Last updated: May 2026
This policy explains what information IvySell collects, how we use it, and what rights you have over your data.
IvySell is a digital goods marketplace that connects sellers with buyers. When we say "we", "us", or "the Platform" in this policy, we mean IvySell and its operators.
When you create a seller account, we collect your username, email address, and password. Your password is hashed using Argon2id and is never stored in readable form.
When you log in and use the platform, we collect your IP address, browser information (user agent), approximate location based on your IP, and activity logs such as login times and product changes. This data is used for security, fraud prevention, and account protection.
We also store your cryptocurrency withdrawal addresses so you can receive your earnings.
Buyers do not create accounts on IvySell. When a buyer places an order, we collect their email address (for product delivery and support), their IP address, and basic browser information. Buyer email addresses are partially masked in seller dashboards to protect buyer privacy.
Your information is used to operate the platform, process transactions, deliver products, prevent fraud, detect abuse, enforce our terms, and communicate with you about your account or orders. We do not use your information for advertising or marketing to third parties.
IvySell uses essential cookies only. These include session cookies for authentication, CSRF protection tokens, and a geolocation cookie used for regional availability checks. We do not use third-party tracking cookies, advertising cookies, or analytics cookies from external services.
Sensitive data is encrypted at rest using AES-256-GCM encryption. This includes buyer email addresses, IP addresses, and any identity documents submitted during verification. All data in transit is encrypted using TLS (HTTPS).
We do not sell, rent, or trade your personal information to anyone. We do not share your data with advertisers or marketing platforms.
We may share information in the following limited situations: when required by law or valid legal process, when necessary to protect the safety of our users or the public, or with service providers who help us operate the platform (such as email delivery services), who are bound by confidentiality obligations.
If you are ever asked to verify your identity (this only applies to verified sellers under dispute review), your submitted documents are encrypted with AES-256-GCM, accessible only to authorized team members, reviewed within 48 hours, and permanently deleted within 7 days of the review regardless of outcome. Identity verification is always optional. Full details are on the Seller Ranks & Verification page.
Your account data is retained while your account is active. If you delete your account, personal data is removed within 30 days. Transaction records may be retained longer for legal compliance and dispute resolution purposes. Identity verification documents are deleted within 7 days of review completion as described above.
You have the right to access, correct, or delete your personal data at any time. You can update your profile information directly from your dashboard. For data access requests or deletion requests, contact support@ivysell.com. We will respond within 30 days.
If you are located in the European Economic Area, you also have the right to data portability and the right to restrict or object to certain processing of your data.
IvySell is not intended for anyone under the age of 18. We do not knowingly collect data from minors.
We may update this policy from time to time. If we make significant changes, we will notify you through an in-platform announcement or email. The "last updated" date at the top of this page reflects the most recent revision.
For privacy-related questions or data requests, email support@ivysell.com.