Privacy Policy

At OpenSells ("we", "us" or "the platform"), we take your privacy seriously. This policy describes what data we collect, how we use it and your rights over it, in accordance with the General Data Protection Regulation (GDPR) and applicable Spanish law.

1. Data Controller

OpenSells · opensellscontact@gmail.com · Spain

2. Data We Collect

• Account data: name, email address and password (encrypted).
• Usage data: searches performed, leads viewed, emails generated and general platform activity.
• Payment data: managed entirely by Stripe. OpenSells does not store card details.
• Technical data: IP address, browser type, operating system and session cookies.

3. Purpose and Legal Basis

• Providing the contracted service (contract performance — Art. 6.1.b GDPR).
• Payment and billing management (legal obligation — Art. 6.1.c GDPR).
• Service communications and updates (legitimate interest — Art. 6.1.f GDPR).
• Platform improvement through usage analytics (legitimate interest).

4. Data Retention

We retain your data while your account is active. After cancellation, we delete it within 30 days, unless the law requires longer retention (e.g., billing data for 5 years).

5. Gmail API Usage (Google)

OpenSells allows users to connect their Gmail account to send prospecting emails directly from the platform. Our use of Gmail access is strictly limited to:

• Sending emails on behalf of the user only when explicitly requested by them.
• Reading the user's email address to identify the connected account.

OpenSells does not read, store or share the content of emails or any other mailbox data. The Gmail access token is stored in encrypted form and used solely for the functions described above. You can revoke access at any time from your Google account settings.

OpenSells' use of information received from Google APIs complies with the Google API Services User Data Policy, including the Limited Use requirements.

6. Third Parties and Sub-processors

• Stripe — payment processing (USA, standard contractual clauses).
• Brevo (Sendinblue) — transactional email sending (EU).
• Render — server infrastructure (USA, standard contractual clauses).
• Vercel — website hosting (USA, standard contractual clauses).
• Google (Gmail API) — sending emails on behalf of the user (USA, subject to Google's Terms of Service).

7. Your Rights

You may exercise your rights of access, rectification, erasure, portability, restriction and objection at any time by writing to opensellscontact@gmail.com. You also have the right to lodge a complaint with the Spanish Data Protection Agency (aepd.es).

8. Cookies

We use strictly necessary cookies for session functionality. We do not use advertising or third-party tracking cookies. See our Cookie Policy for details.

9. Changes to This Policy

If we make material changes, we will notify you by email or via a platform notice at least 15 days in advance.