Privacy policy

OnSell (“OnSell”, “we”) is a software platform operated from Romania by EPRISM SOLUTIONS SRL, with its registered office at Str. Traian Vuia nr. 38, Mun. Buzău, 120262, registered with the Trade Register under number J10/94/2017, VAT/tax identification number RO36994199. For the purposes of Regulation (EU) 2016/679, the controller of the personal data described in this policy is that company, which can be reached at contact@onsell.ro.

For any question about your personal data, including to exercise the rights described in section 11, write to us at contact@onsell.ro.

The distinction below determines who is answerable for what, so it is worth reading before the rest of the document.

For your OnSell account we are the controller. We decide what data is necessary for you to have an account and to enter a shop: your email address, your name, your sign-in sessions.

For the data inside your shop we are the processor. The orders, customers, products and invoices you upload or synchronise into OnSell remain yours. You are the controller of that data, you decide the purpose of the processing, and we process it only on your instructions and only as far as is necessary to provide the service. The terms of that processing are set out in our data processing agreement, which is published, forms part of the contract and applies from the moment you use the platform — you do not have to request it. If you need a signed copy, write to us at contact@onsell.ro.

For the central account on onsell.ro we process:

We do not collect special categories of data (health, beliefs, biometric data) and we do not use your data for profiling or for automated decisions with legal effect.

• Performance of the contract (Art. 6(1)(b) GDPR) — for creating the account, signing in, accessing shops and providing the service.
• Legitimate interest (Art. 6(1)(f) GDPR) — for the security of the platform: the access log, the anti-bot check and the messages that tell you an authentication method has changed.
• Legal obligation (Art. 6(1)(c) GDPR) — for retaining financial records, where applicable.
• Consent (Art. 6(1)(a) GDPR) — only if you choose to connect a Google account or an external integration. You can withdraw it at any time by disconnecting that service.

The “Continue with Google” button is optional: you can use OnSell with nothing but an email address and a password. If you do use it, we send you to Google, and Google returns three pieces of information — your permanent identifier, your email address and your profile name — after you have approved it.

We request only the openid, email and profile scopes. We neither ask for nor receive access to the contents of your Google account, and the request is made in a way that leaves us unable to contact Google on your behalf afterwards: we store no refresh token.

The link is made on the permanent identifier, not on the email address. That means you can change your Gmail address without losing your account, and an address Google has recycled cannot take over somebody else's. Your primary OnSell address is never overwritten by Google.

The information we receive from Google is used only to create your OnSell account, to sign you in and to show your name to colleagues in the shops you have access to. We do not sell it, do not use it for advertising, do not use it to train models and do not pass it to anyone outside the providers listed in section 7. When you disconnect the Google account, or when the OnSell account is deleted, the link and the data attached to it are deleted.

You can disconnect Google at any time from your account page. If it is your only authentication method, we will first ask you to set a password, so that you are not locked out.

OnSell uses no advertising, analytics or tracking cookies. There is no Google Analytics, there are no marketing pixels, and we sell data to nobody. That is why you will not see a cookie consent banner: every cookie we set is strictly necessary for the site to work, and the law does not require consent for those.

All three are HttpOnly — JavaScript cannot read them — and are scoped strictly to the onsell.ro domain, so they are not sent to individual shops. You can delete them from your browser settings at any time; the effect is that you are signed out.

On the authentication pages we load Cloudflare Turnstile, an anti-bot service which may set its own technical cookies. Turnstile was chosen precisely because it does not track users across sites.

We do not sell or rent personal data. We share it only with the providers we need in order for the service to work, each of them contractually bound to process it only for us:

The integrations you configure yourself — eMAG, Trendyol, Shopify, Altex, Oblio, SmartBill, FGO, FAN Courier, Cargus, DPD, Sameday and others — receive the data needed for the operation you ask for (for example, the recipient's address in order to generate a shipping label). Those transfers happen because you connected that service, and the processing that follows is governed by each provider's own privacy policy.

We may also disclose data where we are legally required to, at the request of a competent authority.

The sections above concern your account. This one concerns your customers' data, which we receive from the channels you connect — Shopify, eMAG, Trendyol, Altex and the rest. For that data you are the controller, not us: we process it only in order to handle your orders, on the terms set out in the data processing agreement.

When you connect a Shopify store through the OnSell app on the Shopify App Store, we receive the following about each customer:

We request from Shopify strictly the permissions the platform needs. We do not request permission to read the full order history (read_all_orders), so we see only orders from the last 60 days — the limit Shopify applies by default to any app.

Access and erasure requests sent by Shopify. Shopify forwards three kinds of request to us automatically, and we act on them without you having to write to us:

• Access request — when a customer asks you for their data, we record the request and flag it to you, with the customer identified, so that you can answer within the deadline you have. You see their data in the platform; we do not answer in your place and we send them nothing directly. The contact details in the request stay in the log for at most 45 days, after which they are automatically erased from it.
• Customer erasure request — we delete the customer record taken from Shopify and strip the name, email address, phone number and shipping address from our copies of their orders in that same mirror.
• Shop erasure — Shopify sends this 48 hours after you uninstall the app, and it triggers the same erasure for every customer of that shop.

We acknowledge receipt immediately and carry out the erasure within minutes; if something fails, the request is retried until it succeeds rather than abandoned.

What we do not delete, and why. The orders and customer records inside OnSell — the ones you see under Orders and Customers — are not deleted by these requests. They are your commercial record and the basis of the invoices you have issued, which tax law obliges you to keep. You are their controller: you can delete them from the platform at any time, and we delete them at your request and when the contract ends. What the Shopify request erases is the copy we hold of the Shopify store.

OnSell's servers, databases and files are hosted in the European Union, in the DigitalOcean data centre in Frankfurt, Germany. Each shop has its own database and its own storage, isolated from the others.

Some of the providers listed above are companies outside the EU. Transfers to them are made on the basis of the standard contractual clauses adopted by the European Commission or of an adequacy decision, as applicable.

• Account data — for as long as the account exists, plus the period needed to defend a legal claim.
• Sign-in sessions — 30 days at most, or until you sign out.
• Links sent by email — 24 hours for address confirmation, one hour for a password reset, 7 days for an invitation. After that they can no longer be used.
• Security log — 12 months from the event, then deleted.
• The data in your shop — for as long as the contract is active. On termination we delete it or return it to you, as agreed. Records of fiscal relevance are kept for the period the law requires.
• Your customers' data — for as long as the contract is active, or until you delete it. Sooner than that when a channel sends us an erasure request: the copy in the channel mirror is deleted within minutes of the request arriving.
• Messages received from channels — a shop sends us every order and every change as a message that also contains the customer's data. The contents of the message are deleted as soon as it has been processed successfully, leaving only the record that it arrived, for 14 days. There are two exceptions: the message carrying an access request, whose contents are kept until those 14 days expire, and a message that could not be processed, which is kept until it succeeds — otherwise the very erasure it was carrying would be lost.
• The access-request log — we keep the fact that a request was received and resolved, but the requester's contact details are erased from the log after 45 days.
• The record of already-processed messages — 7 days. It holds only the message identifier, not its content, and it stops the same order being processed twice.

Under the GDPR you have the right:

• to find out what data we hold about you and to receive a copy of it;
• to ask for inaccurate data to be corrected;
• to ask for data to be erased, where we no longer have a basis to keep it;
• to ask for processing to be restricted, or to object to processing based on legitimate interest;
• to receive your data in a structured, commonly used, machine-readable format;
• to withdraw consent, where the processing is based on it, without affecting processing already carried out.

You can change your name, username, profile picture, email address and password yourself from your account page. A change of email address takes effect only once you have confirmed the new address. For anything else, write to us at contact@onsell.ro. We answer within one month of receiving the request.

If you are a customer of a shop that uses OnSell and you want to exercise your rights over your data as a shopper, address the merchant directly: they are the controller of that data. If you write to us, we will point you to the right person.

You also have the right to lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP), B-dul G-ral. Gheorghe Magheru 28-30, Bucharest, dataprotection.ro, or with the supervisory authority of the EU country where you live.

Traffic is encrypted with TLS. Passwords are stored as bcrypt hashes, and email tokens and sessions are likewise kept as hashes, so a copy of the database cannot be used to get into accounts. Each shop runs on its own infrastructure, with a separate database and separate storage.

We email you when a password is changed or a Google account is connected, so that you can react quickly if it was not you. If you want to report a security problem, write to us at contact@onsell.ro.

In the event of a personal data breach that may affect your rights, we notify the ANSPDCP within 72 hours and inform you directly where the risk is high.

OnSell is a tool for commercial activity and is not directed at people under 16. We do not knowingly collect data from minors. If we find that we have, we delete it.

We may update this policy when the service or the legal requirements change. The date of the last update is shown at the top of the page. If the change is significant, we will tell you by email or through a message in the application before it takes effect.