Privacy Policy
1. Who is responsible for your data
The controller of your personal data is VendorLens Technologies Ltd (company no. HE488809, Limassol, Cyprus), trading as Sell Sunday. Contact us about privacy at hello@sellsunday.com.
We are based in the European Union, so the EU General Data Protection Regulation (GDPR) applies. For users in the UK, the UK GDPR also applies.
2. What we collect
| Data | Where it comes from |
|---|---|
| Your email address and login records | You, when you log in |
| Purchase details: email, plan, currency, Whop membership and payment status (never your card details) | Whop, when you buy |
| Your brief: name, experience, idea, audience and preferences | You |
| The launch package we generate for you | Our service |
| Your domain name and its DNS status | You |
| Access tokens for your connected Whop account, stored encrypted | Whop, when you connect |
| Technical logs: IP address, browser, pages requested and errors | Your device |
Please don't include sensitive personal data (such as health information) about yourself or others in your brief.
3. Why we use it, and our legal basis
- To provide the service you bought: account login, building your launch package, setting up your Whop store, hosting your page. Basis: performance of our contract with you.
- To send service emails, such as login links and delivery notices. Basis: contract.
- To keep the service secure and working, prevent abuse, and fix errors. Basis: our legitimate interests.
- To meet legal obligations, such as tax and accounting records. Basis: legal obligation.
We don't sell your data, and we don't use it for advertising.
4. Who we share it with
We use these service providers to run Sell Sunday. Each only processes data on our instructions or under its own terms for the service it provides:
- Supabase: database and login
- Vercel: hosting of our app and your landing page, and privacy-friendly visit statistics for our own website (see section 6)
- Anthropic: AI processing of your brief to generate your launch package. Under its commercial terms, Anthropic does not use this data to train its models.
- Resend: sending login and service emails
- Sentry: error reporting, so we can find and fix bugs. Error reports contain technical details (such as the page, browser and stack trace) and are configured not to include IP addresses, cookies or the content of your brief.
- Whop: payments for Sell Sunday, and your own store when you connect it
- Cloudflare: DNS and email routing for our domain
- Google: Google Tag Manager and Google Analytics (see section 6)
Some of these providers process data outside the EU and UK, including in the United States. Where they do, we rely on appropriate safeguards such as the EU–US Data Privacy Framework, adequacy decisions or the European Commission's Standard Contractual Clauses.
5. How long we keep it
- Your account, briefs and launch packages: while you have an account, and for up to 12 months after you ask us to close it, unless you ask us to delete them sooner.
- Whop access tokens: until you disconnect Whop or your project is deleted.
- Purchase and accounting records: as long as the law requires (usually 6 years).
- Technical logs: up to 30 days.
6. Cookies and analytics
Essential cookies. We use cookies that are strictly necessary to keep you logged in. These don't need your consent.
Vercel Web Analytics. To understand how our website and dashboard are used, we use Vercel Web Analytics. It doesn't use cookies, doesn't track you across other websites and doesn't identify you: it records anonymous, aggregated information such as pages visited, referring site, country, and device and browser type. Our legal basis is our legitimate interest in improving the service.
Google Analytics. We use Google Analytics, loaded through Google Tag Manager, to measure how visitors use our website. If you're in the EU/EEA, the UK or Switzerland, it only runs if you click “Accept” in our cookie banner. Elsewhere it's on by default, and you can turn it off at any time. It sets cookies (such as _ga and _ga_*, which last up to 2 years) and sends Google information such as pages visited, approximate location, device and browser details, and a pseudonymous identifier. We use Google Consent Mode: where consent is required, Google Analytics doesn't set cookies until you accept. We don't use Google for advertising or ad personalisation. In the EU/EEA, UK and Switzerland our legal basis is your consent; elsewhere it's our legitimate interest in improving the service. Wherever you are, you can change your choice at any time through the “Cookie settings” link at the bottom of every page. To work out which applies, we use your approximate country (from your IP address), stored for a day in a small cookie (ss_geo).
We don't add any analytics or cookies of our own to the landing pages we host for you.
7. Your rights
You can ask us to:
- give you a copy of your data, or send it to another provider;
- correct data that is wrong;
- delete your data;
- restrict or object to how we use it.
Email hello@sellsunday.com and we will respond within one month. You also have the right to complain to a data protection authority: in Cyprus, the Commissioner for Personal Data Protection; in the UK, the Information Commissioner's Office (ICO); or the authority where you live.
8. Your customers' data
When people buy from your store, their payment and customer details are handled by Whop in your Whop account. We don't receive your customers' payment details. You are responsible for your own privacy notice to your customers.
9. Changes
We will update this page if our practices change, and tell you by email about significant changes.