Sellu Privacy Policy
Last updated: 20 August 2026
Sellu (“Sellu”, “we”, “us”) is a browser extension that helps you manage your own Vinted and Wallapop listings, inventory, and supported buyer conversations from a single panel. This policy explains what the extension accesses, what we store, who we share it with, and your rights. It covers the Sellu browser extension and the Sellu backend at sellu.app.
Who we are
For any privacy question or request, contact us at [email protected].
Sellu is an independent tool and is not affiliated with, endorsed by, or sponsored by Vinted or Wallapop.
What Sellu accesses and why
Your marketplace sessions (stay in your browser). When you use Sellu on a Vinted or Wallapop page where you are signed in, the extension reads the session information that marketplace uses. On Vinted this includes the session cookie, user id, and CSRF/verification token; on Wallapop this includes the access token needed for Wallapop API requests. These values are used only on your device to load and manage your own items. Your marketplace sessions and tokens are never transmitted to Sellu or any third party.
Your listings, drafts, and photos. To provide bulk editing, relisting, inventory, and label features, Sellu reads and updates your own listing data and images through Vinted’s or Wallapop’s API.
Optional background removal sends only the image you select to Sellu’s hosted image-processing service at model.sellu.app and returns the processed image.
Your buyer/seller messages. For the inbox and messaging features, Sellu reads and drafts messages in your own Vinted conversations.
Your Sellu account. To sign in and sync your data, we process the email address and password you use to create or access your Sellu account.
What we store, and where
On your device. Your listing data, drafts, templates, quick replies, inventory, photos, and extension settings are cached locally in your browser (extension storage). This keeps the panel fast and lets it work offline. A Sellu sign-in token is also stored locally so you stay signed in.
On the Sellu backend (sellu.app). Your Sellu account (email) and the listing/inventory data you choose to sync are stored on our backend so your data is available across sessions. Communication with the backend uses encrypted HTTPS connections.
AI features
AI listing generation and AI message replies are optional and run only when you trigger them. When you do, the relevant listing text, photos, or message text is sent to the Sellu backend, which forwards it to our AI provider to generate the result. AI generation is included without a separate usage balance. Your inputs are processed only to fulfil your request and are not used to train AI models.
Who we share data with
We share data only as needed to run the service:
- Vinted and Wallapop — requests you initiate are sent to the relevant marketplace API from your browser, in the same way its website does.
- Our AI provider — only the content you submit to an AI feature, and only when you trigger it, as described above.
- Infrastructure providers that host the Sellu backend, under confidentiality obligations.
We do not sell your data. We do not use it for advertising, and we do not track your browsing. We do not collect data from websites other than Vinted, Wallapop, and the services listed in this policy. Sellu does not use your data to determine creditworthiness or for lending purposes.
Data retention
Locally cached data remains in your browser until you clear it, remove the extension, or sign out. Account and synced data is retained while your account is active. You can delete your synced data by deleting your account or contacting us; we will delete or anonymise it except where we must retain it to meet legal obligations.
Your rights
Depending on where you live (including under the EU/UK GDPR), you may have the right to access, correct, export, or delete your personal data, to object to or restrict certain processing, and to withdraw consent. Our legal bases for processing are performance of our contract with you (providing the service you request) and your consent (for optional AI features). To exercise any right, contact us at the address above. You also have the right to lodge a complaint with your local data protection authority.
Security
We use HTTPS for all communication with the Sellu backend and store your marketplace sessions only on your own device. No method of transmission or storage is completely secure, but we take reasonable measures to protect your data.
Children
Sellu is intended for marketplace sellers who meet the relevant marketplace’s minimum age requirement. It is not directed at children, and we do not knowingly collect data from anyone below that age.
Changes to this policy
We may update this policy from time to time. Material changes will be reflected by updating the “Last updated” date above and, where appropriate, notifying you in the app.