Privacy Policy

PartaVox is a workspace for industrial parts sellers. You capture label and product photos, review an identification, keep inventory, and, when you connect your own eBay seller account, stage and publish listings.

This policy is a U.S.-style business policy. It does not certify PartaVox under the GDPR, the UK GDPR, or any other privacy law, and it does not appoint a representative in the European Economic Area or the United Kingdom.

We collect the information needed to run the workspace you open, plus the product and customer records you choose to put in it.

Account

When you create an account we collect your email address, a password, and an optional full name. The password is handled by Supabase Auth. We do not copy it into the workspace database. If account confirmation is turned on, Supabase sends the confirmation message. We do not run a separate marketing email list.

Workspace

A workspace has a name and members with roles, such as owner or admin. You can also store a seller letterhead for quotation PDFs: legal name, address, contact email, phone, and tax registration. That letterhead is whatever the business enters. It is not the legal identity of PartaVox.

Photos, parts, and inventory

The workspace stores label, nameplate, and product photos; text read from those labels, which can include serial numbers and other printed codes; identification and verification results; SKUs; quantities; conditions; locations; stock movements; returns; listing templates; and listing drafts.

Customers and quotations

If you add customers or quotations, we store what you type: company name, contact name, email, phone, country, billing and shipping addresses, tax identifier, and notes. PartaVox does not email those customers.

Team invites

An owner or admin can save an email address and a role. We keep that invite and apply it when that email signs in. PartaVox does not send invite email.

eBay

If an owner or admin connects an eBay seller account, we store the eBay user id, username, marketplace, granted permission scopes, and OAuth tokens. The tokens are encrypted before they are saved. When you publish, listing text and product photos are sent to eBay so eBay can host the images and the offer. If order sync is on for that connection, we store the order id, status, line items (SKU, title, and quantity), and the eBay username of the buyer. We do not ask you to paste an eBay application Client ID or Client Secret into the workspace.

Usage preview

The billing screen counts items, identifications, verifications, and listing drafts for the current month. Paid plans are not enabled. We do not collect payment card numbers, and no payment processor is connected.

What this product does not collect

• Payment card or bank account details.
• WooCommerce store data. That connection is not available.
• Advertising or analytics cookies.
• A marketing mailing list.

We use the information to:

• Create your account and keep you signed in.
• Remember the workspace you selected.
• Store photos, inventory, quotations, and listing drafts.
• Read a label photo so the workspace can propose a part identity for a person to review.
• When verification search is configured, look up public pages for the manufacturer and part or type code.
• Send a listing to the eBay seller account you connected, when someone in the workspace chooses to stage or publish.
• Show monthly usage counts on the billing preview.
• Keep each workspace limited to its members and protect stored tokens.

We do not sell personal information, and we do not use it for cross-context advertising.

If you are in a place that requires a legal basis for each use, we rely on the following:

• Contract: providing the account, workspace, photos, inventory, and listings you asked for.
• Legitimate interests: separating workspaces, securing seller tokens, and running identification and optional verification so the product works as described.
• Consent, where a law requires consent and another basis does not already apply. The cookies we set are required to sign in and select a workspace. We do not set advertising cookies.

These sentences explain our approach. They are not a claim that PartaVox has been certified under the GDPR or any other regime.

We share information with the providers that run the features below. We do not sell it, and we do not share it with advertisers.

• Supabase stores accounts, sign-in sessions, and workspace data, including inventory, invites, quotations, customers, and listing records. Supabase may send an account-confirmation email when that setting is on.
• Cloudflare R2 stores photos. Files sit under a workspace path (workspace, item, then photo). They are not public.
• Google Gemini receives the label or nameplate photo and the instructions used to read it. Gallery photos are not sent for that step. The text Gemini returns, including serial numbers when they are printed on the label, is stored in the workspace.
• Serper is used only when a verification search key is configured. The query is the manufacturer plus the part number or type code, not your account email. If Serper is not configured, verification finishes without that search.
• eBay receives the authorization you approve on eBay, listing content and photos when you stage or publish, and category or item-specific lookups for the part you are listing. Order sync reads order data from eBay into the workspace.

WooCommerce is not connected. We do not send data to WooCommerce. No payment processor receives billing details, because checkout is not offered.

People in the same workspace can see the records their role allows, including customer and quotation details you enter. We may also disclose information if the law requires it, or to protect the service and the people who use it.

We keep account and workspace information while the account and workspace are in use. There is no separate automatic purge schedule in the product.

• Removing a photo marks it removed and deletes the stored file on a best-effort basis. A removed photo record can remain in the workspace.
• Disconnecting eBay deletes the saved seller connection in PartaVox and attempts to revoke the token at eBay. Listings and images already copied to eBay stay there until you change them on eBay.
• A team invite stays until someone accepts it or an owner or admin revokes it.
• Usage figures are counts of records already stored for the month. We do not keep a card file or a payment ledger.
• eBay can notify us when a marketplace account is closed. We acknowledge that notice. Removing the stored seller connection from that notice alone is not automatic yet. Disconnect the account in the workspace, or email us, if it should be removed.

If you ask us to close an account, we delete the personal information we control, except where we need to keep a record to finish a request you already made, meet a legal duty, or look into abuse.

Workspace records are available to signed-in members of that workspace. eBay seller tokens are encrypted before they are stored. Photo files stay in private storage. When a photo has to be copied to eBay, the app uses a short-lived link or an upload, then eBay hosts its own copy. The cookie that remembers your workspace is HTTP-only, and in production it is sent only over HTTPS.

These are ordinary safeguards for this product. They are not a security certification, and no method of storage or transmission is perfect.

We use cookies that the product needs in order to sign you in and open the right workspace.

• Sign-in session cookies. Supabase Auth sets these so your session stays signed in.
• pv_active_workspace_id. This HTTP-only cookie remembers the workspace you selected. It is limited to this site and kept for up to one year. In production it is marked secure.

We do not use analytics, advertising, or third-party marketing cookies. If you block cookies, sign-in and workspace selection will not work.

Inside the workspace you can update inventory, remove photos, edit customers and quotations, change team membership, and disconnect eBay.

You can ask us to access or delete personal information tied to your account. Email shafique@partavox.com. There is no button in the product that deletes an entire PartaVox account. We will respond and delete the account information we control.

A few limits apply:

• A shared workspace stays available to its other members. Asking to delete one login does not erase the workspace. An owner removes workspace content from the product.
• Customer records you entered stay until someone with access deletes them, or you ask us to delete an account we control.
• Listings and images already sent to eBay are controlled on eBay by the seller account that published them.

We do not sell personal information. If a U.S. state privacy law applies to you, you can still request access or deletion as described above. We do not sell personal information or share it for cross-context behavioral advertising, so there is no separate control for that.

Supabase, Cloudflare, Google, Serper, and eBay may process information in the United States and in other countries where they operate. This product does not pin one storage region in its configuration. This policy does not claim a particular transfer contract, such as Standard Contractual Clauses.

If you use PartaVox from outside the United States, your information will be processed in those locations.

PartaVox is a tool for businesses that sell industrial parts. It is not directed to children under 13, and we do not knowingly collect personal information from children. If you believe a child gave us personal information, email shafique@partavox.com and we will delete it.

When this policy changes, we will post the new version on this page and change the effective date. We do not send a separate email about policy changes. The product has no mailing list for that. The version on this page is the current one.

Email shafique@partavox.com for privacy questions, access requests, and deletion requests.