Version of 25/09/2026
This English version is provided for convenience; the French version prevails. Read the French version.
ResellOS is a service reserved for business customers. This policy describes how personal data about you is processed, as a business client or a client's representative, when you visit resell-io.com and use the ResellOS app (app.resell-io.com). The Chrome extension is covered by a separate policy (in French).
NAVIR, a French simplified joint-stock company (SAS), 71 rue Riquet, 75018 Paris, France, RCS Paris 951 985 175. For any question about your data: support@resell-io.com.
When you record data about other people in ResellOS (buyers, suppliers, consignors), you are responsible for it; NAVIR processes it on your behalf, only to provide you with the service, as a processor within the meaning of Article 28 of the GDPR.
| Purpose | Legal basis | Retention period |
|---|---|---|
| Creating and managing the account, providing the service | Performance of the contract (Art. 6(1)(b) GDPR) | For the life of the account, then deleted within 3 months after the account is closed or the subscription ends |
| Proof of acceptance of the Terms of Sale and Terms of Use | Legitimate interest (keeping proof of the contract) | Life of the account, then 5 years (civil limitation period) |
| Payment and billing | Performance of the contract; legal obligation for keeping invoices | Invoices and accounting records: 10 years (Article L. 123-22 of the French Commercial Code) |
| AI processing of photos and text, at your request | Performance of the contract | The result is kept with the item concerned and deleted with it |
| Sending service emails (welcome, subscription and payment, notifications of sales, shipments and price drops) | Performance of the contract | Life of the account |
| Security of the service and fraud prevention (technical logs) | Legitimate interest; legal obligation to retain connection data | 12 months maximum |
| Answering requests sent to support | Performance of the contract or legitimate interest | 3 years after the last exchange |
| Audience measurement for resell-io.com | Legitimate interest; tool without cookies or cross-site tracking | Aggregated statistics, without identifying visitors |
Your data is intended only for authorised NAVIR staff. It is neither sold nor rented. NAVIR uses the following providers, who act only on its instructions:
| Provider | Service | Data location |
|---|---|---|
| Hetzner Online GmbH | Hosting of the servers, database and photos | Germany (European Union) |
| Stripe | Card payment, subscription and invoice management | European Union (Ireland); possible transfers to the United States |
| Resend | Sending service emails | European Union (Ireland, AWS region eu-west-1); company established in the United States |
| Replicate | AI photo editing (Photo AI add-on), only for the photos you submit | United States |
AI text writing is performed by a model running on NAVIR's servers: this data is not sent to a third-party AI provider. Audience measurement for the website uses a tool (Umami) hosted by NAVIR.
When you publish a listing, the listing information is sent to the marketplace you have chosen, which processes it under its own responsibility and according to its own privacy policy.
NAVIR may disclose data to the authorities where required by law.
Some providers are established in the United States or may access data there (Stripe, Resend, Replicate). These transfers are covered by the safeguards provided for in Articles 45 and 46 of the GDPR: an adequacy decision of the European Commission for companies certified under the EU-US Data Privacy Framework, or standard contractual clauses adopted by the European Commission. [TO BE COMPLETED: safeguard used for each provider, to be checked in the data processing agreements of Stripe, Resend and Replicate]. You can obtain a copy of these safeguards by writing to support@resell-io.com.
The resell-io.com website does not set advertising cookies; its audience measurement works without cookies. The app.resell-io.com app stores in your browser (local storage) the login token strictly needed for your session; this storage is exempt from consent because it is essential to the service you request. Paying on Stripe's pages may lead Stripe to set cookies needed for payment security and fraud prevention.
NAVIR implements appropriate technical and organisational measures: encrypted connections (HTTPS), passwords stored in irreversibly encrypted form, encryption of marketplace login details, separation of data between accounts, authenticated access to photos, regular backups.
You have the right of access, rectification, erasure, restriction of processing, objection (for processing based on legitimate interest) and data portability. You may also set instructions regarding what happens to your data after your death.
To exercise these rights, write to support@resell-io.com from your account's email address. NAVIR replies within one month, which may be extended by two months for complex requests; proof of identity may only be requested where there is reasonable doubt about your identity.
If, after contacting NAVIR, you consider that your rights have not been respected, you may lodge a complaint with the French data protection authority, the Commission nationale de l'informatique et des libertés (CNIL), 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France, www.cnil.fr.
This policy may change, in particular if a provider changes. The version in force is the one published on this page, with its date. Any substantial change is notified to you by email or in the app.