Privacy Policy

1. WHAT INFORMATION DO WE COLLECT?

Information you provide may include your name, email, telephone number, contact preferences, account and authentication information, pickup address or location, and information provided for support. We also handle item descriptions, photographs, condition details, offers, information requests and responses, reviews, accepted pricing, transaction records, payment and refund status, pickup verification and dispute information.

Guest buyers provide information needed for payment, receipts, collection and support even though they do not have an account.

Payments and payout onboarding use Stripe. Information entered into Stripe payment and identity-verification interfaces is handled through that integration. OnSell uses the transaction references, amounts, payment, refund, payout and verification information needed to administer the transaction. The precise fields exchanged depend on the integration. Do not send card security codes, full card details or identity documents through a listing or routine support request. Stripe's privacy notice is available at https://stripe.com/au/privacy.

If you use Google or Apple sign-in, the information available depends on the provider and the permissions you grant. Camera or photo-library access supports uploading item images when you choose to use that feature. Listing and pickup locations may be entered or selected using location services. Device permissions can be managed in your device settings. Location permission for a listing is not permission for continuous background monitoring.

Technical information may include IP address, browser or device characteristics, logs, timestamps, interactions, error information and relevant campaign or referral identifiers. Technical identifiers can become personal information when linked to other records; they are not necessarily anonymous.

Other participants and service providers may supply information relevant to an item, payment, verification, report or dispute.

Sensitive information is not ordinarily needed for item listings. Photographs, verification processes or support submissions can nevertheless contain sensitive information. Avoid unnecessary personal details and obtain permission before sharing another person's information. We handle sensitive information in accordance with applicable requirements rather than promising that it can never be received.

2. HOW DO WE PROCESS YOUR INFORMATION?

We use relevant information to create and authenticate accounts; display and manage listings and offers; handle structured information requests; provide payment links and transaction records; coordinate pickup information and code verification; administer earnings, refunds and disputes; provide support; investigate fraud and safety reports; maintain and improve the service; and comply with applicable legal and recordkeeping obligations.

We send operational messages such as offer, payment, pickup, security and support notices as needed for the service. Marketing is separate and follows your opt-in choices. Accepting the Terms does not itself subscribe you to promotional messages. You may unsubscribe from marketing at any time using the message's unsubscribe option or by contacting support. Operational notices for an active transaction may continue.

We use relevant analytics and campaign information to understand website use, subscriptions and marketing effectiveness, subject to available controls and applicable requirements. We do not treat this notice as unrestricted permission for unrelated uses.

3. WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?

Listing details and photographs are visible through the relevant listing flow. An authorised OnSeller may reproduce those materials on an external marketplace to advertise the item. External marketplace visibility and handling are governed by that marketplace's rules and privacy policy. Avoid including private contact information in public listing photos or text.

The selected OnSeller receives information needed to arrange the sale. After payment, the buyer receives the Seller contact and pickup details needed to collect the item, together with transaction and verification information. We share relevant transaction and dispute information with affected participants when needed for fulfilment, support or resolution. Users must not reuse another participant's details for unrelated marketing or harassment.

We use service providers for payment and verification, hosting and storage, authentication, email, analytics, location selection, campaign links and authorised technical support. Relevant services include Amazon Web Services for app hosting and storage; Firebase for authentication, notifications and analytics where used; Stripe; Google services for sign-in, location selection or analytics where used; Apple sign-in; email delivery or subscription services such as SendGrid or MailerLite where enabled; AppsFlyer or OneLink campaign links; and AI assistance where the optional feature is used. A provider is not necessarily used in every channel or transaction.

Providers may have their own legal obligations, policies and subprocessors. We do not assert that every recipient acts only on OnSell's instructions or can never share information onward. We limit sharing to relevant purposes and apply appropriate safeguards under applicable law.

The production-named AWS database and upload storage buckets reviewed for OnSell are configured in Sydney, Australia. This does not mean all information or processing remains in Australia. Other service providers, backups, subprocessors and authorised support access may involve overseas handling. The countries involved depend on the provider, service and configuration. We take reasonable steps required by applicable law for overseas handling. Contact support for further information about the providers relevant to your interaction.

We may disclose relevant information where required or authorised by law, to respond to a lawful request, protect rights or safety, investigate fraud or resolve a dispute. A business transfer may involve relevant records subject to applicable privacy requirements and appropriate safeguards.

4. DO WE USE COOKIES AND OTHER TRACKING TECHNOLOGIES?

Website cookies and similar technologies can support site operation and measurement. Google Analytics is used for website measurement where enabled. Campaign and QR links may use AppsFlyer or OneLink attribution to measure link activity. Email services may measure opens or clicks where those functions are enabled.

Website cookies, email pixels and campaign links are different technologies. Rejecting website cookies does not necessarily stop every email or link-based measurement. Website Google Analytics stays off until you select Allow analytics. Use Cookie preferences in the website footer to allow or reject analytics, or change a previous choice. Browser, device and email settings offer separate controls. See the Cookie Policy for the website storage inventory and available controls.

5. DO WE OFFER ARTIFICIAL INTELLIGENCE-BASED PRODUCTS?

The optional AI description feature sends three item photographs to a third-party AI service to suggest a listing description. OnSell does not send your name, email address, telephone number or other account details as inputs to that feature. Personal information visible within a photograph is nevertheless included in the image sent for processing.

Using this feature is optional. You can write your own description instead. Before using AI assistance, remove or obscure faces, identity documents, addresses, financial details and other unnecessary personal or sensitive information. Only submit photographs you have permission to use and share.

The service may process photographs and generated descriptions outside Australia. Our AI integration uses a paid service. Under the provider's paid-service terms, submitted photographs and generated responses are not used to improve its products or general AI models as part of ordinary paid-service processing. This does not mean there is no retention: the provider may retain inputs and responses for limited safety, abuse-prevention and legal purposes, and request or interaction storage may apply according to the API and settings used. Technical usage information may also be processed to operate the service. We do not promise immediate deletion or Australia-only processing.

AI suggestions can be inaccurate or miss defects. The Seller or OnSeller must review and correct the description before publishing it, disclose known faults and avoid unsupported claims. AI assistance does not verify authenticity, condition, value or safety and does not decide whether an item may be sold. Contact support@onsell.com.au with questions about this processing.

6. HOW LONG DO WE KEEP YOUR INFORMATION?

Retention depends on the purpose and applicable obligations, rather than the lifetime of an account alone. Relevant account and listing information is used while needed for the service. Transaction, payment, payout, refund, tax, fraud, support and dispute records may be retained after account closure or completion where needed to meet a legal obligation, resolve a matter or protect legitimate rights.

We do not keep every piece of information indefinitely. When information is no longer needed and there is no applicable retention requirement, we take reasonable steps to delete or de-identify it. Backup copies may remain until their normal replacement or deletion cycle; retained backup information should be protected and not used for unrelated purposes. Guest-buyer records follow the same purpose-based approach.

Closing an account or withdrawing marketing consent does not automatically erase all legally required transaction records.

7. HOW DO WE KEEP YOUR INFORMATION SAFE?

We take reasonable steps to protect personal information against misuse, interference, loss and unauthorised access, modification or disclosure, having regard to the information and risks involved. No internet transmission or storage method can be guaranteed completely secure.

Keep account credentials and pickup codes secure and report suspected compromise to support. This does not transfer all security responsibility to you. We assess suspected incidents and meet notification or response duties where applicable.

8. DO WE COLLECT INFORMATION FROM MINORS?

Accounts, selling services and guest purchases are for people aged 18 or older. We do not intentionally invite minors to use those services. If you believe a minor has supplied information, contact support. We will assess the situation, restrict inappropriate use and remove information where appropriate, subject to necessary legal, safety and transaction retention. Parental permission is not an exception to the 18+ service rule.

9. WHAT ARE YOUR PRIVACY RIGHTS?

Contact support to request access to or correction of personal information, ask about retention or request deletion or account closure. We may make reasonable identity checks to protect information. Requests are assessed under applicable law and the circumstances; account deletion is not an unconditional right to erase records that must be retained.

You may change relevant device permissions and unsubscribe from marketing. Withdrawal of consent can affect a feature that depends on that permission, without cancelling unrelated legal rights or obligations.

For a privacy complaint, describe what happened and the outcome you seek. We will assess and respond within a reasonable time. If we cannot fulfil a request, we will explain the applicable reason where appropriate and available complaint options.

10. CONTROLS FOR DO-NOT-TRACK FEATURES

Browser Do Not Track signals are different from cookie preferences, device permissions and email marketing choices. Do not assume a browser signal alone stops all processing. Use the controls available for the relevant technology or contact support. On this website, your explicit Cookie preferences choice controls loading of Google Analytics. We do not promise that a browser signal changes every external service's handling.

11. DO OTHER REGIONS HAVE SPECIFIC PRIVACY RIGHTS?

OnSell's current service is focused on supported Australian locations. Rights and obligations depend on the applicable privacy law, including whether the Privacy Act 1988 and Australian Privacy Principles apply to OnSell or the particular activity. This notice does not certify statutory coverage solely from business size or claim compliance with every overseas regime.

Where applicable, you may raise an unresolved complaint with the Office of the Australian Information Commissioner: https://www.oaic.gov.au/privacy/privacy-complaints. Other rights or complaint routes may apply to the circumstances. Contacting support does not prevent you from using an available legal remedy.

12. DO WE MAKE UPDATES TO THIS NOTICE?

We may update this notice to reflect service, provider or legal changes. The date at the top identifies this version. We will give appropriate notice of material changes and obtain additional permission where required.

13. HOW CAN YOU CONTACT US ABOUT THIS NOTICE?

ONSELL PTY LTD, trading as OnSell

Email: support@onsell.com.au

Public correspondence: Suite 1208/530 Little Collins Street, Melbourne VIC 3000, Australia.

14. HOW CAN YOU REVIEW, UPDATE, OR DELETE THE DATA WE COLLECT FROM YOU?

Use available account settings or email support@onsell.com.au with your request. Guest buyers may use the same email route and provide the relevant transaction reference. You do not need to use a separate request portal to contact us. Requests are handled as explained in sections 6 and 9.