Privacy Policy
Last updated: 01.01.2026
1. General information
This Privacy Policy describes the principles of processing of personal data of users of the Selliqo service available at https://selliqo.app ("Service").
The controller of personal data is:
CodeM8 sp. z o.o.
ul. Stanisławowska 47
54-611 Wrocław
Poland
NIP: 8943275542
REGON: 543502149
KRS: 0001211581
hereinafter referred to as "Controller".
The Controller processes personal data in accordance with:
- Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR)
- the personal data protection act
- other applicable laws
By using the Service, the User confirms that they have read this Privacy Policy.
2. Scope of data processed
2.1 Data provided directly by the User
The Controller may process the following personal data:
- email address
- password (stored only in encrypted/hashed form)
- billing and identification data related to the subscription
- Vinted platform username (if the User chooses to integrate)
2.2 Data processed in connection with payments
Payments are processed by Stripe Payments Europe Ltd. The Controller does not store payment card data.
Stripe may process, among other things:
- first and last name
- email address
- payment data
in accordance with its privacy policy.
2.3 Data processed in connection with Vinted platform integration
If the User voluntarily uses features that integrate the Service with the Vinted platform, the following data may be processed:
- Vinted user identifier
- Vinted username
- listing data (e.g. title, price, status, statistics)
- item photos sent for AI image generation
- session data required for automated operations
⚠️ The Controller informs that the Service is not officially affiliated with the Vinted platform, and the User uses the integration at their own responsibility, in accordance with that platform's terms.
2.4 Technical data
When using the Service, the following may be processed:
- IP address
- browser and device information
- system and operational logs
- authorisation tokens (e.g. JWT)
- data on use of the Service's features
3. Purposes of data processing
Personal data is processed for the purpose of:
- providing services by electronic means
- maintaining and operating the User's Account
- fulfilling subscriptions and payments
- ensuring the security of the Service
- communicating with the User
- handling reports and enquiries
- analysing and developing the Service's functionality
- providing automation features at the User's request
- complying with the Controller's legal obligations
4. Legal basis for processing
Personal data is processed on the basis of:
- Art. 6(1)(b) GDPR – performance of a contract
- Art. 6(1)(c) GDPR – legal obligations
- Art. 6(1)(f) GDPR – legitimate interest of the Controller
- Art. 6(1)(a) GDPR – User consent (where required)
5. Data recipients
Personal data may be disclosed to:
- Stripe – payment processing
- fal.ai – AI image generation (item photos)
- IT and hosting infrastructure providers
- public authorities where required by law
The Controller does not sell personal data or disclose it to third parties for marketing purposes.
6. Chrome extension
The Selliqo browser extension may require certain technical permissions, in particular:
- access to selected domains
- communication with the Service
- performing automated operations at the User's request
All actions are performed:
- only when the User is logged in
- on their behalf
- within the scope they have initiated
7. Data retention period
Personal data is processed:
- for the duration of the contract
- after its termination – for the period required by law
- until consent is withdrawn, where processing is based on consent
8. User rights
The User has the right to:
- access their data
- rectification
- erasure ("right to be forgotten")
- restriction of processing
- data portability
- object
- withdraw consent at any time
- lodge a complaint with the President of the Personal Data Protection Office
9. Data security
The Controller applies appropriate technical and organisational measures to protect personal data.
However, it should be remembered that no method of transmitting data over the Internet provides complete security.
10. Cookies
The Service uses cookies and similar technologies for:
- technical purposes
- functional purposes
- analytical purposes
For more information, see the Cookie Policy.
11. Changes to the Privacy Policy
The Controller reserves the right to change this Privacy Policy. Users will be informed of material changes by email or via the Service.
12. Contact
📍 ul. Stanisławowska 47, 54-611 Wrocław, Poland
13. Effective date
This Privacy Policy is effective as of 01.01.2026
14. Archive
Previous versions of the privacy policy are available in the document archive