Privacy policy

Last updated October 25, 2026

SaleRoost lets you list things for sale from your phone onto your own online store. This page explains, in plain words, what we collect, why, who else sees it, and what you can do about it. Questions: [email protected].

The short version

• We collect what we need to run your account and your store, and nothing to sell or advertise with.
• Buyers see your city, never your street address, until they have paid for a pickup. If you ship an item, your address is the return address on its label.
• We don’t sell your information, and we don’t use advertising trackers.
• You can delete your account from the app at any time.

What we collect from sellers

• Account: your name, email address and password. We store the password only as a salted scrypt hash, never the password itself.
• Sign-in security: a random key for each phone or browser you sign in from, the sign-in codes we email you (stored only as hashes and kept for a short time), and, if you turn it on, a key that only your phone’s fingerprint or face unlock can release. We record recent failed sign-ins to block password guessing.
• Your store: store name, web address, description, logo, your name as buyers see it, contact email, and your pickup address.
• Your pickup address: we check that it’s a real address. Buyers see only its city. The full address is shown only to a buyer who has paid for a pickup order, on their order page and in their payment email.
• Listings: the photos, descriptions, prices and other details you add. If you use “talk to list”, your voice recording is sent for transcription and deleted once it has been turned into text.

What your store collects from buyers

• Orders and messages: the name, email, phone and address a buyer enters to buy, make an offer, or send a message, so the seller can complete the sale.
• Store visits: each store counts its own page views and clicks so its seller can see which items get attention. Visitors are counted by a random ID tied to the store’s session cookie, not by name. This stays inside that store and isn’t shared with advertisers.
• Cookies: stores use cookies to keep a shopping bag, keep buyers signed in if they make an account, and protect forms. No advertising cookies.

Who else sees your information

We use a few service providers, only to run SaleRoost:

• Cloudflare carries traffic to our websites and stores.
• Resend sends our emails (sign-in codes, password resets, order emails).
• Google Maps Platform suggests addresses while you type your pickup address, and the U.S. Census Bureau geocoder checks typed addresses. Only the address text you type is sent.
• OpenAI turns “talk to list” recordings into text and drafts listings, when you use that feature.
• Stripe processes card payments for stores that connect it, and your SaleRoost plan if you buy one. Card details go to Stripe, never to us.
• Shippo buys the shipping labels when you ship an item. It receives the buyer’s name, email, phone and delivery address, and your pickup address as the return address. Your pickup address is printed on the label as the return address, so a buyer who receives a package can see it.
• Google and Apple let you sign in without a password. They tell us a stable ID and, if you allow it, your name and email (Apple may give us a private relay address instead of your real one). We don’t get your Google or Apple password.
• Google Firebase Cloud Messaging delivers phone alerts (a sale, an offer, a message) to your phone. It receives your phone’s alert address and the alert text.
• Sentry and PostHog help us fix problems and see which parts of the app are used. They get crash reports and simple events from the SaleRoost app. We strip out sign-in tokens, photos, recordings and what you say before anything is sent.

We may also share information if the law requires it, to protect people from fraud or harm, or as part of a sale or merger of SaleRoost (in which case this policy keeps applying).

On this website

While you set up your store, this site keeps your progress and a random browser key in your browser’s local storage, so a reload returns you to the same step. It has no analytics or advertising scripts.

How long we keep it

• Your account and store data stay while your account exists.
• When you delete your account, your account, sign-ins and approved devices are deleted right away, and we close your store and remove its listings. Nightly backups are kept for 30 days and then deleted.
• Sign-in and password-reset codes expire within minutes and are kept only as hashes.

Your choices

• See and change: your name, store details and pickup address are in the app under Account.
• Delete: Account → Delete account, in the app. Or email us and we’ll do it.
• Copy: email us for a copy of your data or your store’s listings.
• Sign out other devices: Account → Security → Signed-in phones.

Depending on where you live (for example California, or the EU and UK), you may have further rights, such as to access, correct, delete or move your data, or to object to how we use it. Email [email protected] and we’ll respond within 30 days. We don’t sell or “share” personal information as California law defines it.

Security

Passwords are hashed, sign-ins need an emailed code on new devices, store connection secrets are encrypted, and everything travels over HTTPS. No system is perfectly secure; if something goes wrong that affects you, we’ll tell you.

Children

SaleRoost is for adults. You must be 18 or older to open an account.

Changes

If we change this policy, we’ll update the date above, and for important changes we’ll email account holders before they take effect.

Contact

SaleRoost · [email protected]