← Back to Sign Up

Privacy Policy

Last updated: May 2026

Gleamz ("we," "us," or "our") is an AI-powered platform that helps you list and sell second-hand items. This Privacy Policy explains how we collect, use, share, and protect your personal information when you use our website, mobile app, and related services (collectively, the "Service").

By using Gleamz, you agree to the practices described in this policy. If you have any questions, please reach out at support@gleamz.ai.

1. Information We Collect

Information You Provide

  • Account Information: When you sign up for our waitlist or create an account, we collect your email address and, optionally, your name.
  • Item Data: Photos, videos, voice recordings, and descriptions you submit so we can generate listings and pricing suggestions.
  • Communications: Messages you send through the Service (e.g., to buyers) or to our support team.

Information Collected Automatically

  • Usage Data: Pages visited, features used, actions taken, timestamps, and referring URLs.
  • Device & Technical Data: IP address, browser type, operating system, device identifiers, and similar information for security and analytics.
  • Cookies & Tracking Technologies: We use cookies and similar tools to remember your preferences, analyze traffic, and improve the Service.

Marketplace Data Received

When you connect a third-party marketplace, Gleamz receives the listing, order, buyer, message, and inventory data necessary to operate the Service for you. We process this data only to deliver Gleamz features — for example, listing creation, inventory sync, fulfilment support, and message drafting — on your behalf. We do not use it for our own marketing, do not sell it, and do not use it to train AI or machine-learning models. See “AI Training Exclusions” below.

2. How We Use Your Information

We use the information we collect to:

  • Provide, operate, and improve Gleamz.
  • Generate listings, pricing suggestions, and buyer messages on your behalf.
  • Communicate with you about your account, items, and our services.
  • Send marketing emails (you can unsubscribe at any time).
  • Detect fraud, abuse, and security threats.
  • Comply with legal obligations.

AI Processing

Gleamz uses artificial intelligence to provide core features of our Service. When you submit items, the following AI processing occurs:

  • Voice Transcription: Your voice recordings are transcribed to text using AI speech recognition.
  • Image Analysis: Photos are analyzed to identify item details, condition, and relevant attributes.
  • Listing Generation: AI generates titles, descriptions, and category suggestions based on your item data.
  • Pricing Suggestions: Market research and pricing recommendations are generated using AI analysis.
  • Buyer Communication: AI assists in drafting responses to buyer questions (always subject to your approval).

All AI-generated content is presented to you for review before any action is taken. You maintain full control over what gets published.

3. How We Share Your Information

We do not sell your personal data. We may share information with:

  • Service Providers: Companies that help us run Gleamz (hosting, AI processing, analytics, email delivery). They only access data as needed to perform their services and are bound by confidentiality obligations.
  • Marketplaces:When you connect a selling platform, we share the listing details necessary to publish your items and receive order, buyer, and message data needed to fulfil sales. Buyer information from marketplaces is used only to operate the Service for you (messaging, fulfilment, support); we do not sell it, share it for marketing, or use it to train AI models. Etsy buyer email is requested only when required to complete a transaction and is handled per Etsy's API Terms. Buyer data is deleted when you disconnect the marketplace or delete your account, subject to legal retention requirements. The supported marketplaces, their controllers, and supervisory authorities are listed below.
  • Legal & Safety: If required by law, regulation, legal process, or to protect the rights and safety of Gleamz, our users, or others.
  • Business Transfers: In connection with a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

Connected Marketplaces & Controllers

Each connected marketplace acts as a separate data controller for the data you and your buyers share with it. Where Gleamz also processes that data on your behalf, it does so as a processor for you, subject to the relevant marketplace's API terms.

  • Etsy— Etsy Ireland UC (Irish Data Protection Commission).
  • Allegro— Allegro sp. z o.o. (Polish UODO); payment rails via PayU and Allegro Pay.
  • Tradera— Tradera AB (Swedish IMY).
  • StockX— StockX LLC (United States); see StockX's privacy notice for the regional payment processors used.
  • Bonanza— Bonanzle, Inc. (United States).
  • OLX— the regional entity for the country you connect (for example, OLX Polska sp. z o.o. in Poland under UODO; Bom Negócio Atividades de Internet Ltda. in Brazil under ANPD/LGPD; OLX Online Services S.R.L. in Romania under ANSPDCP). Payment rails in Brazil run via Carteira OLX / iFood Pago.
  • Marktplaats— Aurelia Netherlands B.V. (Dutch Autoriteit Persoonsgegevens); buyer-protection escrow operated by Online Payment Platform B.V.
  • Vinted— Vinted UAB (Lithuanian VDAI / Valstybinė duomenų apsaugos inspekcija); payment rails via Adyen N.V.
  • Depop— Depop Limited (UK Information Commissioner's Office).
  • eBay— eBay Inc. and its regional entities (e.g., eBay GmbH in the EU).

AI Training Exclusions

Gleamz does not use data received from connected marketplaces' APIs to train AI or machine-learning models. This applies to data from Etsy, Allegro, Tradera, StockX, Bonanza, OLX, Marktplaats, Vinted, Depop, and eBay. Where any marketplace imposes a stricter rule, that rule applies. Our AI subprocessors (OpenAI, Anthropic, Google) are contractually instructed not to retain or train on data submitted via Gleamz.

Deletion Propagation

When you delete your Gleamz account or disconnect a marketplace, we delete derived data (listings, drafts, message history, buyer contact information) within 30 days, subject to legal and tax retention requirements. We will also honour deletion requests forwarded from connected marketplaces — for example, an Etsy buyer's right-to-be-forgotten request channelled to us through Etsy.

Third-Party Service Providers

We use the following categories of service providers:

  • AI & Machine Learning: OpenAI and Anthropic for text generation and analysis; Google Cloud for image recognition and speech transcription.
  • Cloud Infrastructure: Supabase for database and authentication; Vercel for web hosting; Amazon Web Services (AWS) for media storage.
  • Background Processing: Trigger.dev for task orchestration.
  • Market Research: Tavily for web search to gather pricing data.
  • Marketplace Payment Rails:Adyen N.V. (Vinted), Online Payment Platform B.V. (Marktplaats Kopersbescherming escrow), and Carteira OLX / iFood Pago (OLX Brazil). Gleamz never holds funds; transactions settle within each marketplace's own payment rail.

These providers process data on our behalf under strict contractual obligations and are not permitted to use your data for their own purposes.

4. Your Rights & Choices

Depending on your location, you may have the right to:

  • Access & Portability: Request a copy of the personal data we hold about you.
  • Correction: Update or correct inaccurate information.
  • Deletion: Request that we delete your personal data, subject to legal and operational requirements.
  • Opt-Out of Marketing: Unsubscribe from promotional emails via the link in each message.
  • Limit Use: Ask us to limit how we use your data in certain circumstances.

You can exercise your data access, portability, and deletion rights directly from your Settings page. For other requests, contact us at support@gleamz.ai.

5. Data Retention

We retain your data based on the following guidelines:

  • Active Data: Items, listings, and account information are retained while your account is active and you are using the Service.
  • Archived Items: Items you archive are retained for 180 days, after which they may be automatically deleted.
  • Account Deletion: When you delete your account, all associated data (items, media, conversations, connected accounts) is permanently removed.
  • Legal Retention: We may retain certain information as required by law, such as transaction records for tax purposes.
  • Marketplace-Derived Data:Data received from a connected marketplace's API is retained only as long as that marketplace's API terms permit. Where a marketplace requires deletion sooner than our default, the marketplace's rule controls.

You can export all your data or delete your account at any time from Settings.

6. Security

We implement reasonable technical and organizational measures to protect your data. However, no method of transmission or storage is completely secure, so we cannot guarantee absolute security.

7. Children's Privacy

Gleamz is not intended for users under 16 years old. We do not knowingly collect personal information from children. If you believe we have, please contact us immediately. Some connected marketplaces require a higher minimum age (for example, Etsy, Allegro, and Vinted require 18+); see the marketplace age matrix in Terms of Use §7.1.

8. International Transfers

Your information may be processed outside your country of residence. Our primary infrastructure is located in the United States, and our service providers operate globally. Specifically:

  • Database & Authentication: Hosted in the United States (Supabase/AWS).
  • AI Processing: Performed in the United States by OpenAI, Anthropic, and Google Cloud.
  • Media Storage: Stored in AWS regions, primarily in the United States.

For users in the European Economic Area (EEA), United Kingdom, or other jurisdictions with data transfer restrictions, we rely on Standard Contractual Clauses and other lawful transfer mechanisms to ensure your data is protected in accordance with applicable law.

9. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we'll notify you by email or through the Service.

10. Contact Us

If you have questions or concerns about this Privacy Policy, please email support@gleamz.ai.

Terms of Use