Last updated: 2025 · Pursuant to GDPR (EU) 2016/679
The controller responsible for the processing of personal data on this website is:
Diar Yousefi
Im Bans 15
25421 Pinneberg
Germany
Email: [email protected]
Phone: +49 155 65444829
During registration we collect the following data:
Legal basis: Art. 6(1)(b) GDPR (performance of a contract)
When you connect your eBay account, we store OAuth 2.0 tokens (access token and refresh token) that are stored in encrypted form in our database. These tokens allow us to access the eBay API on your behalf. We also store:
Legal basis: Art. 6(1)(b) GDPR (performance of a contract)
Payments are processed via Stripe, Inc. We do not store complete credit card details. From Stripe we only receive and store the Stripe Customer ID and Subscription ID to manage your subscription.
Legal basis: Art. 6(1)(b) GDPR (performance of a contract)
We store usage logs about use of the service (e.g. number of AI messages per month) to enforce plan limits.
Legal basis: Art. 6(1)(f) GDPR (legitimate interests)
At registration we store the user's IP address to prevent abuse of free trial accounts (multiple registrations). The IP address is not used for any other purpose and is not shared with third parties.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest — protection against abuse)
We process your data for the following purposes:
We store your data for as long as your account is active or as is necessary to provide the service. After cancellation of your account, your personal data will be deleted within 30 days, unless statutory retention obligations apply (e.g. retention of billing data pursuant to § 147 AO: 10 years).
Stripe, Inc., 510 Townsend Street, San Francisco, CA 94103, USA.
Stripe processes payment data on our behalf. Privacy policy:
stripe.com/privacy
Stripe is certified under the EU–U.S. Data Privacy Framework.
We use Stripe and have concluded a Data Processing Agreement (DPA) with them in accordance with Art. 28 GDPR.
For sending transactional emails (verification, payment notices, system notifications)
we use Resend. Provider: Resend, Inc., 2261 Market Street #5039,
San Francisco, CA 94114, USA.
Data transfer to the USA is based on EU Standard Contractual Clauses (SCC)
pursuant to Art. 46 GDPR.
Privacy policy:
resend.com/legal/privacy-policy
To synchronise your eBay data, ShopManage communicates with the eBay API (eBay GmbH, Albert-Einstein-Ring 2–6, 14532 Kleinmachnow, Germany). Data transfer to eBay takes place exclusively on your instruction. Privacy: eBay Privacy Notice
The service is operated on servers in Germany. Hosting infrastructure: private server, accessible via Cloudflare (Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107) as CDN/proxy. Cloudflare privacy: cloudflare.com/privacypolicy
To automatically reply to eBay messages and analyse shop data, message content (buyer messages, order context) is transmitted encrypted to external AI services. We use the following providers in a failover setup — only one is contacted per request. Transmitted data contains no payment information and providers are contractually prohibited from using data to train their models. Legal basis: Art. 6(1)(b) GDPR (performance of contract).
Groq, Inc.
101 Forest Ave, Palo Alto, CA 94301, USA
Purpose: AI language model (primary provider) for analysis and generation of reply texts.
Data transferred: buyer messages, order context (pseudonymised).
Third-country transfer (USA) based on Standard Contractual Clauses (Art. 46(2)(c) GDPR).
Privacy: groq.com/privacy-policy
Google LLC (Gemini API)
1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
Purpose: AI language model (fallback) for analysis and generation of reply texts.
Data transferred: buyer messages, order context (pseudonymised).
Third-country transfer (USA) based on Standard Contractual Clauses; Google LLC is certified under the EU–U.S. Data Privacy Framework.
Privacy: policies.google.com/privacy
Anthropic PBC
548 Market Street, PMB 90375, San Francisco, CA 94104, USA
Purpose: AI language model (last fallback) for analysis and generation of reply texts.
Data transferred: buyer messages, order context (pseudonymised).
Third-country transfer (USA) based on Standard Contractual Clauses (Art. 46(2)(c) GDPR).
Privacy: anthropic.com/privacy
Your personal data is only shared with third parties to the extent necessary for the performance of the contract (e.g. Stripe for payment processing) or where you have given explicit consent. No data is shared for marketing purposes or with advertisers.
You have the following rights regarding your personal data:
To exercise these rights, contact us at: [email protected]
You also have the right to lodge a complaint with the competent data protection supervisory authority.
We use technical and organisational security measures to protect your data:
ShopManage uses technically necessary session cookies for authentication and CSRF protection. These cookies are required for the operation of the service and are not used for tracking or advertising. No third-party tracking cookies are used.
For all data protection enquiries, please contact us at:
Email: [email protected]
Post: Diar Yousefi, Im Bans 15, 25421 Pinneberg, Germany