Sellu Privacy Policy
Last updated: 22 July 2026
Sellu (“Sellu”, “we”, “us”) is a browser extension that helps you manage your own Vinted listings, inventory, and buyer conversations from a single panel. This policy explains what the extension accesses, what we store, who we share it with, and your rights. It covers the Sellu browser extension and the Sellu backend at sellu.app.
Who we are
For any privacy question or request, contact us at privacy@sellu.app.
Sellu is an independent tool and is not affiliated with, endorsed by, or sponsored by Vinted.
What Sellu accesses and why
Your Vinted session (stays in your browser). When you use Sellu on a Vinted page you are signed in to, the extension reads your existing Vinted session — the session cookie (checked only to detect that you are logged in, and to detect logout so we can clear cached data) and a CSRF/verification token that the Vinted page itself uses. These are used only on your device to make requests to Vinted’s own API on your behalf — for example to load, edit, relist, or message about your own items. Your Vinted session and token are never transmitted to Sellu or any third party.
Your listings, drafts, and photos. To provide bulk editing, relisting, inventory, and label features, Sellu reads and updates your own listing data and images through Vinted’s API.
Your buyer/seller messages. For the inbox and messaging features, Sellu reads and drafts messages in your own Vinted conversations.
Your Sellu account. To sign in and sync your data, we process the email address and password you use to create or access your Sellu account.
What we store, and where
On your device. Your listing data, drafts, templates, quick replies, inventory, photos, and extension settings are cached locally in your browser (extension storage). This keeps the panel fast and lets it work offline. A Sellu sign-in token is also stored locally so you stay signed in.
On the Sellu backend (sellu.app). Your Sellu account (email) and the listing/inventory data you choose to sync are stored on our backend so your data is available across sessions. Communication with the backend uses encrypted HTTPS connections.
AI features
AI listing generation and AI message replies are optional and run only when you trigger them. When you do, the relevant listing text, photos, or message text is sent to the Sellu backend, which forwards it to our AI provider to generate the result. Generation uses the AI credits included in your Sellu plan. Your inputs are processed only to fulfil your request and are not used to train AI models.
Who we share data with
We share data only as needed to run the service:
- Vinted— requests you initiate are sent to Vinted’s own API from your browser, in the same way Vinted’s website does.
- Our AI provider — only the content you submit to an AI feature, and only when you trigger it, as described above.
- Infrastructure providers that host the Sellu backend, under confidentiality obligations.
We do not sell your data. We do not use it for advertising, and we do not track your browsing. We do not collect data from websites other than Vinted and the services listed in this policy. Sellu does not use your data to determine creditworthiness or for lending purposes.
Data retention
Locally cached data remains in your browser until you clear it, remove the extension, or sign out. Account and synced data is retained while your account is active. You can delete your synced data by deleting your account or contacting us; we will delete or anonymise it except where we must retain it to meet legal obligations.
Your rights
Depending on where you live (including under the EU/UK GDPR), you may have the right to access, correct, export, or delete your personal data, to object to or restrict certain processing, and to withdraw consent. Our legal bases for processing are performance of our contract with you (providing the service you request) and your consent (for optional AI features). To exercise any right, contact us at the address above. You also have the right to lodge a complaint with your local data protection authority.
Security
We use HTTPS for all communication with the Sellu backend and store your Vinted session only on your own device. No method of transmission or storage is completely secure, but we take reasonable measures to protect your data.
Children
Sellu is intended for Vinted sellers who meet Vinted’s minimum age requirement. It is not directed at children, and we do not knowingly collect data from anyone below that age.
Changes to this policy
We may update this policy from time to time. Material changes will be reflected by updating the “Last updated” date above and, where appropriate, notifying you in the app.