Privacy Policy
Last updated: April 17, 2026

SellerPic ("we", "our", "the extension") is a browser extension that helps e-commerce sellers detect and fix white-background product images. We are committed to protecting your privacy.

1. Information We Collect
   Extension UID: A randomly generated unique identifier (UUID v4) stored locally in your browser. It is used solely to manage your subscription status. It is not linked to your personal identity.

Email Address: Collected only when you voluntarily provide it during the subscription checkout or purchase recovery process. Used for payment processing (via Paddle) and account recovery.

Payment Information: All payment processing is handled by Paddle, our Merchant of Record. We do not collect, store, or have access to your credit card numbers or payment details.

1. Information We Do NOT Collect
   Images: All image processing happens entirely within your browser. Your images are never uploaded to any server.
   Browsing History: We do not track or access your browsing activity.
   Personal Data: We do not collect names, addresses, phone numbers, or any other personal information beyond what is described above.
   Analytics / Tracking: We do not use any third-party analytics, tracking pixels, or advertising SDKs.
2. How We Use Your Information
   Extension UID: To verify your subscription status via our license server.
   Email: To process payments through Paddle and to enable cross-device purchase recovery.
3. Data Storage
   Local Storage: Your preferences and cached license status are stored locally in your browser using chrome.storage.local and IndexedDB. This data never leaves your device.

Server Storage: Your Extension UID and subscription status are stored on Cloudflare Workers D1, a globally distributed relational database. Email addresses associated with subscriptions are stored for purchase recovery purposes.

1. Data Retention
   Active subscriptions: retained as long as the subscription is active.
   Canceled/expired subscriptions: automatically deleted after 90 days.
   OTP verification codes: automatically deleted after 5 minutes.
   Rate limiting data: automatically deleted after 24 hours.
2. Third-Party Services
   Paddle: Payment processing and subscription management. See Paddle's Privacy Policy.
   Cloudflare Workers: Hosts our license verification API. See Cloudflare's Privacy Policy.
   Resend: Sends OTP verification emails. See Resend's Privacy Policy.
3. Data Security
   License data cached locally is protected with HMAC-SHA256 signatures to prevent tampering. All communication between the extension and our servers uses HTTPS. Our API only accepts requests from verified browser extension origins.
4. Your Rights
   You can delete all local data at any time by uninstalling the extension or clearing its storage through your browser settings. To request deletion of server-side data associated with your email, contact us at interestingservice@gmail.com.
5. Children's Privacy
   Our extension is not directed at children under 13. We do not knowingly collect information from children.
6. Changes to This Policy
   We may update this policy from time to time. Changes will be reflected on this page with an updated date. Continued use of the extension after changes constitutes acceptance.
7. Contact Us
   If you have questions about this privacy policy, please contact us at interestingservice@gmail.com.