Privacy Policy
This policy explains what personal data Onlineselling collects, why we collect it, who we share it with, and the choices you have. We collect only what we need to run the shop, deliver your orders and keep your account safe.
01Who we are
Onlineselling (“we”, “us”) runs the online shop at onlineselling.org and its API. We are responsible for the personal data described in this policy. For any privacy question or request, email mail@onlineselling.org.
02Data we collect
| Type | What it includes |
|---|---|
| Account | Email address, name, password (stored only as a secure hash), two-factor sign-in settings, notification preferences. If you sign in with Google, we receive your name and email address from Google. |
| Orders | What you bought, when, the price, and the details needed to deliver it, for example a profile link for a growth order, the country and service for a number, the IP addresses you allow for proxies, or the name to print on a virtual card. |
| Balance and payments | Top-ups, charges, refunds and receipts; payment status and reference numbers from our payment processors; for crypto, the network, address and transaction ID. We never receive or store your full card number. |
| Security and usage | IP address, browser and device type, sign-in times, failed sign-in attempts and an activity log of important account actions. We use this to protect your account and to stop fraud and abuse. |
| Support | Messages, tickets and files you send us, and our replies. If live chat is offered on the site, the chat provider processes your chat messages. |
| Optional features | Your browser’s push address if you allow notifications; your Telegram chat ID if you connect our Telegram bot; your payout address if you join the affiliate program; API keys you create and their usage; details you share when you ask for a virtual assistant quote. |
We do not use advertising trackers, and we do not sell your personal data.
03How we use your data
- To provide the Service: create your account, process top-ups, deliver orders, show your order history, send receipts and handle support. This is needed to carry out our contract with you.
- To keep the Service safe: detect and prevent fraud, payment abuse, attacks and misuse; limit repeated attempts; protect your balance. This is our legitimate interest, and it protects you too.
- To improve the Service: understand which products and features are used, and fix problems. We use our own records for this, not third-party analytics.
- To meet legal duties: keep financial records, answer lawful requests, and handle disputes and chargebacks.
- To send offers and news: only if you subscribe, and you can unsubscribe at any time.
04Payments
Card payments are handled by our card payment processor and crypto payments by Cryptomus. You enter your card or wallet details on their pages, and they process them under their own privacy policies. We receive the payment result (amount, status, reference) so we can credit your balance. Payment processors may run their own fraud and compliance checks.
07Emails and notifications
We send service emails, such as receipts, delivery notices, security alerts and replies to your tickets. You cannot opt out of these while you have an account, but you can switch some of them off in your notification settings. Offers and product news are sent only if you subscribe, and every such email has an unsubscribe link. We record whether our emails are delivered, and for some emails whether they are opened, to keep delivery working.
08How long we keep data
- Account data is kept while your account is open.
- When you close your account, we delete or anonymise your personal data, except records we must keep.
- Financial records (payments, refunds, receipts) are kept for as long as accounting and tax laws require, usually several years.
- Some delivered details, such as account logins, are deleted after the period shown on the order. Security logs and notifications are kept for a limited time.
- Encrypted backups are kept for a short period and then overwritten.
09Security
We use HTTPS everywhere, store passwords as secure hashes, encrypt keys and other secrets, offer two-factor sign-in, limit access to personal data to people who need it, and keep encrypted backups. No system is perfectly secure. If we learn of a breach that affects your data, we will tell you and the relevant authorities where required.
10Your rights
Depending on where you live, you may have the right to:
- see the personal data we hold about you and get a copy;
- correct data that is wrong;
- delete your data or close your account;
- object to or restrict some uses of your data;
- receive your data in a portable format;
- withdraw consent, for example to marketing emails, at any time.
To use these rights, email mail@onlineselling.org from the address on your account. We may ask you to confirm your identity, and we reply within one month. You can also complain to the data protection authority where you live.
11International transfers
Our service providers and suppliers may process data in countries other than yours. When we transfer personal data, we use appropriate safeguards, such as contracts that require providers to protect it.
12Children
The Service is for adults aged 18 and over. We do not knowingly collect data from children. If you think a child has given us personal data, contact us and we will delete it.
13Changes to this policy
We may update this policy as the Service changes. The “Last updated” date at the top shows when it last changed. For important changes, we will tell you on the site or by email.
14Contact
For privacy questions and requests, email mail@onlineselling.org. For anything else, see our contact page.