Service provider: Individual Entrepreneur Bogdan Shapovalov (Georgia), trading as Sellsquatch
Contact: support@sellsquatch.com
This policy explains how Individual Entrepreneur Bogdan Shapovalov (Georgia), trading as Sellsquatch ("Sellsquatch", "we") handles personal data about visitors of sellsquatch.com, people who sign up for and use the Sellsquatch service, and people who contact us.
Data in your customers' workspaces. Contacts, deals, messages and other data that our customers store in Sellsquatch are controlled by those customers. For that data we act only as a processor under our Data Processing Agreement. If you are, for example, a client of a business that uses Sellsquatch, please contact that business about your data. We will forward requests we receive to the right customer.
1. What we collect and why
| Data | Purpose | Legal basis (GDPR art. 6) |
|---|---|---|
| Sign-up and account data: name, company, work email, workspace address, password (stored only as a hash), phone if given | Create and run your workspace, sign you in, send service messages | Contract (6(1)(b)) |
| Billing data: plan, invoices, billing country, VAT ID; card details are handled by the payment partner and never reach our servers | Charge for the service, keep accounting records | Contract; legal obligation (6(1)(c)) |
| Usage and security data: IP address, browser, sign-in times, actions in the workspace audit log | Security, fraud and abuse prevention, troubleshooting, product improvement in aggregate | Legitimate interests (6(1)(f)) |
| Support communications: tickets and emails | Answer your questions, fix problems | Contract; legitimate interests |
| Consent records: which document you accepted, when, from which IP | Prove what was agreed | Legal obligation; legitimate interests |
| Marketing preferences: whether you agreed to receive news and offers | Send product news and offers | Consent (6(1)(a)), withdrawable at any time |
We do not sell personal data and do not use it for advertising profiles. The marketing site sets no analytics or advertising cookies; see the Cookie Policy.
2. Who receives the data
We use a small number of service providers to run Sellsquatch, for example hosting, email delivery and payment processing. They act on our instructions under data processing contracts. The current list, with locations, is on the sub-processors page. We also disclose data when the law requires it, and to a successor if the service is transferred, with notice to you.
3. Where the data is stored and international transfers
The service and its databases run on servers in the European Union. Sellsquatch is operated from Georgia, and some providers are located outside the European Economic Area (for example in the United States or Canada). Where personal data is transferred to a country without an adequacy decision, we rely on the European Commission's Standard Contractual Clauses or, for US providers certified under it, the EU-US Data Privacy Framework.
4. How long we keep it
- Account data: while the workspace exists. After a subscription ends or a trial expires, the workspace is kept for 90 days and may then be deleted together with its data.
- Backups: kept in an encrypted rotation (daily copies for 2 weeks, weekly for 2 months, monthly for 6 months) and then overwritten. Deleted data disappears from backups when the last copy that contains it expires.
- Invoices and billing records: as long as tax and accounting law requires (usually up to 6 years).
- Security logs: up to 12 months. Consent records: for as long as we need to prove the consent, plus the limitation period.
- Support emails: up to 3 years after the last message.
5. Your rights
Depending on the law that applies to you (including the GDPR, the UK GDPR, the Law of Georgia on Personal Data Protection and US state privacy laws), you can ask us to give you access to your personal data, correct it, delete it, restrict or object to its processing, and receive it in a portable format. Where processing is based on consent, you can withdraw consent at any time without affecting earlier processing. To use a right, email support@sellsquatch.com from the address linked to your account. We answer within one month and may ask you to confirm your identity.
You can also complain to a data protection authority, for example the authority in your country of residence in the EU or the Personal Data Protection Service of Georgia. We would appreciate the chance to resolve your concern first.
6. Security
We protect data with encrypted connections (TLS), a separate database for every workspace, hashed passwords, optional two-factor sign-in, role-based permissions, audit logs and regular backups. More on the Security page. If a breach affects your personal data, we will notify you and the competent authorities as the law requires.
7. Children
Sellsquatch is a business service and is not directed at children under 16. We do not knowingly collect their data.
8. Changes
We will post updates here and change the date at the top. For material changes we will also notify account owners by email.
9. Contact
Questions about privacy: support@sellsquatch.com.