Legal

Privacy policy

Effective 9 August 2026

This notice explains how the operator of attosell collects, uses, shares, and protects personal information when you use the service.

Information we collect

We collect information you provide to attosell, including your display name, email address, password in hashed form, profile details, card inventory, card images, reviewed listing content, pricing records, and customer quote details.

We also collect technical and usage information needed to operate and secure the service, such as session data, request information, error records, scan usage, billing status, and records of actions taken in your workspace.

Connected services

If you connect eBay, we store the permissions granted to attosell, an encrypted refresh token, selected inventory-location and business-policy identifiers, and the offer and listing identifiers created for your cards. We never receive or store your eBay password.

Payments and subscription management are handled by Stripe. We receive billing status, plan, customer and subscription identifiers, and transaction-related information needed to provide paid access, but we do not store your full payment-card details.

How we use information

We use personal information only where needed to provide, protect, maintain, and improve attosell. This includes:

  • creating and securing your account and workspace;
  • identifying cards, enriching catalogue data, calculating prices, and retaining listing images;
  • preparing exports and publishing listings after you confirm the action;
  • processing subscriptions, enforcing scan allowances, and providing billing support;
  • delivering service emails and quote notifications; and
  • preventing abuse, diagnosing faults, and meeting legal obligations.

Where UK data-protection law applies, we process information because it is necessary to provide the service you request, because we have a legitimate interest in operating and securing attosell, because we must meet a legal obligation, or because you have given consent. You can withdraw consent at any time where consent is the basis for processing.

Sharing and international transfers

We do not sell your personal information. We share it only where needed with service providers that support hosting, storage, payments, transactional email, card recognition, catalogue enrichment, pricing, and connected marketplace functions, or where disclosure is required by law.

Some providers may process information outside the United Kingdom. Where required, we rely on appropriate contractual and legal safeguards for those transfers.

Retention

We retain account and workspace records while they are needed to provide attosell, maintain accurate inventory and listing history, resolve disputes, prevent fraud, and meet legal obligations. Retention periods vary according to the type of record and why it is held.

Disconnecting eBay removes the stored refresh token and prevents further eBay API access. Card, export, billing, and successful listing records may remain until they are separately deleted or no longer required.

Cookies and security

attosell uses essential cookies and similar local storage to keep you signed in, protect authenticated actions, and remember interface preferences such as your theme. These technologies are required for the service to work and are not used to sell advertising profiles.

We use access controls, encrypted transport, server-side sessions, password hashing, and encrypted storage for eBay refresh tokens. No internet service can guarantee absolute security, so please protect your credentials and report suspected misuse promptly.

Your rights

Depending on where you live, you may have rights to access, correct, delete, restrict, or object to the use of your personal information, and to request a portable copy. These rights can be limited where information must be retained for legal, security, or record-keeping reasons.

You may also complain to the UK Information Commissioner’s Office or your local data-protection authority if you believe your rights have not been respected.

Children, questions, and changes

attosell is not directed to children under 13, and we do not knowingly collect their personal information. Users under 18 should use the service only with permission from a parent or legal guardian.

Privacy questions and rights requests can be sent through the support or account-contact channel used to provide your attosell access. We may update this notice as the service or law changes. Material updates will appear on this page with a revised effective date.