Privacy Policy
Last updated: 30 May 2026
This Privacy Policy explains how your personal data is collected, used and protected when you use DancarEsell ("the Service", "we", "us"). We are committed to handling your data responsibly and in line with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and — where applicable — the EU GDPR for users in the European Union.
1. Who we are (Data Controller)
DancarEsell is operated by Danca Richardo Emanuel, a self-employed sole trader trading as DancarEsell, based in the United Kingdom. For the purposes of UK GDPR, Danca Richardo Emanuel is the data controller responsible for your personal data.
If you have any questions about this policy or how we handle your data, you can reach us through our contact page.
2. Data we collect
We collect the following categories of personal data:
- Account information — your name, email address and profile photo, provided when you sign up (for example, through Google Sign-In).
- Inventory & sales data — the items, sales, inventory, expenses, refunds and notes you enter to track your reselling activity.
- Payment data — your subscription plan and billing status. Card details are collected and processed directly by Stripe; we never see or store your full card number.
- AI photo uploads — images you upload for AI photo valuation. These are sent for processing to generate an estimate and are not retained beyond what you choose to keep in your valuation history.
- Technical data — limited information such as IP address and request metadata, used for security, rate limiting and to keep the Service running.
3. How we use your data and our legal bases
We process your data only for the purposes below, relying on the following UK GDPR legal bases:
- To provide the Service (contract) — operating your account, storing your data, calculating profit, margins and reselling insights, and delivering AI valuations.
- To take payment (contract) — managing your subscription and billing through Stripe.
- To secure the Service (legitimate interests) — preventing abuse, fraud and ensuring reliability.
- To respond to you (legitimate interests) — handling messages you send us through our contact page.
- Legal compliance (legal obligation) — meeting our tax, accounting and other legal duties.
We do not sell your data or use it for advertising.
4. Third-party processors
We rely on a small number of trusted providers who process data on our behalf. Each is bound by their own data protection obligations:
- Stripe — payment and subscription processing. Card details are handled by Stripe and never touch our servers.
- Firebase / Google Cloud — authentication, database, and file storage. Your account and reselling data are stored here.
- Anthropic — powers AI photo valuation. Photos you submit for valuation are processed by Anthropic to generate an estimate.
- Resend — delivery of emails sent through our contact page.
- Vercel — application hosting and content delivery.
5. Cookies and local storage
We use essential cookies and browser local storage to keep you signed in, remember your preferences (such as currency and display settings), and operate the app. We do not use third-party advertising or tracking cookies. You can clear cookies and local storage in your browser settings, though doing so may sign you out and reset your preferences.
6. Data retention
We keep your personal data for as long as your account is active. If you delete your data (for example, from Settings > Clear all data) or ask us to delete your account, your data is removed, except where we are required to retain certain records (such as billing records) to meet legal, tax or accounting obligations.
7. International data transfers
Some of our processors (including Stripe, Google/Firebase, Anthropic, Resend and Vercel) may process data outside the UK and European Economic Area. Where data is transferred internationally, it is protected by appropriate safeguards such as the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, or equivalent approved mechanisms.
8. Your rights under UK GDPR
If you are in the UK or EU, you have the following rights over your personal data:
- Access — request a copy of the data we hold about you.
- Rectification — ask us to correct inaccurate or incomplete data.
- Erasure — ask us to delete your data ("right to be forgotten").
- Portability — receive your data in a portable format, or have it transferred.
- Objection — object to processing based on our legitimate interests.
- Restriction — ask us to limit how we use your data in certain circumstances.
To exercise any of these rights, reach us through our contact page. You can also access, correct and delete much of your data yourself from within the app at Settings > Clear all data. You have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk if you believe your data has been handled improperly.
9. Children's data
DancarEsell is not intended for children. The Service is only for users aged 18 or over, and we do not knowingly collect personal data from anyone under 18. If you believe a child has provided us with personal data, please contact us and we will delete it.
10. Changes to this policy
We may update this Privacy Policy from time to time. If we make significant changes, we will update the "Last updated" date at the top of this page. Your continued use of the Service after changes take effect means you accept the updated policy.
11. Governing law
This Privacy Policy is governed by the laws of England and Wales.
12. Contact
Questions about your privacy or this policy? Reach us through our contact page.