Privacy Policy

This Privacy Policy explains how Ecomli Group LLC (“Ecomli”, “we”, “us”) collects, uses, and shares personal information when you use ecomli.com, the Ecomli application, our browser extension, and related services (the “Service”). Ecomli Group LLC is organized in Wyoming, United States. For your account and usage data, Ecomli is the data controller; for your buyers’ data, we act on your instructions as described in Section 4. By using the Service you agree to this Policy.

1. Information we collect

Information you provide

Account data — email address, password (stored hashed, never in plain text), country, and workspace details such as team member emails and roles.
Billing data — handled by our payment processor, Stripe. We receive your plan, billing status, and partial card details (such as brand and last four digits); we never store full card numbers.
Marketplace connections — when you connect a marketplace seller account (such as eBay), we store the authorization tokens and account metadata needed to operate the Service, plus your listings, orders, fees, and store settings retrieved from that marketplace.
Supplier credentials — if you choose to store supplier account credentials for automated or assisted ordering, we store them encrypted and use them only to perform the actions you configure.
Product and sourcing data — supplier URLs, costs, images, and the pricing rules and templates you create.
Communications — messages you send to support and feedback you share. Our Discord community is operated on Discord and governed by Discord’s own privacy policy.

Information collected automatically

Usage and device data — IP address, browser and device type, pages viewed, actions taken, timestamps, and diagnostic logs.
Workspace audit logs — a record of actions taken in your workspace (such as imports, publishes, and settings changes), kept so account owners can supervise their teams.
Cookies — see Section 9.

2. How we use information

To provide and operate the Service: importing products, generating listing content, monitoring and updating prices and stock, screening listings, syncing orders, sending your buyer messages, and assisting fulfillment — all according to your settings.
To process payments, manage subscriptions and credits, and send transactional emails (such as receipts, verification codes, and service notices).
To provide support and respond to your requests.
To secure the Service: authentication, fraud and abuse prevention, rate limiting, and audit logging.
To improve the Service: debugging, performance measurement, and product development using aggregated or de-identified data where practicable.
To send marketing emails about Ecomli, which you can opt out of at any time via the unsubscribe link.

AI processing. To generate listing titles, descriptions, and related content, we send relevant product information (such as source listing text and images) to AI service providers acting on our behalf. We do not send your buyers’ personal information to AI providers to train their models.

3. Legal bases (EEA/UK)

Where the GDPR or UK GDPR applies, we process personal data: to perform our contract with you (operating the Service); for our legitimate interests (securing and improving the Service, preventing abuse); to comply with legal obligations (tax, accounting); and with your consent where required (such as marketing), which you may withdraw at any time.

4. Your buyers' data

To run your store, the Service processes information about your buyers — names, usernames, delivery addresses, purchased items, and message threads — retrieved from your connected marketplace accounts. We process this data on your instructions and only to operate your store: syncing orders, assisting fulfillment, and sending the policy-checked messages you configure. We do not sell your buyers’ data, use it for advertising, or contact your buyers for our own purposes. You are responsible for complying with your own privacy obligations to your buyers; a data processing addendum is available on request at support@ecomli.com.

5. How we share information

We share personal information only as follows:

Service providers (subprocessors) acting on our behalf under contract: payment processing (Stripe), cloud hosting and infrastructure, AI content generation, transactional email delivery, browser-automation infrastructure used for sourcing and ordering tasks, and referral/affiliate attribution.
Marketplaces and suppliers, at your direction — for example, publishing a listing to your eBay store or placing an order with your supplier.
Legal and safety — when required by law, legal process, or to protect the rights, safety, and property of Ecomli, our users, or the public.
Business transfers — in connection with a merger, acquisition, or sale of assets, subject to this Policy.

We do not sell personal information, and we do not share it for cross-context behavioral advertising.

6. International transfers

We process data in the United States and in the regions where our service providers operate. Where we transfer personal data from the EEA, UK, or Switzerland, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses (and the UK Addendum) or transfers to recipients certified under recognized adequacy frameworks.

7. Retention

Account, store, and order data: retained while your account is active so your operating history remains available to you.
After account closure: operational data is deleted or de-identified within 90 days, except where we must keep records longer for legal, tax, accounting, security, or dispute purposes.
Marketplace tokens and supplier credentials: deleted promptly when you disconnect the account or close your account.
You may request earlier deletion at any time (Section 8).

8. Your rights

We honour the rights below for all users, wherever you live. To exercise any of them, email support@ecomli.com from your account email. We will verify your request and respond within the time required by applicable law (and in any case within 30 days where feasible). We will not discriminate against you for exercising your rights, and you may use an authorized agent where the law provides for one.

Access & portability — obtain a copy of your personal data in a portable format.
Correction — fix inaccurate personal data.
Deletion — delete your personal data, subject to the retention exceptions above.
Restriction & objection — restrict or object to certain processing, including direct marketing (which we will always stop on request).
Withdraw consent — where processing is based on consent.

EEA/UK: you also have the right to lodge a complaint with your supervisory authority (in the UK, the ICO). Australia: we handle personal information consistently with the Australian Privacy Principles; complaints may be raised with us first and with the OAIC. California: the rights above correspond to your rights to know, access, correct, delete, and portability under the CCPA/CPRA; we do not “sell” or “share” personal information as those terms are defined in California law.

9. Cookies

We use a small set of cookies and similar technologies: essential cookies for sign-in sessions and security (CSRF protection); preference cookies for settings you choose; and a referral attribution cookie that records, for a limited period, that a partner referred you, so the partner can be credited if you subscribe. We do not use third-party advertising cookies. You can control cookies in your browser settings; blocking essential cookies may prevent sign-in.

10. Security

We protect personal data with encryption in transit (TLS), encryption of stored credentials, access controls, audit logging, and the principle of least privilege for staff access. No method of transmission or storage is completely secure; if we learn of a breach affecting your personal data we will notify you and regulators as required by law.

11. Children

The Service is for users 18 and over. We do not knowingly collect personal information from anyone under 18; if you believe a minor has provided us personal information, contact us and we will delete it.

12. Changes to this Policy

We may update this Policy from time to time. We will post the updated version with a new “Last updated” date, and for material changes we will notify you by email or in-app notice before they take effect.

13. Contact

Privacy questions and requests: support@ecomli.com.