Privacy Policy
Last Updated: 20 October 2026
This policy describes how ResellHub.ie processes personal data based on how the Platform works today. It is not legal advice. Please have an Irish solicitor or GDPR consultant review it before treating it as final — especially while ResellHub is not yet a registered company.
1. Who we are
For GDPR purposes, the controller of your personal data is the operator of ResellHub.ie (“ResellHub”, “we”), based in Ireland. Until a limited company is registered, day-to-day responsibility for the Platform sits with the operator reachable at the contact below.
Email: support@resellhub.ie
You may also use our contact form.
You can lodge a complaint with Ireland’s Data Protection Commission (DPC). We appreciate the chance to resolve concerns first via the email above.
TaskBucket helps build and maintain the application and may process data as a service provider / processor on our instructions (hosting and support). They should not use your personal data for their own unrelated purposes.
2. Personal data we collect
Depending on how you use the Platform, we may process:
- Account data: email, name, phone (optional — you may add it at email sign-up or later in My Profile), password hash, Google account id (if you use Google Sign-In), profile photo path, county/location, bio, date of birth fields where present, role/dealer flags, email verification and password-reset tokens
- Listings: titles, descriptions, prices, photos, category attributes, vehicle registration and related vehicle facts, property details, phone-visibility choices
- Messages: buyer–seller chat content and read markers
- Dealer applications: business name, CRO/VAT/SIMI where provided, address, phone, uploaded verification documents
- Identity verification: ID photo and selfie paths/status for trust features (stored privately; retention rules apply)
- Subscriptions (dealers): plan tier/status/periods and Stripe customer / subscription reference ids (we do not store full card numbers)
- AI features: prompts, listing images/text sent for classification or drafting, assistant conversation content and related events, AI usage counters
- Search & preferences: saved search history (you can clear it in My Profile), notification preferences
- Security & fraud: login device fingerprints, IP addresses, user-agent related signals used for rate limits and abuse checks
- Seller metrics: aggregated listing view and inquiry counts (not marketing pixels in your browser)
- Reviews & sales records: where those features are used
- Support: messages you send via contact/email
We do not intentionally collect special-category data. Identity documents may reveal such data incidentally; we use them only for verification and security.
3. How we collect data
- Directly from you (registration, listings, messages, applications, verification uploads, contact form)
- Automatically when you use the site (session, security logs, optional location preference cookies — see Cookie Policy)
- From Google if you choose Google Sign-In
- From payment provider Stripe when a dealer starts a subscription Checkout
- From vehicle lookup providers when a registration is queried for Motors listings
4. Why we use your data (purposes)
- Provide and secure accounts, listings, messaging, and dealer tools
- Process dealer subscription billing via Stripe
- Send transactional email (OTP, password reset, notifications) via our mail provider
- Run AI-assisted listing and search tools and the on-site assistant
- Verify identity / dealer status and prevent fraud or abuse
- Optional phone number: account security and community safety; if you choose to show your number on a listing, so buyers can contact you. Phone is never required. You can edit or remove it in My Profile. It is not shown on listings unless you turn on the phone-visibility setting (off by default)
- Improve reliability and safety of the Platform
- Respond to support requests and legal obligations
Marketing emails are only sent where you have opted in (or as otherwise allowed by law); you can change notification preferences where provided in-product.
Lawful bases typically include performance of a contract (providing the marketplace), legitimate interests (security, fraud prevention, product improvement), and consent (non-essential cookies / optional geolocation preferences, and marketing where required).
5. Cookies
See our Cookie Policy. Necessary cookies run the site. Preferences (location) and Analytics (Google Analytics 4 and Microsoft Clarity) are optional and off until you consent. You can change or withdraw non-essential choices any time via Cookie settings in the site footer (or the banner when shown).
6. Who we share data with
We share data only as needed to run the Platform:
- Other users — e.g. sellers see enquiries; public listing fields you publish
- Stripe — dealer subscription Checkout and billing (card data handled by Stripe)
- Email delivery (AWS SES or configured SMTP) — address and message content for transactional mail
- OpenAI — content needed for AI listing assist, search parsing, assistant, or moderation features you use
- VMS / vehicle lookup — registration numbers for Motors lookup
- Google — Sign-In; Maps Geocoding when location preferences are enabled; Google Analytics 4 (Google Ireland Limited) when you allow Analytics cookies (page views, device/browser, approximate location, coarse interactions; 14-month retention in our GA4 property; not used for ads personalisation on ResellHub)
- Microsoft Clarity (Microsoft Ireland Operations Limited) — when you allow Analytics cookies: page views, device/browser, approximate location, interactions, and masked session recordings
- Cloudflare Turnstile — bot protection on forms (contact, login, signup, and password reset); Cloudflare may process your IP address and browser signals for security
- Hosting / TaskBucket — infrastructure and maintenance
- Authorities — when required by law
We do not sell your personal data. We do not currently use PayPal or Apple/Facebook login on the Platform.
7. International transfers
Some providers (for example OpenAI, Google, or Microsoft) may process data outside the EEA. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses and provider terms.
8. Retention
- Account data: while your account is active, and for a reasonable period after closure where needed
- Listings & messages: while needed for the service and dispute/fraud handling
- Identity documents: subject to our retention/purge rules (rejected and stale pending files are purged on a schedule; approved verification status may remain)
- Policy-blocked listing draft photos: held privately for review for up to 30 days, then deleted (the moderation record may remain)
- Assistant chats: short retention (conversations intended for roughly 24 hours; security/events longer, e.g. around 90 days)
- Billing / Stripe references: as needed for subscriptions, accounting, and legal obligations
- Security logs / device & IP records: as needed for abuse prevention
- Microsoft Clarity: session playback (recordings) for 30 days; click/heatmap data and favourited or labelled sessions for up to 9 months (per Microsoft Clarity data retention)
9. Your rights
Under GDPR you may request access, correction, deletion (erasure), restriction, objection, and data portability where applicable, and you may withdraw consent where processing is consent-based.
To exercise these rights, email support@resellhub.ie. We aim to respond within one month.
Account closure / deletion requests: there is no self-serve “delete my account” button yet. If you email us to close or erase your account, we will deactivate access and delete or anonymise personal data where feasible. We may retain limited information where we must (for example fraud prevention, legal claims, tax/accounting, or Stripe billing records). We cannot promise instant or complete erasure of every backup or third-party copy on the same day.
10. AI transparency
AI tools help with listing suggestions, search understanding, the assistant, and safety checks. Outputs can be wrong — you should review them. Significant trust or safety decisions can involve human review. Contact us if you want to contest an automated outcome that significantly affects you.
11. Security
We use access controls, encrypted transport (HTTPS), hashed passwords, and related measures. No method of transmission or storage is perfectly secure.
12. Children
The Platform is aimed at adults who can form a contract under Irish law. We do not knowingly target children.
13. Changes
We may update this policy when the Platform or the law changes. The “Last Updated” date will change when we do.