Who is responsible
The data controller for SelfList is REXOH LLC, Casper, Wyoming, United States. Privacy questions: support@selflist.io.
What we store, and why
- Your account: name, e-mail, a hashed password, your plan, the time of your last sign-in and your acceptance of the Terms — to run your account.
- Your team: the name, e-mail and level of each team member you invite, and which actions each one took — so that you can see who did what.
- Your store connections: your store’s address, the credentials you approved (encrypted) and the details your store reports, such as its name and currency — to create and update products in your store.
- Your products: supplier product data (titles, images, variants, prices, stock), the products we create in your stores, price and stock history and every change we make — to import, publish and monitor.
- Customer reviews, only if you switch them on: review text, star rating and date from the supplier’s page, with the reviewer’s name masked. No reviewer pictures are kept.
- Your API token: only its hash and last four characters, and when a device last used it.
- The Chrome extension (SelfList 1-Click Import), only when you press its button: it reads the product page you are on — its address, title, pictures, options, prices, the postage it shows and, if you switched reviews on, the public reviews with the reviewers’ names masked in your browser — and sends that only to your SelfList account at app.selflist.io. On your computer it keeps only its connection token and your account’s name. It does not read other pages, your browsing history or what you type, and nothing runs until you press its button or start a Browser Check.
- Google, only if you continue with Google: Google tells us your name, your e-mail address and your Google account number, to sign you in and to recognise you next time. We never receive your Google password, and we ask Google for nothing else.
- Telegram, only if you link it: your Telegram chat ID and the links and messages you send to the SelfList bot — to import and list the products you ask for.
- Your own AI key, if you give one: encrypted; used only for your requests.
- Payments, if you pay for a plan: your plan, the customer and subscription numbers Stripe gives, and your subscription’s status and dates. Your card is entered on Stripe’s own page and goes only to Stripe; we never receive it.
- Orders, only if you switch them on: for each paid order, its number, items, total, country and city, the AliExpress order number and the tracking number. Your buyer’s name, address and phone are read from your store when the order is placed and sent to your own AliExpress account; we do not keep them.
- Affiliate partners, if you join: your link name, how we pay you (a PayPal e-mail; bank details only by e-mail, never stored), the clicks on your link counted per day (no visitor’s address is kept), the accounts that signed up through it and their commissions and payments — to run the programme and pay you.
- Technical logs: request timing and status codes without payloads, and sign-in attempts per IP for one hour, to slow down attacks.
We use your buyers’ data only on your behalf, to fulfil your orders.
Where it goes
Product data is sent to your stores to create and update products, and to AI providers to write titles and descriptions. If you use order fulfilment, the order’s items and your buyer’s delivery address go to your own AliExpress account. When you pay for a plan, your e-mail, your name and our account number for you go to Stripe, our payment provider; your card, billing address and tax ID, if you give them, are entered on Stripe’s own pages. Stripe processes them under its own privacy policy. If you created your account through a partner’s link, that partner sees that an account signed up and paid, with its e-mail masked (for example a***@g***.com) and its plan — never your details. We do not sell data and do not use it for advertising. The Service is hosted by Hostinger. This website loads its fonts from Google Fonts, which means your browser contacts Google’s servers.
Cookies and your browser
The dashboard uses a sign-in cookie. This website remembers your colour theme in your own browser (local storage); it is never sent to us. We use no tracking or advertising cookies. If you arrive through a partner’s link, the dashboard sets one cookie (slf_via) that remembers that partner for 60 days, so that the partner is credited if you create an account. The payment pages are Stripe’s own pages (checkout.stripe.com, billing.stripe.com) and use Stripe’s cookies under Stripe’s policy. Our Home page shows a short video from YouTube: until you press play, only its preview picture is loaded from YouTube’s image server (no cookies); when you press play, the video is loaded from youtube-nocookie.com and YouTube’s privacy policy applies.
How long we keep it
Account and product data are kept while your account is open. Pictures are removed from our server a few days after a product reaches your store. Order rows are deleted a year after the order ends.
Your rights
To export or delete your data, e-mail support@selflist.io from your account address; we do it within 30 days, usually much sooner. Disconnecting a store deletes our copy of its credentials at once. You can also complain to your data-protection authority.
Contact
REXOH LLC
5830 E 2nd St, Ste 7000 #30559
Casper, WY 82609
United States
E-mail: support@selflist.io