Privacy Policy

Effective September 13, 2026

Seller OS is local-first software for Fiverr sellers. This policy explains what the Chrome extension and our license service handle.

Data processed in your browser

The extension reads relevant Fiverr page content and authenticated Fiverr responses to provide inbox assistance, seller analytics, gig tools, order tracking, client context, and alerts. Business snapshots, settings, drafts, notes, API-key configuration, and related history are stored in Chrome local storage on your device. Removing the extension or clearing its storage removes that local data.

AI providers you choose

When you request an AI feature, the extension sends the content needed for that request—such as conversation text, gig data, or your instructions—to the browser AI service or API provider you selected. Those providers process data under their own terms and privacy policies. Seller OS does not receive or proxy those AI prompts. API keys are stored locally and encrypted at rest by the extension.

License and free-tier service

To operate Free and paid access, the extension sends a randomly generated installation identifier, extension version, usage category, and daily count to our HTTPS license service. For a signed-in account it also sends the Fiverr seller handle it detects on your own pages. The handle is stored as a one-way hash so that a single account cannot be shared across two different Fiverr accounts at once (an operator-facing device list may show a short prefix of that hash), and an encrypted copy is kept so account and product email can greet you by it when you have not given a first name. The handle is never stored in plain text. It does not send Fiverr messages, Fiverr conversations, Fiverr analytics, browsing history, or AI prompts to that service.

Feedback and the uninstall survey

When you send private feedback from the extension, the website feedback page, or the uninstall survey, we receive only the text you typed, the feedback type you chose, and an optional email address if you asked for a reply. An installation identifier and the extension version travel with the note so repeat submissions can be de-duplicated; the identifier is stored only as a short one-way hash. Uninstalling the extension may open the survey page in your browser, but nothing is sent to us unless you press the button. No Fiverr data, contacts, or browsing history are attached.

Account-linked paid access uses the Seller OS account data described below and does not require a license key. Paid access is account-linked: a purchase links to the Seller OS account created with the checkout email, and the extension never sends license keys to the license service. Our payment processor processes checkout, customer, tax, payment, and license data as Merchant of Record under its own privacy policy.

Seller OS accounts

To buy a paid plan or manage a purchase, you create a Seller OS account with an email address, an optional first name, and a password, or you continue with Google. Google sign-in shares your verified Google email address, your Google display name, and a stable Google account identifier; the email and name are stored encrypted and the identifier links future Google sign-ins to the same account. A Google-only account has no password until you set one through the password-reset flow. We store your email and name encrypted, your password (when set) only as a salted one-way hash, and your acceptance of these terms with its timestamp and version. Sign-in sessions live in HttpOnly cookies that expire after 30 days. An account keeps at most two connected browsers and two active sessions of each kind; the extension also records the hashed Fiverr handle a browser is currently using so the same account cannot be used with two different Fiverr accounts at the same time. Verification and password-reset messages are transactional account mail, separate from promotional consent. If your purchase email matches your verified account email, the purchase links to your account automatically. Creating an account never subscribes you to product updates. To access, correct, or delete your account, email privacy@sellerosforfiverr.com.

Email updates and service messages

If you request product updates or offers on our website, we process your email address, optional first name, consent version, and confirmation, unsubscribe, and campaign timestamps. We use double opt-in: promotional email starts only after you confirm the address. Addresses and delivery payloads are encrypted in our application state, while lookup and confirmation values are stored as one-way hashes. You can unsubscribe from every promotional message.

For customers, verified payment-processor events may provide name, email, subscription status, billing dates, invoice links, and payment outcome so we can send transactional activation, renewal, payment, cancellation, refund, or security messages. Transactional messages are separate from promotional consent. Resend processes recipient details, message content, and delivery events as our email delivery provider.

Website analytics and advertising

Our website asks for your choice before measuring anything optional. On your first visit you can Accept all, Reject optional, or Customize two independent categories, neither prechecked: Analytics (anonymous visit counts stored on our own server) and Advertising (Google, Meta, TikTok, and ChatGPT Ads tags). If your browser sends a Global Privacy Control signal, both categories start off. Your choice is stored in your browser with its version and timestamp; if you are signed in, the same choice is also attached to your account so a later purchase can respect it. Saving a new choice reloads the page so revoked tags are reliably unloaded, and a quiet “Privacy choices” control on every page reopens the same options at any time.

When Analytics is allowed, the site records page views, account registrations and sign-ins, marketing subscriptions, and checkout starts on our own server. Each record holds only a random event id, the event name, the page path (never the query string or address-bar tokens), the referrer hostname, an allowlisted campaign set (utm_source, utm_medium, utm_campaign, utm_term, utm_content), a plan label, and a one-way hash of a random browser id. We store no raw IP address, user agent, email, name, token, click id, or extension/Fiverr data with these records, and records are kept for up to 90 days within a bounded total. When Advertising is allowed, the same events are additionally reported to the vendors you accepted — Google Analytics 4 (and the configured Google Ads tag), Meta Pixel, TikTok Pixel, and ChatGPT Ads — using the same event id for de-duplication where the vendor supports it, without names, emails, or other advanced matching. Our payment processor measures purchases on its own checkout pages with its own Google, Meta, and TikTok integrations; we do not re-send those purchases to Google, Meta, or TikTok from our server. Optionally, and only when server-side delivery is enabled and your account holds current advertising consent, a verified purchase may additionally be reported to ChatGPT Ads through their server API with the purchase amount, plan, and a one-way hash of your email address — never the address itself.

Extension and Fiverr data are never used for advertising. Business snapshots, conversations, settings, and analytics inside the Chrome extension stay in local browser storage and are never sent to advertising vendors.

Website and infrastructure

Our hosting providers necessarily process network information such as IP addresses to deliver the website and protect the service. We do not enable application access logs by default, sell personal data, use it for creditworthiness, or use Fiverr data for advertising.

Retention and deletion

Daily free-tier counters are automatically pruned after 14 days. Unconfirmed email requests expire after 7 days, completed delivery jobs are removed after 14 days, and unsubscribed status is retained as needed to honor your choice. Account verification links expire after 24 hours and password-reset links after 1 hour; used links are single-use. Account records are kept while the account exists and removed after a verified deletion request, except for records we must retain to prevent abuse, handle refunds, or meet legal obligations. Our email provider currently retains delivery data for up to 30 days on its Free plan. Webhook receipt identifiers are bounded to the most recent 1,000 events. License and billing records are retained while needed to provide access, prevent abuse, handle refunds, and meet legal obligations. You can release an activation from Seller OS Settings. For access or deletion requests, email privacy@sellerosforfiverr.com.

Security

Transmissions use HTTPS. Payment-processor callbacks are authenticated with a service token and restricted to configured products. License keys are not written to application logs or stored in plaintext on our server. Subscriber addresses and queued email content are encrypted at rest with a server-only key. No system can be guaranteed perfectly secure, but we minimize collected data and restrict it to product operation.

Children and changes

Seller OS is not directed to children under 13. We may update this policy as the product changes and will publish the revised effective date. Material new data practices will also be disclosed in the extension before collection when required.

Contact

General and product questions: support@sellerosforfiverr.com. Privacy and data requests: privacy@sellerosforfiverr.com. Purchases, licenses, refunds, and cancellations: billing@sellerosforfiverr.com. Responsible vulnerability reports: security@sellerosforfiverr.com.