Draft for legal review. This text isn't final and isn't in effect yet.
This policy explains what Sellfmade collects when you use our apps and sellfmade.com, why, who helps us process it (including the AI we use for moderation), how long we keep it, and how to delete it. We don't sell your personal information.
What we collect
•
Account details: your mobile number and/or email address (to send sign-in codes), your name, handle, profile photo, bio, location if you add one, and your “Where I sell” links.
•
What you create: posts, photos, videos, polls, comments and answers, likes, saves, votes, the people and topics you follow, blocks and mutes, reports and appeals, and direct messages.
•
Devices and sessions: the device name and platform you sign in from, an approximate city worked out from your IP address (shown to you in Settings → Devices), when each session was last active, and push notification tokens if you turn notifications on.
•
Settings: your notification, privacy and appearance choices.
•
Technical data: IP addresses and request logs (to keep Sellfmade secure and limit abuse), crash reports and performance traces, and product events such as “post published” or “onboarding step completed”.
The app removes location data (EXIF) from photos before they're uploaded, and our servers remove it again. We don't ask for your date of birth, and we don't collect your contacts or precise location.
How we use it
•
To run Sellfmade: sign you in, show your posts and profile, deliver messages and notifications, and remember your settings.
•
To keep it safe: review reports, find spam, scams and abuse, enforce our Community Rules and Terms, and protect children.
•
To route questions to members who can answer them, and to suggest people and topics during sign-up.
•
To answer you when you contact support.
•
To understand how Sellfmade is used (counts such as weekly posters or time to a first answer) and to fix bugs.
Who can see what
Your profile, posts, comments and answers are public: anyone can see them, with or without an account, including through share links, link previews on other sites and apps, and search engines.
Direct messages are visible to the people in the conversation. Your phone number, email address, blocks, mutes, saved posts and settings are never shown on your profile or public pages.
Direct messages
Direct messages are encrypted in transit and at rest, but they are not end-to-end encrypted. That means Sellfmade's systems can technically read them, so don't send anything you wouldn't want a moderator to see if the conversation were reported.
Our moderators never browse inboxes. They see messages only when someone reports a message or conversation, and then only a snapshot of the reported message and the 20 messages before it, kept as evidence.
How we use AI
We use AI to help run Sellfmade behind the scenes. AI never posts, comments, reacts or messages, and it never removes content or suspends accounts on its own: it flags things for a person on our moderation team, who decides.
•
Public posts, comments and profiles are checked by AI models for spam, scams, harassment, hate, sexual content, threats, content involving minors, counterfeit or stolen goods and off-platform payment bait, and questions are sorted into topics so they reach people who can answer them. Text is scored by TypeSafe's Jev model and public images and video frames by an image classifier, both run for us by Cloudflare (Workers AI). Jev processes text with zero data retention.
•
Reported content, and the evidence attached to a report (including a reported message and the 20 before it), is processed the same way, together with the author's history on Sellfmade, to suggest an action and decide how urgently a moderator should look at it.
•
Emails you send to support may be read by Anthropic's Claude, which drafts a reply that a person on our team reviews before anything is sent.
•
AI tools we authorize (such as Anthropic's Claude) can read Sellfmade's public content through our API, with the same access a signed-out visitor has. Tools we give moderator access can also read the moderation queue and cases: reported content, report snapshots (including a reported message and the 20 before it), who reported it and what they wrote, moderators' notes, and the reported member's moderation history. They only add notes and suggestions for a human moderator, who decides.
Private messages between members are never sent to an AI model unless they are part of a report. Photos in direct messages are only checked against known child sexual abuse imagery (below), never by an AI model.
Child safety scanning
Every image on Sellfmade (post and comment photos, profile photos, photos in direct messages, and video preview frames) is checked against a database of known child sexual abuse imagery by Cloudflare's CSAM Scanning Tool. A match removes the content, suspends the account and is reported to the National Center for Missing & Exploited Children, as U.S. law requires. See our child safety standards.
Who we share it with
We share personal information only with companies that help us run Sellfmade, under contracts that limit what they can do with it:
•
Cloudflare: hosting, databases, file and video storage, email delivery, bot protection on web forms, AI models (Workers AI) and CSAM scanning
•
Twilio: sending sign-in codes by text message
•
Anthropic: drafting support replies, and moderation suggestions when Claude is one of the AI tools we authorize
•
Expo, Apple and Google: delivering push notifications
•
Sentry: crash reports and performance monitoring
We also share information when the law requires it (for example, reports to NCMEC or a valid legal request), to protect people from harm, or as part of a merger or sale of Sellfmade, in which case this policy continues to apply.
How long we keep it
•
Your account and content: until you delete them. When you delete your account, it disappears from view at once; after a 30-day grace period (when you can restore it), your identities, profile, photos, videos, sessions and push tokens are erased and your posts and comments are deleted. Messages you sent disappear from view at once, and after the grace period show as “Deleted” in the other person's conversation.
•
Content you delete: removed from view at once; its files are purged after 30 days.
•
Direct messages: until they're unsent, or until everyone in the conversation has deleted it (deleting a conversation removes it from your inbox only). If you delete your account, see above.
•
Notifications: 90 days.
•
Content a moderator removes: kept privately for 60 days so it can be restored if an appeal succeeds.
•
Report snapshots and moderation records: 2 years.
•
Evidence of child sexual abuse imagery: preserved for 1 year after it is reported, in a locked store only designated staff can access, as U.S. law requires.
•
Backups: our databases are backed up for up to 90 days, after which deleted data is gone from backups too.
Your choices and rights
•
See and change your profile in Settings → Edit profile.
•
Choose who can message you, turn read receipts off, block or mute anyone, and turn each kind of notification on or off.
•
Sign out other devices in Settings → Devices.
•
Delete your account in Settings → Delete account or at sellfmade.com/delete-account.
•
Ask for a copy of your data, or ask a question about it, by emailing support@sellfmade.com.
Depending on where you live, you may have more rights (such as to access, correct, delete or port your data, or to object to some processing). Email us and we'll respond within the time the law requires. We won't treat you differently for using them.
Security
Sign-in uses one-time codes, sessions can be ended from any device, and data is encrypted in transit. No system is perfectly secure, so please keep access to your phone number and email safe.
Age
Sellfmade is only for adults 18 and over. We don't knowingly collect information from anyone under 18. If an account appears to belong to a minor, our moderators can suspend it until its owner's age is confirmed, and close it if they're under 18.
Where we process data
Sellfmade is run from the United States, and our providers may process data in other countries. [Counsel: international transfer terms, if any, to be added.]
Changes and contact
If we change this policy in a way that matters, we'll tell you in the app before it takes effect. Questions or requests: support@sellfmade.com.