Privacy Policy

Information we collect

SafeBay mobile apps

The SafeBay apps for Android, iPhone and iPad are for eBay sellers with a SafeBay account. They show the same account as safebay.store and send what they collect only to SafeBay, and to the services named below when you use the feature that needs them.

What the apps collect

• Your sign-in: your email and password, your Google account through Google's own sign-in page in the browser, your eBay account through eBay's own sign-in page (SafeBay then reads your eBay user ID and the e-mail address of your eBay account, and makes that your SafeBay e-mail when it creates your account), or, on iPhone and iPad, Sign in with Apple. With Apple, SafeBay receives an identifier Apple makes for SafeBay, your email address or a private relay address Apple forwards to you (your choice), and your name the first time. The app keeps a sign-in token on the device, encrypted.
• A description of the device when you sign in: a random installation ID the app creates, the device name, model, operating system version, app version, language and time zone. It keeps one sign-in per device, which signing out of that device ends.
• Photos you take or choose for a listing, a logo or sample photo you add to Photo Studio, and screenshots or photos you attach to a buyer report. They are uploaded to SafeBay and, for a listing, to eBay.
• Text read from a model plate or part label you scan. The camera image stays on the device; only the text is sent.
• What you type or change in the app: listings, replies to buyers, reports, blocks and settings.

On the device

• Reading text from a model plate or part label runs on the device (Google ML Kit on Android, Apple's Vision on iPhone and iPad). The Android models come from Google Play services, which handles its own data under Google's privacy policy.
• The camera is used only while you take photos or scan a label. Notifications are asked for only when you turn alerts on.

Shared to provide the feature

• eBay: the listings, photos, messages and other changes you make for your eBay store, through eBay's official APIs.
• Anthropic: with AI features turned on, the photos and text an AI feature works on (a listing to fill or check, a buyer conversation to answer, a report to review). The app asks before turning them on, and you can turn them off in Account.
• Photoroom: a photo you clean up or remove the background from goes through SafeBay to Photoroom, and the result comes back.
• ScrapeBadger: part numbers and search words for eBay market data, and a link to a listing photo when you identify an item from its photos (through Google Lens).
• Google: your Google sign-in, when you choose Continue with Google. On Android, Firebase Cloud Messaging delivers notifications, including what they say (for example an item, a buyer's eBay ID, or the start of a message).
• Apple: your Apple sign-in, when you choose Sign in with Apple, and purchases made in the iPhone or iPad app. Apple's push service delivers notifications on those devices, including what they say.
• AI assistants you connect: when you connect Claude, ChatGPT or another assistant to SafeBay (at safebay.store/mcp) and approve it, it receives what its requests ask for from your store (orders, listings, buyer messages, returns and cases, other sellers' reports on a buyer), and it can reply to a buyer, change a quantity or relist only through those requests. The assistant's own provider handles that data under its policy. You can disconnect an assistant on your profile at any time.

What the apps don't do

• No ads, no advertising ID, and no analytics or tracking SDKs.
• No location, contacts or other files on the device.
• Nothing is sold, or shared for advertising.

Deleting your SafeBay account

In the app, open Account, then Delete account (also on safebay.store, in your profile). Your account, its sign-ins, its eBay connection and the photos uploaded for drafts and Photo Studio are deleted, a Sign in with Apple is revoked at Apple, and a paid plan is cancelled. Billing records are kept as the law requires. You can also email support@safebay.store to ask for deletion.

SafeBay TV (TV board and the TV apps)

The TV board shows an eBay seller's day on a screen in their packing room: at safebay.store/tv in a TV's web browser, or in the SafeBay TV app on Apple TV, Roku, Google TV or Amazon Fire TV, and on Samsung TVs once that app is released. A TV shows a store's board only after someone signed in to that store's SafeBay account enters the code the TV shows.

What the TV keeps and sends

• A random token that identifies this TV to SafeBay, kept in the browser's cookie or in the app's storage on the TV. It only reads the board; it is not your sign-in.
• If you sign in on the TV instead of entering the code, your email and password (and your two-step code, if you use one) are sent once to SafeBay to check them. The TV keeps only its token, never your password.
• In the apps, the device's model name (for example "Apple TV 4K", "Roku Streaming Stick", "Samsung QN65Q80B", "Google Chromecast" or "Amazon Fire TV (AFTKA)"), shown as the TV's name in your list of TVs unless you name it yourself.
• When the board was last loaded, kept per TV.
• The TV's own options (sort order, groups by ship day, whether it shows the sales amount and prices), kept per TV on SafeBay.
• The kind of TV, read from what its browser or app reports, and how long its board is on screen each day, so SafeBay can see how the board is used. Removing a TV keeps those daily totals under your account; deleting your account deletes them. The same daily total is kept when you open the board in your own signed-in browser.
• Which orders are packed and waiting for their label, with when and where each was marked (the TV's name, a phone link or the SafeBay app). SafeBay deletes these marks once the order has shipped.

Packing from a phone

"Pack from your phone" in a TV's menu shows a QR code and a short link, so people who pack without a SafeBay account can mark orders packed. Whoever holds the link sees what that TV shows in "Next to pack": the orders' photos, SKUs, titles and ship-by dates, buyers' eBay IDs and ship-to city and state, and prices unless the TV hides them. The link can mark orders packed or not packed and do nothing else. It stops working at midnight in the store's time zone or after 12 hours, whichever comes first, and as soon as the TV is removed or signed out. SafeBay keeps only a fingerprint (hash) of the link, not the link itself. Share it only with people you would let read the TV.

What the board shows

• Your orders to ship with their photos, SKUs and ship-by dates, your sales, listings, returns and message counts.
• For each order, the buyer's eBay ID and the ship-to city and state. Never the buyer's name or street address.
• Short lines and an evening summary written by AI: SafeBay sends Anthropic the store's counts and sales figures and item titles, never buyer data.

Removing a TV

Remove a TV at safebay.store/tv/link, press * on the Roku remote and confirm, press Return (Samsung) or Back (Google TV, Fire TV) and choose Sign out of this TV, or press Play/Pause on the Apple TV remote and choose Sign Out of This TV. Its token stops working and the TV goes back to showing a code. Deleting your SafeBay account removes all its TVs. The TV apps have no ads, no analytics and no tracking.

How we use your information

Information sharing and disclosure

Services that process data for SafeBay

These companies receive the data below so SafeBay can provide the feature that needs it.

• eBay: what you do for your store through eBay's official APIs: listings, photos, messages and blocks.
• Stripe: your name, email and card details for card payments and subscriptions.
• Apple: Sign in with Apple, purchases in the iPhone and iPad app, and notifications on those devices.
• Google: Google sign-in; Firebase Cloud Messaging for Android notifications; and Google Analytics on the website, which records pages visited, device and browser details, approximate location, whether you are signed in, sign-ups and clicks through to app stores. Addresses that hold a private link or code are removed first.
• Reddit: on public pages you visit while signed out, the Reddit Pixel tells Reddit which page you opened, your browser details and IP address, and whether you clicked through to the Chrome Web Store, so we can measure our ads on Reddit; on the page after you create an account it reports that a sign-up happened. When you create an account, our server also tells Reddit about that sign-up directly, with your email address in hashed form (a one-way code; Reddit never receives the address itself), your IP address, your browser details and the Reddit Pixel's cookie ID, so Reddit can match it to an ad you clicked and count it once. The Pixel never loads on buyer pages or pages whose address holds a private link or code, or while you are signed in otherwise.
• Meta (Facebook and Instagram): on public pages you visit while signed out, the Meta Pixel tells Meta which page you opened, your browser details and IP address, and whether you clicked through to the Chrome Web Store, so we can measure our ads on Facebook and Instagram; on the page after you create an account it reports that a sign-up happened. When you create an account, our server also tells Meta about that sign-up directly, with your email address in hashed form (a one-way code; Meta never receives the address itself), your IP address, your browser details and the Meta Pixel's cookie IDs, so Meta can match it to an ad you clicked and count it once. The Pixel never loads on buyer pages or pages whose address holds a private link or code, or while you are signed in otherwise, and it does not read the buttons or forms on our pages.
• Anthropic: the text and photos an AI feature works on, such as a listing, a buyer's messages with their order details, a feedback entry or a report. When an order's shipping address may be a parcel forwarder (many buyers ship there, or it carries a forwarding account code), the street address, city, postcode and country, without anyone's name, go to Anthropic once, which searches the web for that address to tell whether it is one.
• Photoroom: photos you clean up or remove the background from.
• ScrapeBadger: part numbers and search words for eBay market data, and a link to a listing photo when you identify an item from its photos (through Google Lens).
• Brevo: your email address, name, store name, plan, whether eBay is connected, and your sign-up, last sign-in and trial-end dates, to send our emails and newsletters.
• Cloudflare: every request to safebay.store passes through it, with your IP address and browser details. It also runs the Turnstile check on sign-in and sign-up forms.
• SMS Gate: the phone number and text of each text message SafeBay sends, to you or, under rules you set or in conversations you start, to a buyer.
• OpenStreetMap (Nominatim): an order's shipping address, street included, to place the order on your map.
• Your browser's push service: browser notifications you turn on, including what they say.

Data security

Encryption

All data transmitted using industry-standard SSL/TLS encryption

Secure storage

Data stored on secure servers with access controls

Regular audits

Regular security assessments and updates

Your rights and choices

Access and portability

Request a copy of your personal data in a portable format

Correction and updates

Update or correct your account information at any time

Deletion

Request deletion of your account and associated data, or delete it yourself

Opt-out

Choose which community list your Companion uses on your profile page, turn AI features off in the apps' Account screen, and turn email and text notifications off in your settings. Newsletters carry an unsubscribe link.

Reported as a buyer and believe the report is wrong? Submit a data erasure request.

Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make changes, we will update the "Last updated" date at the top of this policy, and we will notify users of material changes via email or prominent notice on our platform.