Privacy Policy

This Privacy Policy applies to ReplaySell products, websites, checkout flows, and account dashboards that link to this policy.

ReplaySell generally acts as a data controller for platform account data and product usage data. Sellers using ReplaySell may act as independent controllers for their storefront and customer communications.

Account Data

Name, email address, hashed password, login/session metadata, and account timestamps.

Commerce Data

Replay information, product details, order records, connected account IDs, subscription status, and billing identifiers.

Communication Data

Email and optional phone details used for timer reminders, stock alerts, and price-change notifications.

Technical Data

Device/browser metadata, IP-derived telemetry, logs, and security signals used to protect the service.

• Directly from you during signup, checkout, onboarding, and support requests.
• Automatically through cookies, logs, and security monitoring.
• From service providers that process payments, auth, hosting, and email delivery.

• Provide account access, storefront features, and replay commerce workflows.
• Process payments and subscription billing through Stripe.
• Send platform notifications and transactional communications.
• Prevent abuse, fraud, unauthorized access, and policy violations.
• Comply with legal, tax, accounting, and regulatory obligations.
• Improve product reliability and performance.

• Contract — to provide the services you request.
• Legitimate interests — to secure and improve the platform.
• Legal obligation — to comply with applicable law.
• Consent — where required for optional cookies or communications.

ReplaySell uses Stripe for platform subscription billing and Stripe Connect for seller onboarding and direct checkout on connected accounts.

• ReplaySell does not store full card numbers on its own servers.
• Buyer payment data is processed by Stripe under Stripe terms and privacy notices.
• Seller connected account compliance status may be synced to ReplaySell for operational purposes.

We share data only as needed to operate the platform and meet legal obligations.

• Auth.js for authentication and session management.
• Stripe for payment processing, subscriptions, and Connect onboarding.
• Convex for backend database and API workflows.
• Resend for transactional notification delivery.
• Vercel for hosting, deployment, and runtime operations.
• Advisors, law enforcement, or regulators when legally required.

ReplaySell and its providers may process data in multiple countries. When required, we use appropriate safeguards for cross-border transfers.

We retain data for as long as needed to provide services, maintain records, resolve disputes, and satisfy legal obligations.

• Account records: retained while account is active and for compliance afterward.
• Transaction records: retained for tax, accounting, and fraud-prevention purposes.
• Support and security logs: retained according to operational security needs.

We use administrative, technical, and physical safeguards, including encrypted transport, access controls, and monitoring. No internet system is completely risk free.

Depending on your location, you may have rights to:

• Access, correct, or delete personal data.
• Request a portable copy of eligible data.
• Object to or restrict certain processing.
• Withdraw consent for optional processing.
• Appeal a rights decision where local law permits.

To exercise rights, contact support@replaysell.com.

ReplaySell is not intended for children under 16, and we do not knowingly collect data from children under 16.

We use essential cookies for security and login functionality, and optional cookies only based on your consent preferences. See our Cookie Policy for details.

We may update this policy from time to time. Material updates will be posted here with a revised date.

Questions or requests about privacy can be sent to:

• Email: support@replaysell.com