Privacy Policy

This Privacy Policy explains how Ecomli Group LLC (“Ecomli”, “we”, “us”) collects, uses, and shares personal information when you use ecomli.com, the Ecomli application, our browser extension, and related services (the “Service”). Ecomli Group LLC is organized in Wyoming, United States. For your account and usage data, Ecomli is the data controller; for your buyers’ data, we act on your instructions as described in Section 4. By using the Service you agree to this Policy.

1. Information we collect

Information you provide

Account data: email address, password (stored hashed, never in plain text), country, and workspace details such as team member emails and roles.
Billing data: handled by our payment processor, Stripe. We receive your plan, billing status, and partial card details (such as brand and last four digits); we never store full card numbers.
Your eBay seller account: Ecomli works through the eBay seller account you are signed in to in the same browser. We do not collect your eBay password, and the extension does not send your eBay cookies to our servers. To run the features you use, the extension reads Seller Hub pages and reports and sends us your eBay seller identity (to link that account to your workspace) and store data such as listings, item numbers, custom labels (SKUs), prices, quantities, orders, fees, and store settings.
Supplier accounts: if you set up supplier buying accounts for Auto Ordering, we store the account username, password, and any two-factor (TOTP) secret you provide, encrypted, and use them only to perform the ordering actions you configure. If you connect an AliExpress account, the authorization we receive is held on our servers. We also store supplier order details (such as order numbers, items, costs, delivery status, and tracking numbers) so the Service can link supplier orders to your eBay orders and convert tracking.
Product and sourcing data: supplier URLs and the product data read from them (such as titles, specifications, prices, stock, and images), your costs, and the pricing rules, buying limits, and templates you create.
Communications: messages you send to support and feedback you share. Our Discord community is operated on Discord and governed by Discord’s own privacy policy.

Information collected automatically

Usage and device data: IP address, browser and device type, pages viewed, actions taken, timestamps, and diagnostic logs.
Data kept in your browser: the extension stores your settings, work history, imported catalogs, and the financial reports it reads from Seller Hub (normalized order, item, and fee records) in your browser profile. Signing out does not remove this data; the extension’s “Remove local data” control does. It does not delete your eBay listings, orders, subscription, or the records on our servers.
Workspace audit logs: a record of actions taken in your workspace (such as imports, publishes, and settings changes), kept so account owners can supervise their teams.
Marketplace policy notices: when the Ecomli browser extension is connected to your eBay seller account, it reads the policy notices eBay shows in Seller Hub for listings created with Ecomli (the policy, eBay's stated reason, and the listing and product concerned), and any policy refusal eBay gives when such a listing is submitted. We keep them with the compliance screening result for that listing. For other listings eBay has flagged, we keep only a count, unless you press “Send policy violations to Ecomli” in the extension’s Help & support: that sends the notices on all your flagged listings, including ones not created with Ecomli (the policy, eBay's stated reason, and the listing's title, custom label and item number).
Cookies: see Section 9.

2. How we use information

To provide and operate the Service: importing products, generating listing content, monitoring and updating prices and stock, screening listings, syncing orders, sending your buyer messages, and assisting fulfillment, all according to your settings.
To process payments, manage subscriptions and credits, and send transactional emails (such as receipts, verification codes, and service notices).
To provide support and respond to your requests.
To secure the Service: authentication, fraud and abuse prevention, rate limiting, and audit logging.
To improve the Service: debugging, performance measurement, and product development using aggregated or de-identified data where practicable.
To improve compliance screening: Ecomli staff review marketplace policy notices from all customers to improve Safety Shield. Other customers never see your notices.
To send marketing emails about Ecomli, which you can opt out of at any time via the unsubscribe link.

AI processing. To generate listing titles, descriptions, and related content, we send relevant product information (such as supplier text, specifications, and images) to AI service providers acting on our behalf. If you use AI reply drafts, the conversation you open, which can include your buyer’s name and messages, is sent to our AI provider to draft the reply. We do not send your or your buyers’ personal information to AI providers for the purpose of training their models.

3. Legal bases (EEA/UK)

Where the GDPR or UK GDPR applies, we process personal data: to perform our contract with you (operating the Service); for our legitimate interests (securing and improving the Service, preventing abuse); to comply with legal obligations (tax, accounting); and with your consent where required (such as marketing), which you may withdraw at any time.

4. Your buyers' data

To run your store, the Service processes information about your buyers (names, usernames, delivery addresses, purchased items, and message threads) that the extension reads from your signed-in eBay seller account. We process this data on your instructions and only to operate your store: syncing orders, linking and placing supplier orders, converting and adding tracking, and sending the policy-checked messages you configure. Where you use Auto Ordering, the buyer’s delivery details are shared with your supplier to fulfill the order. We do not sell your buyers’ data, use it for advertising, or contact your buyers for our own purposes. You are responsible for complying with your own privacy obligations to your buyers; a data processing addendum is available on request at support@ecomli.com.

5. How we share information

We share personal information only as follows:

Service providers (subprocessors) acting on our behalf under contract: payment processing (Stripe), cloud hosting and infrastructure, file and image storage, AI content generation, shipment-tracking providers used for Tracking Conversions, transactional email delivery, and browser-automation infrastructure used for sourcing and ordering tasks.
Marketplaces and suppliers, at your direction: for example, publishing a listing to your eBay store or placing an order with your supplier.
Legal and safety: when required by law, legal process, or to protect the rights, safety, and property of Ecomli, our users, or the public.
Business transfers: in connection with a merger, acquisition, or sale of assets, subject to this Policy.

We do not sell personal information, and we do not share it for cross-context behavioral advertising.

6. International transfers

We process data in the United States and in the regions where our service providers operate. Where we transfer personal data from the EEA, UK, or Switzerland, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses (and the UK Addendum) or transfers to recipients certified under recognized adequacy frameworks.

7. Retention

Account, store, and order data: retained while your account is active so your operating history remains available to you.
After account closure: operational data is deleted or de-identified within 90 days, except where we must keep records longer for legal, tax, accounting, security, or dispute purposes.
Supplier account credentials: deleted promptly when you remove the supplier account or close your account.
Data kept in your browser: stays in your browser profile until you use the extension’s “Remove local data” control or uninstall the extension.
You may request earlier deletion at any time (Section 8).

8. Your rights

We honour the rights below for all users, wherever you live. To exercise any of them, email support@ecomli.com from your account email. We will verify your request and respond within the time required by applicable law (and in any case within 30 days where feasible). We will not discriminate against you for exercising your rights, and you may use an authorized agent where the law provides for one.

Access & portability: obtain a copy of your personal data in a portable format.
Correction: fix inaccurate personal data.
Deletion: delete your personal data, subject to the retention exceptions above.
Restriction & objection: restrict or object to certain processing, including direct marketing (which we will always stop on request).
Withdraw consent: where processing is based on consent.

EEA/UK: you also have the right to lodge a complaint with your supervisory authority (in the UK, the ICO). Australia: we handle personal information consistently with the Australian Privacy Principles; complaints may be raised with us first and with the OAIC. California: the rights above correspond to your rights to know, access, correct, delete, and portability under the CCPA/CPRA; we do not “sell” or “share” personal information as those terms are defined in California law.

9. Cookies

We use a small set of cookies and similar technologies: essential cookies for sign-in sessions and security (CSRF protection); and preference cookies for settings you choose. We do not use third-party advertising cookies. You can control cookies in your browser settings; blocking essential cookies may prevent sign-in.

10. Security

We protect personal data with encryption in transit (TLS), encryption of stored credentials, access controls, audit logging, and the principle of least privilege for staff access. No method of transmission or storage is completely secure; if we learn of a breach affecting your personal data we will notify you and regulators as required by law.

11. Children

The Service is for users 18 and over. We do not knowingly collect personal information from anyone under 18; if you believe a minor has provided us personal information, contact us and we will delete it.

12. Changes to this Policy

We may update this Policy from time to time. We will post the updated version with a new “Last updated” date, and for material changes we will notify you by email or in-app notice before they take effect.

13. Contact

Privacy questions and requests: support@ecomli.com.