Vendsta, GDPR and Privacy

To exercise your rights under GDPR, please fill in our GDPR rights form.

For full details of how we handle your data, your eBay account's data and your buyers' data, please read our Privacy Policy.

What are your details?

We are a United Kingdom based business trading as Vendsta, formed in 2017.

What are the contract terms?

There's no contract during a free trial. Monthly subscriptions are on a monthly contract and annual subscriptions on a 12-month contract. You can cancel either at any time, and keep access until the end of the period you've paid for. See our Terms of Service.

What personal data is held by Vendsta?

Your name and email address, and those of any team members you invite.
Your eBay accounts' order, buyer, message and listing data (most of what you see in your eBay dashboard).

Who controls my buyers' data?

You do. For your buyers' data, you are the controller and Vendsta is your processor. Our Terms of Service include the data processing terms.

How can I exercise my GDPR rights, such as asking for my data to be deleted?

Where is data stored and processed?

All of Vendsta's data is stored on servers in Germany, with Hetzner. Some of our service providers, listed below, may process data in other countries, with the safeguards data protection law requires.

How do you handle deleting data?

If your trial or subscription ends and you haven't deleted your account, all of its eBay data is deleted automatically 30 days later. You can also remove an eBay account and all of its data at any time in Settings.

If a buyer closes their eBay account, eBay tells us and we delete that buyer's data.

You can also contact us at any time to have your data deleted.

What measures do you have in place to protect data?

All connections use HTTPS, eBay access tokens are encrypted, and two-factor authentication is available for your login. We also encourage you to use a long, strong password for your Vendsta account.

What 3rd parties do you share data with?

We never sell data. Personal data may be processed by our staff or by these service providers:

Hetzner (Servers)
Cloudflare (Website security and delivery)
Stripe (Payment)
SparkPost (Sending emails from the app)
Bugsnag (Error reporting)
tawk.to (Live Chat)
Umami (Website statistics, self-hosted, no cookies)
postcodes.io and Google Maps (Map coordinates from buyers' postcodes only)

What access controls do you have in place?

Vendsta is a very small business run by one or two people, so very few people can access any data. On top of that, we have a range of measures in place to make sure access is appropriate.