Privacy & Data Protection

Who processes your data / contact

The data controller for customer support is the seller using the tool. The technical operator of the support tool is:

What data we process

We process the following data solely to prepare and handle support replies:

• Allegro messages — buyer messages and seller replies.
• Allegro offer and order data (offer title, parameters, order number).
• Baselinker order & customer data: name, email, phone, address and order history.
• Allegro OAuth tokens and Baselinker API key (technical / credential data).

Storage & security

• PostgreSQL database hosted on Railway (EU region).
• Tokens encrypted at rest (Fernet).
• Application access protected by authentication (HTTP Basic Auth).

Subprocessors (providers)

We rely on the following providers (subprocessors):

• Anthropic — AI draft generation. The message content is sent to the model to draft a reply; per the provider's API terms, this data is not used to train its models.
• Railway — application and database hosting.
• Allegro and Baselinker — source APIs (messages, orders, customer data).

Purpose & legal basis

Delivering the seller's customer support (answering enquiries, complaints, returns, deliveries). Legal basis: legitimate interest of the controller and performance of a contract.

Retention

Data is kept for as long as the service is active. Deletion occurs on request or upon termination.

Your rights (GDPR)

Under the GDPR you have the right to: access, rectification, erasure, restriction of processing, objection, data portability.

To exercise these rights, write to the contact email listed above.

Our commitments

• No resale of data.
• Data stays within the scope of the seller's account.
• Human validation before every send — the AI proposes, a human approves.

Note