Privacy policy

• We collect what you give us: your email, what you post, and what you record in your tracker.
• Your tracker, expenses, visits and tax settings are private to you. We do not sell anything to anyone.
• Your posts, reviews and line reports are public, because that is the point of them.
• You can export everything or delete your account yourself, in Account → Your data.

Salesift is operated by the site owner, contactable at dylan.kough@gmail.com. For data-protection purposes that person is the data controller.

When you create an account

• Your email address, and a password (stored only as a secure hash by our authentication provider, never in readable form).
• If you sign in with Google: your name, email address and profile picture from Google. Nothing else, and we cannot read your Gmail, Drive or contacts.
• A username and display name, which are public.

When you use the app

• Your home base. A ZIP code or address you type, or your device location if you tap “use my current location”. We store the resulting point and your search radius. It is private to you. We never store a continuous location history.
• Searches and alerts. Saved searches and the sales already announced to you, so alerts do not repeat.
• Public contributions. Finds you post (photos, caption, tags, optional price and buy link), comments, reviews of companies and shops, line reports, sales you submit, and shops you add.
• Private records. Sales you logged visiting, items you bought and what you paid, resale listings, business expenses and mileage, and your tax-estimate settings (filing status and a rough figure for other income). Only you and the technical administrator can see these.
• Points. A record of points earned for contributions.
• Photos. Stored in our file storage. Photos on posts and reviews are public; photos on purchases, receipts and sale visits are private to you.
• Notifications. If you turn on push alerts, a browser subscription and your browser’s user-agent string.

When you connect a sales channel

If you link Discogs (or later eBay or Etsy), we store an access token, encrypted, and read your own sales: item titles, prices, fees, shipping and dates. We do not read buyer names or addresses, we never write anything to those accounts, and we delete the tokens when you disconnect.

Automatically

• A session cookie so you stay signed in, and a short-lived cookie during a sales-channel connection. No advertising cookies.
• Standard server logs from our hosting providers, including IP address, kept briefly for security and debugging.

We do not use advertising trackers, and we do not run third-party analytics that profile you.

We use your information to run the account you asked for (contract), to keep the service safe and working (legitimate interests), and, where the law requires it, with your consent, which you can withdraw: device location and push notifications are both opt-in and can be turned off in your browser or phone settings at any time.

We do not sell your data and we do not share it for advertising. We use these service providers:

• Supabase (United States): database, sign-in and photo storage.
• Vercel and Railway: hosting for the website and background jobs.
• Google Maps Platform: maps, and turning addresses into map points. Also Google Sign-In, if you use it.
• Mapbox: an alternative map provider, used only if configured.
• Resend: sending alert and account emails.
• Anthropic: categorising sale listings. Only the public listing text is sent, never your personal data.
• Discogs, eBay, Etsy: only if you choose to connect an account.
• Push notification services run by your browser maker (Apple, Google, Mozilla), if you turn push on.

We may also disclose information if the law requires it, or to protect people from harm.

Some sale listings come from EstateSales.NET and GarageSaleFinder.com, used with their written permission, refreshed at most once an hour, and limited to information those sites already display publicly. Photos are linked from the original site rather than copied, and every listing links back to its source. That information is about sales, not about you.

• Account data: until you delete your account.
• Public posts, reviews and line reports: until you delete them, or your account.
• Private tracker, expense and visit records: until you delete them, or your account.
• Sales-channel tokens: until you disconnect that channel.
• Server logs: a short period set by our hosting providers.

In the app, under Account → Your data, you can:

• Export everything we hold about you as a file.
• Delete your account, which removes your profile, posts, private records and points.

Depending on where you live, you may also have the right to correct information, object to certain uses, or complain to a data protection authority. Email dylan.kough@gmail.com and we will help. We do not charge for any of this, and we will not treat you differently for asking.

We do not sell or share personal information as those terms are used in California law.

Sign-in is handled by our authentication provider; we never see your password. Every database table is protected so that one member cannot read another member’s private records. Sales-channel tokens are encrypted before they are stored. No system is perfect, so please use a password you do not use elsewhere.

Our database and files are hosted in the United States. If you use the service from outside the United States, your information is transferred there.

Salesift is not for children. You must be at least 13 years old to create an account, and at least 16 where local law requires it. If you believe a child has created an account, email us and we will remove it.

If we change this policy in a way that matters, we will say so in the app before the change takes effect. The date at the top always shows the current version.

Questions, requests or complaints: dylan.kough@gmail.com. See also our terms of service.