Privacy Policy
Last updated: October 15, 2026
This explains what SellTo.us collects, why, who helps us run the service, and the choices you have.
The short version
- We collect what we need to run your account and tests: your email, your phone number if you choose to add one, what you test, and your payments.
- We don’t sell your information, and we don’t use advertising trackers.
- Your product ideas are only used to run your tests.
- You can delete your account and data at any time from Account settings.
1. What we collect
| What | Why |
|---|---|
| Email address and password (stored scrambled, never readable) | To create your account, log you in and send sign-in links |
| The country you choose when you sign up (you can change it in your account) | To count customers by country and to see where our service is used. Never shared or sold |
| Share links you create for a report (off unless you turn one on) | Anyone who has the link can see that report, including the description, prices and images in it, until you turn sharing off. The link doesn’t show your email or account |
| Phone number (optional) | Only if you add one: to contact you about your tests, payments or account if email doesn’t reach you. We don’t send marketing texts or share it with advertisers |
| Product descriptions, prices, photos, chosen market and test names | To run your tests and show your reports |
| Reports and results | So you can see and download them later |
| Purchases and monthly plan: package, amount, date, discount, plan status and renewal date, Stripe customer and payment IDs, and receipt links | To add credits, show your purchase history and handle refunds |
| A random device ID saved in your browser, and a scrambled version of your internet address (we never store the address itself) | To keep the free test to one per person and to stop invite abuse |
| Who invited you, and who you invited (shown to the inviter only as a hidden email like j•••@gmail.com) | To run the invite program |
| The partner (for example a YouTube creator) whose link you used before signing up, and the amounts you pay us | To pay that partner their share. Partners see only totals, never your name or email |
| Messages you send from the Help page | To answer you |
| Your approximate country, worked out from your internet address when you visit | To show your country on the home page map |
| Visit statistics: the page you open, the site or link that sent you (for example Instagram or Google), your country and whether you use a phone or computer. Counted without cookies, using a scrambled code that changes every day, so we can’t follow you from one day to the next | To understand how many people visit and which links bring customers |
| Who is on the site right now: while a page of ours is open, your browser tells us every 30 seconds which page and which part of it you’re looking at (for example “home page, prices” or “checkout”), never what you type. We add your approximate place, worked out from your internet address (nearest city, region and country), and use the same daily scrambled code as visit statistics. Not linked to your account. Removed when you close the page, and anything left is deleted within an hour. Not sent at all if your browser asks not to be tracked | To show our team a live map of how many people are on the site and which pages they’re on |
| Dashboard steps: which steps of setting up a test you reach (for example “opened the dashboard”, “started describing a product”, “ran the free test”, “went to payment”, “opened a report”), the test size and whether it was the free test or a re-test. Never what you type (no product descriptions, prices, test names or audiences) and not linked to your account; counted with the same daily scrambled code as visit statistics | To see where people get stuck setting up a test, so we can make it easier |
| Free tools (Idea Roast and the others under /tools/): what you type into them is never stored. We keep only which tool was used, when, whether it worked, the AI cost, and a scrambled version of your internet address (never the address itself) or, if you’re logged in, a scrambled code for your account, deleted after about a month | To keep the tools free by limiting how often each connection or account can use them (more uses with a free account), and to stop abuse |
| Market Pulse (only if you turn it on in Account → Notifications): which tested ideas it covers, a short general description of each idea’s market (industry, kind of customer, country; worked out once by AI from your test), the market news found for it with links and dates, and when each update was sent. The written email is deleted after sending | To send you one monthly update about your market. The web search only uses the general market description, never your idea’s description. Turn it off any time in your account or from any Market Pulse email |
| Where you first came from when you signed up (for example “instagram” or “invite”) | To know which ads and posts bring customers |
We don’t collect your full card number. Stripe handles card details directly.
2. Who helps us run SellTo.us
We share information only with the companies that run parts of the service for us, and only what each one needs:
- Supabase: accounts, logins and our database.
- Netlify: hosts the website and our server code.
- Stripe: takes payments, sends receipts and handles refunds.
- Anthropic: the AI that plays the shoppers and writes your report. It receives the content of your test (descriptions, prices, photos and market), the text you ask the magic wand to improve, what you type into the free tools and, if you turn on Market Pulse, your tested idea and earlier report (to write your monthly update), but not your email address. For Market Pulse, Anthropic’s web search looks up news using only a general description of your idea’s market. Text sent to the wand or the free tools isn’t stored by us; we only count how often they are used, to prevent abuse. Under its commercial terms, Anthropic doesn’t use this content to train its models.
- Resend: sends our emails, such as sign-in links and “your results are ready”.
We may also share information if the law requires it, to protect our rights or users’ safety, or as part of a sale or merger of the business, in which case this policy continues to apply.
3. What we don’t do
- We don’t sell or rent your personal information, or share it for targeted advertising.
- We don’t use advertising or tracking cookies.
- We don’t publish your tests or show them to other customers.
4. Browser storage
The site saves a few small items in your browser to work properly, and never for advertising: your login session, the random device ID, an invite code if you arrived through a friend’s link, a partner’s link name if you arrived through a creator’s link (kept for 60 days), the site that first sent you, a draft of your product details, and which example the home page showed last. These aren’t used to track you across other websites. Clearing your browser removes them.
5. Emails
We send emails you need: sign-in links, password resets, “your results are ready” emails and invite gift notices. You can turn result emails off in Account settings.
Follow-up emails. If you created your account on or after October 10, 2026, we may also send a few follow-up emails after a test: an offer for a larger test (sometimes with a one-time discount code), a reminder before that code expires, a reminder to re-test after you change your product, and a check-in a few weeks later. They use your test’s title, results and suggested changes, and at most a few are sent a month. Every one has an unsubscribe link, and you can turn them off or on in Account settings at any time. Accounts created before October 10, 2026 only get them if the customer turns them on. Some include a one-tap question (for example “Have you changed anything since your test?”); if you pick an answer and press Send, we save it and use it to send fewer emails you don’t need, such as no more re-test reminders after “No plans”. The pictures in these emails load from our website; we don’t use them to track whether you opened an email. We keep a record of which follow-up emails we sent you and your answers, so the same email isn’t sent twice; both are deleted with your account.
6. How long we keep things
- Your account, tests and reports are kept until you delete them or your account. Product photos are deleted automatically 90 days after the test; the report stays.
- Visit statistics are deleted after about 13 months. Dashboard steps are deleted after 180 days.
- If your browser sends “Do Not Track” or “Global Privacy Control”, we don’t count your visits or dashboard steps at all.
- When you delete your account, your tests, reports, photos and settings are deleted.
- We keep a few records after deletion: payment records, which we must keep for tax and accounting; a simplified form of your email address and the record of who invited whom, so a deleted account can’t claim another free test or invite gift; and the scrambled device and connection records used for the same reason.
- Support messages are kept as long as needed to help you and improve the service.
7. Your choices and rights
- See and download your tests and reports in your account at any time.
- Change your email, phone number or password in Account settings.
- Stop follow-up emails with the unsubscribe link in any of them, or in Account settings.
- Delete your account and data in Account settings.
- Ask us for a copy of your information, or to correct or delete it, by emailing hello@sellto.us from your account email. We’ll answer within 30 days.
California residents have the right to know what personal information we collect and why, to ask us to delete or correct it, and not to be treated differently for using these rights. We don’t sell or share personal information as those terms are defined in California law.
If you’re in the EU or UK, you also have the right to object to or restrict how we use your information, to data portability, and to complain to your local data protection authority. We use your information to perform our agreement with you (running your account and tests), for our legitimate interests (preventing abuse of free tests and invites, keeping the service secure), and to meet legal obligations (keeping payment records).
8. Security
All connections to SellTo.us are encrypted. Passwords are stored scrambled. Each customer can only see their own tests and payments, and only approved admins can open the admin panel. No system is perfectly secure, so please use a strong password.
9. Children
SellTo.us is for adults running a business. It isn’t meant for anyone under 18, and we don’t knowingly collect information from children.
10. Where your data is stored
Our service providers may store and process information in the United States and other countries. When information moves between countries, we rely on our providers’ legal safeguards for those transfers.
11. Changes
If we change this policy in an important way, we’ll tell you by email or on the site before the change takes effect.
12. Contact
Privacy questions or requests: hello@sellto.us.