Update this list to name the specific vendors you use and link their privacy terms.

5Data retention

We keep Customer Data for as long as your workspace is active. After you close a workspace or cancel, we make data available for export for a limited period and then delete or anonymize it, except where we must retain it to comply with law, resolve disputes, or enforce our agreements.

6Security

We use industry-standard measures to protect information, including encryption in transit, hashed passwords, and workspace-level access controls enforced at the database. No system is perfectly secure; you are responsible for keeping your credentials safe and for the access you grant within your workspace.

7Your rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal information, and to object to or restrict certain processing. Workspace admins can edit and delete most data directly in the app. For other requests, contact [CONTACT EMAIL]. If you are in the EEA, UK, or California, additional rights may apply; we honor verifiable requests as required by applicable law. For workspace data you submitted on behalf of a business, we may direct your request to that workspace's owner, who is the controller of that data.

8International transfers

We and our sub-processors may process information in countries other than yours. Where required, we use appropriate safeguards for such transfers.

9Children

The Service is for businesses and is not directed to children under 18. We do not knowingly collect personal information from children.

10Changes to this Policy

We may update this Policy from time to time. If we make material changes, we will provide notice in-app or by email. The "Last updated" date above reflects the current version.

11Contact

Questions or privacy requests: [CONTACT EMAIL].