Privacy Policy

01Scope and roles

This Policy applies to ResaleLift websites, accounts, dashboards, setup flows, automation, service communications, and support. It does not govern Poshmark, Stripe, or other third parties operating under their own policies.

For account and product data described here, ResaleLift determines the purposes and means of processing. When you direct ResaleLift to process marketplace content, you are responsible for having lawful authority to provide and use that information.

02Information we collect

• Account information: internal account identifier, email address, email-derived display label, password hash and salt when you choose email-and-password sign-in, session records, and account timestamps. ResaleLift does not require your first or last name and does not store your password in readable form.
• Google sign-in information: Google's stable account identifier and verified email address when you choose Continue with Google. ResaleLift does not receive your Google password or request access to Gmail, contacts, Drive, or other Google account content.
• Marketplace configuration: public closet username, selected workflows, schedule, limits, offer timing, and related settings.
• Marketplace session: encrypted authentication cookies and browser-session metadata needed for the cloud runner to perform the workflows you enable while your computer is off. ResaleLift does not store your marketplace password. You can revoke the session by disconnecting ResaleLift or signing out of active marketplace sessions.
• Approximate home internet location: city and ZIP code. ResaleLift does not need a street address for location matching.
• Service and device data: connection status, device name, platform, software version, last-seen time, home internet connection status, and security or diagnostic records.
• Automation and activity data: completed, queued, skipped, failed, or uncertain actions; listing or workflow references; timestamps; aggregate dashboard metrics; and user-selected controls.
• Billing data: Stripe customer, checkout, subscription, price, status, renewal, cancellation identifiers, selected cancellation reason, and any optional cancellation comment. Stripe processes full payment-card data; ResaleLift does not store full card numbers or security codes.
• Usage analytics: first-party session identifier, pages and sections viewed, button interactions, funnel events, page path, campaign parameters, and limited event metadata. Optional Google and Meta measurement is loaded only after the applicable consent.
• Communications: email delivery status, provider message identifier, support requests, feedback, and related correspondence.
• Legal consent: policy version, disclosure shown, acceptance type, acceptance time, and limited browser user-agent information.

03Sources of information

We collect information directly from you, your browser or device, Google when you choose Google sign-in, Stripe, connected service components, automation infrastructure, and communications with us. We may also receive publicly visible marketplace information that you direct the Service to use.

04How we use information

• Provide, personalize, schedule, monitor, secure, troubleshoot, and improve the Service.
• Create accounts, restore setup, display activity, enforce limits, and match the requested home internet location.
• Authenticate users, prevent fraud and abuse, investigate errors, and protect users and infrastructure.
• Create and manage trials, subscriptions, renewals, cancellations, refunds, and billing support.
• Send account, setup, security, service, billing, policy, and permitted marketing communications.
• Measure acquisition, activation, feature use, reliability, and subscription funnels using first-party analytics.
• Comply with law, legal process, enforce agreements, resolve disputes, and establish or defend legal claims.

05Legal bases where required

Where applicable law requires a legal basis, we process information to perform the contract you request, pursue legitimate interests such as security and product improvement, comply with legal obligations, and obtain consent where required. You may withdraw consent prospectively, but withdrawal does not affect prior lawful processing and may make some features unavailable.

06Analytics and advertising measurement

If you accept optional analytics, ResaleLift uses a separate Google Analytics 4 data stream and Google Tag Manager container to measure the registration, trial, checkout, and payment funnel. If you accept advertising measurement, ResaleLift sends matching browser and server events to the Meta Pixel and Conversions API. Browser and server copies use the same event name and event identifier so Meta can deduplicate them.

We may retain first- and last-touch campaign parameters, Meta click and browser identifiers, landing page path, and timestamp with your ResaleLift profile after consent. GA4 never receives your email address, name, form contents, payment-card data, Meta click identifiers, or page query string. Trial events are created only after Stripe confirms trial activation; purchase events are created only after Stripe confirms a positive payment. Renewals, cancellations, and refunds are recorded separately.

You can reject optional measurement or reopen Cookie settings at any time. Withdrawal applies prospectively. Essential authentication, security, billing, and service records continue to operate without analytics or advertising consent.

07How information is disclosed

We do not sell personal information for money. With optional consent, we disclose limited measurement identifiers and funnel events to Google and Meta; some laws may define this advertising measurement as sharing. Cookie settings let you reject or withdraw that consent. We do not publish your private account data.

• Service providers that perform hosting, database, authentication, payment, email, residential-network, security, diagnostics, or customer-support functions under contractual or operational restrictions.
• Professional advisers, auditors, insurers, and legal authorities when reasonably necessary for compliance, safety, rights protection, or legal claims.
• A buyer, investor, lender, successor, or adviser in connection with a proposed or completed financing, merger, acquisition, reorganization, insolvency, or sale of all or part of the business, subject to appropriate safeguards.
• Other parties at your direction or with your consent.

08Key provider categories

Cloudflare provides hosting, network, database, and session infrastructure; Google provides optional account authentication and consent-gated GA4 and Tag Manager measurement; Meta provides consent-gated Pixel and Conversions API measurement; Stripe provides payment and subscription processing; an email provider may deliver account messages; and home internet or automation infrastructure may process connection and instruction data necessary to perform requested workflows.

Providers may process data in the United States and other countries. Their independent services may also be subject to their own terms and privacy notices.

09Cookies and local storage

ResaleLift uses essential cookies or browser storage for authentication, security, preferences, and session continuity. With your optional consent, Google and Meta tags may use analytics or advertising cookies and ResaleLift stores your consent choice, measurement session identifier, and campaign attribution. Rejecting optional storage does not prevent sign-in or core product features.

10Retention

We retain personal information only as reasonably necessary for the purposes described here, including providing the Service, maintaining account and billing records, measuring reliability, resolving disputes, enforcing agreements, meeting tax or legal obligations, and preventing abuse.

Retention depends on data type and context. Account and configuration data generally remain while the account is active and for a limited period afterward; billing, consent, security, and transaction records may be retained longer when needed for legal, audit, fraud-prevention, or dispute purposes. Data may persist temporarily in backups before deletion cycles complete.

11Security

We use administrative, technical, and organizational safeguards designed to protect information, including salted password hashing, authenticated access, AES-GCM encryption for stored marketplace sessions, account-bound encryption context, scoped storage, encrypted transport, restricted service credentials, mutation idempotency, and security monitoring. No internet service can guarantee absolute security. You are responsible for choosing a unique password and securing your email and marketplace accounts.

12Your choices

We may verify your identity and authority before acting. We may retain or deny deletion of information when law permits or requires, including for security, fraud prevention, billing, tax, consent evidence, legal claims, and enforcement.

• Update configuration and certain profile information in the dashboard or setup flow.
• Manage or cancel a subscription through the Stripe billing portal linked from your ResaleLift account.
• Opt out of marketing email using the message link, while continuing to receive transactional or legal messages.
• Request access, correction, deletion, or a portable copy by emailing the privacy contact below.
• Ask questions about a specific processing activity or object where applicable law provides that right.

13United States privacy rights

Depending on your state and whether applicable thresholds are met, you may have rights to know, access, correct, delete, obtain a copy, opt out of certain targeted-advertising disclosures, or appeal a denied request. ResaleLift does not sell personal information for money, and optional Google and Meta measurement remains off unless you consent.

We will not discriminate against you for exercising an applicable privacy right. Authorized agents must provide proof of authority, and we may still verify the request directly with the account holder.

14International transfers

If you access the Service outside the United States, information may be transferred to and processed in the United States or other countries whose laws differ from those where you live. Where required, we use legally recognized transfer mechanisms or rely on another lawful basis.

15Children

The Service is intended for adults and is not directed to anyone under 18. We do not knowingly collect personal information from children. If you believe a child provided information, contact us so we can investigate and delete it where appropriate.

16Third-party links and marketplaces

The Service may link to or interoperate with third parties. ResaleLift does not control their privacy, security, content, or practices. Review their notices before giving them information. This Policy does not alter any rights those parties have under their own agreements with you.

17Policy changes

We may update this Policy as the Service or law changes. The date and version above identify the current text. We will provide reasonable notice of material changes and seek renewed consent when required.

18Privacy contact

Send privacy requests to support@resalelift.com. Include the email used for ResaleLift, the request, and your state or country. Do not send passwords, authentication codes, or payment-card information.