Privacy Policy

Who we are

Sell On Hand is inventory and checkout software for people who sell in person: vendors at markets, fairs, parties, and pop-up events. In this policy "we" and "us" mean Sell On Hand.

This policy covers the Sell On Hand website, the vendor application, and the public vendor pages we host. The legal operator behind Sell On Hand is named at the bottom of this page.

Two kinds of people, handled differently

Read this part first, because the rest of the policy depends on it.

• Vendors are our customers. They create an account, list what they sell, and take payments. We decide how their account data is handled, so we're responsible for it.
• Shoppers are the vendor's customers. Their details reach us only because a vendor typed them in, imported them from a spreadsheet, or scanned a paper form. For that information the vendor decides what's collected and why. We only hold and process it on the vendor's instructions. If you're a shopper and want your details corrected or removed, contact the vendor you gave them to. You can also write to us at support@sellonhand.com and we will pass the request on and act on it.

What we collect from vendors

• Account information: email address, name, and basic profile details from Google sign-in. We never receive or store your Google password.
• Business profile: display name, bio, online shop link, and any social links you choose to publish on your public page.
• Products and sales: the items you list, their prices and stock counts, and a record of each sale you complete, cash or card.
• Payout status: your Stripe account identifier and whether Stripe has cleared you to receive payouts. We don't hold your bank account number, tax identification number, or the identity documents you give Stripe. Those stay with Stripe.
• Usage data: which pages of the app were viewed and when, so we can see what's used and what's broken.

What vendors put in about shoppers

Vendors can keep a contact list. Depending on what they enter, that can include a shopper's name, phone number, email address, purchase history, and free-text notes. Contacts can be typed in, imported from a spreadsheet export, or read from a photograph of a paper sign-up form the shopper filled in at an event. Those photographs are stored so the vendor can check them against what was read.

We don't use this information for our own purposes. We don't market to it, we don't build profiles from it, and we don't share it between vendors. It's visible to the vendor who entered it and to the small number of our staff who need access to run and support the service.

Payments

Card payments are processed by Stripe. Card numbers, security codes, and bank details are entered on Stripe's own pages and are never sent to or stored on our servers. What we receive back from Stripe is the outcome of a payment: whether it succeeded, the amount, and an identifier we can use to look it up.

When a shopper pays a vendor by card, Sell On Hand is the merchant that settles the payment and then transfers the vendor's share to their connected Stripe account. Stripe handles that money movement under its Connected Account Agreement and its own privacy policy.

Cash sales are recorded in the app and never touch Stripe at all.

Text messages

Sell On Hand sends text messages through our telephony provider (Twilio) in exactly two cases, each with its own opt-in a shopper checks themselves at checkout. A shopper with an account can also turn vendor updates on or off per vendor in their shopper profile. Both checkboxes are unchecked by default. A public replica of the purchase-receipt checkbox is at sellonhand.com/sms-consent. Vendor follow-up consent is documented at sellonhand.com/sms-marketing-consent.

• Purchase receipts. A shopper who wants a text receipt checks that box at checkout and types their own number. Typically one message per purchase.
• Vendor follow-up updates. A shopper who wants to hear from that vendor again checks a separate box at checkout ("also text me updates from this vendor") and types their own number. Only shoppers who opted in, by checking this box at checkout or by turning on that vendor under Updates from stores in their shopper profile (only for a number they typed in at that vendor's checkout), are ever sent a follow-up text throughSell On Hand. Frequency varies by vendor and is typically a few messages per month.

Message and data rates may apply. Reply STOP to opt out of further texts from that number, or HELP for help.

Vendors can also keep a broader contact list built by typing numbers in, importing a spreadsheet, or scanning a paper sign-up form (see the section above). Those contacts are never texted through Sell On Hand's Twilio number, because we can't verify that consent ourselves. A vendor who wants to reach that list can open individual texts on their own phone instead, which doesn't use our platform number.

We do not sell or share your SMS opt-in data or personal information with third parties for marketing purposes. We do not sell mobile phone numbers. Numbers are used only to deliver the messages described here and to operate and support the service. We don't send marketing texts of our own to shoppers.

Cookies and tracking

We use a session cookie to keep vendors signed in. It's necessary for the app to work and it clears when you sign out. We record page views to understand how the product is used. We don't run advertising cookies and we don't sell data to advertisers.

Who we share with

We don't sell personal information. We share it only with the service providers that make the product run, and only as much as each one needs:

• Stripe: payment processing and vendor payouts
• Supabase: database, sign-in, and file storage
• Vercel: website and application hosting
• Twilio: text message delivery
• Google: sign-in, if a vendor chooses it

We will also disclose information where the law requires it, and to a successor if the business is sold, in which case this policy continues to apply until you're told otherwise.

How long we keep things

Account and sales records are kept while the account is open and for a period afterwards where we need them for tax, accounting, or dispute records. Contact lists and scanned forms are kept until the vendor deletes them or closes the account. When an account is closed, we delete or anonymise what we're not required to keep.

Security

Traffic runs over HTTPS and data is encrypted at rest. The database enforces row-level security, so a vendor's records are reachable only by that vendor. Payout status is written only by our servers and can't be edited from a browser. No system is perfect, and we don't claim otherwise, but we would rather tell you what we actually do than make a vague promise.

Your choices

Vendors can, at any time:

• See and edit their profile, products, sales, and contacts
• Delete contacts and scanned forms
• Ask us for a copy of the data we hold on the account
• Ask us to close the account and delete it

Write to support@sellonhand.com and we'll handle it. Depending on where you live you may have further rights, including the right to object to processing or to complain to a regulator.

Children

Sell On Hand is a business tool and isn't directed at children. We don't knowingly collect information from anyone under 13. If you believe we have, tell us and we'll remove it.

Changes

If we change this policy we'll update the date at the top of the page. If a change materially affects vendors we'll say so in the app rather than rely on you noticing a date.

Contact

Sell On Hand
A product of Data Day Studio, a DBA of Johnny Outlaw, LLC
2404 Church Street, Greenville, TX 75401
support@sellonhand.com