Privacy Policy

Who we are

SellerSouk is operated by Upcapital Global FZCO, a Better for You Brands company, registered in Dubai Silicon Oasis, Dubai, United Arab Emirates. This policy explains what personal data we collect, why, and the rights you have over it — written to meet both UAE data protection law and the EU/UK GDPR standard for any user, wherever you are.

What we collect

• Account data — name, work email, password (stored as a salted hash, never in plain text), organization details, trade license number.
• Transaction data — assets listed, offers, sales, invoices, and payout details (via Stripe, if connected).
• Photos you upload of assets for sale.
• Usage data — sign-in timestamps, IP address at sign-in (for security and fraud prevention), and audit logs of sensitive actions.
• Communications — messages sent through dispute threads and support requests.

Why we collect it

To operate the marketplace: valuing and listing your assets, matching buyers and sellers, processing payments and payouts, calculating and remitting VAT, preventing fraud, resolving disputes, and sending transactional email (order confirmations, offer updates, security alerts). We don't sell your data, and we don't use it for advertising.

Who we share it with

• Stripe — payment processing and payouts, if you connect a payout account or make a purchase.
• Resend — transactional email delivery.
• Anthropic — AI-assisted item identification and listing descriptions; we send item descriptions and condition details, not account credentials.
• Neon — our database host.
• The counterparty in a transaction sees your organization name, listing details, and — during a dispute — messages you send in that thread.

How long we keep it

Transaction and invoice records are kept for the period required by UAE tax law (VAT records: 5 years). Account data is kept while your account is active. If you delete your account, we remove personally identifying fields (name, email, password) immediately but retain anonymized transaction records where legally required to — this is a standard, GDPR-recognized exception (Art. 17(3)(b)) for legal and tax obligations, not a way to keep tracking you.

Your rights

You can, at any time from Settings → Privacy & data:

• Access — download a copy of your account, assets, transactions, and messages as a JSON file.
• Rectify — update your name, email, and organization details directly.
• Erase — delete your account; see retention note above for what's legally kept.
• Object / restrict — contact us (below) and we'll act on it within 30 days.

Security

Passwords are hashed with bcrypt and never stored or logged in plain text. Traffic is served over HTTPS. We apply security headers (CSP, HSTS, frame protection), rate-limit authentication endpoints, and log sensitive account actions for audit purposes.

Cookies

We use only essential cookies — to keep you signed in and protect against cross-site request forgery. We do not use advertising or cross-site tracking cookies, and we don't sell or share your data with advertisers.

Analytics

We measure aggregate site usage — page views, which pages people land on, and which links they follow — using Vercel Web Analytics. It is cookieless: it sets no cookies, does not track you across other websites, does not build an advertising profile, and does not store your IP address. We use it only to see where people get stuck on our own site so we can fix it.

Contact

Questions or requests about your data: privacy@sellersouk.com, or Upcapital Global FZCO, Dubai Silicon Oasis, Dubai, UAE.