Privacy Notice

This notice explains how Cavri, a trading name of Sandbanks Digital Limited ("we", "us"), handles personal data under the UK GDPR and the Data Protection Act 2018. Sandbanks Digital Limited is registered in England and Wales under company number 17268570, with its registered office at 457 Ashley Road, Poole, England, BH14 0AX, and is the controller for the data described here. Contact: support@cavri.app.

1. What we collect

• Account data, email address, hashed authentication data, plan and billing status.
• Inventory data, listing titles, descriptions, prices, categories, item photos and sales history you import or create.
• Marketplace connection data. Your public marketplace username and listing identifiers. Your marketplace password and session cookies stay in your own browser and are never uploaded to our servers.
• Usage data, actions taken in the app, AI usage counts, and technical logs (IP address, timestamps) needed to secure and operate the Service.
• Website analytics, visits to our public marketing pages are counted using analytics we host ourselves, without cookies and without storing anything on your device. Each page view records the page, referring site, browser, operating system, device type, screen size, language and country. Country is derived from your IP address and the address itself is not stored; a hash that changes every 24 hours counts returning visits without identifying you. The signed-in app and the browser extension carry no analytics. See the Cookie Notice for the full detail.
• Billing data, handled by Stripe; we store your Stripe customer and subscription identifiers, never your card number.

2. Why we process it (lawful bases)

• Contract, providing the workspace, sync, automation and billing you sign up for.
• Legitimate interests, securing the Service, preventing abuse, improving features using aggregate usage patterns, and understanding which of our public pages people find useful. For website analytics this is our basis rather than consent, because the measurement stores nothing on your device and produces aggregate counts that do not identify you; you can object at any time using the contact details above.
• Legal obligation, tax and accounting records for payments.
• Consent, any marketing emails (none are sent today); you can withdraw consent at any time.

3. AI processing

When you use AI listing generation, the item photos and text you submit are sent to the AI provider Cavri has configured (Google Gemini, OpenAI, or Anthropic) solely to generate your listing content.

We do not use your data to train models of our own, and we do not pass it to any AI provider other than the one generating your listing. What a provider may do with what it receives is governed by that provider's own terms rather than ours: OpenAI and Anthropic do not train on data submitted through their APIs by default, whereas Google's terms permit the requests Cavri sends to be used to improve Google's products and to be reviewed by people. If that matters to you, please contact us before using AI listing generation.

4. The browser extension

The optional browser extension is what carries out listing actions in your own signed-in Vinted session. It runs on Vinted's national sites and on your Cavri workspace, and nowhere else. On vinted.co.uk and its nine sister sites (.fr, .de, .es, .it, .nl, .be, .pl, .cz and .lt) it reads and updates your listings; on https://dashboard.cavri.app it pairs with your account. Each of those is listed separately in the extension's permissions, because a browser cannot be asked for "Vinted" as one thing, and Chrome shows you the whole list before you install. It does not run on, read, or track any other page you visit, and it has no general browsing history access.

• Held in your browser only. The pairing key that links the extension to your account, the address of your Cavri workspace, and the short-lived request tokens Vinted itself issues to your session. These stay in the browser's extension storage and are removed when you uninstall it.
• Your Vinted password and session cookies are never read. They are held by your browser as HttpOnly cookies, and the extension does not request the browser permission that would be needed to read them. They are never sent to us and we never store them.
• Sent to Cavri. The listing content, photos and order details of your own wardrobe, plus the result of each job it runs, so your workspace matches what is live on Vinted. This is the same inventory data described in section 1.
• Your buyer's delivery details, inside the shipping label. When you sell an item, Cavri collects the shipping label Vinted issues so you can print it from your workspace. That label is a document produced by the carrier, and it carries your buyer's name and delivery address. We store it only to give it back to you, and we do not read the address out of it into your inventory. It is deleted when you delete the item it belongs to, and with everything else when you close your account (section 6). Cavri is the data controller for your own account data and a processor of your buyer's details on your behalf.
• Acts only on jobs you have configured. It polls your account for work you have queued, within the limits you set. It takes no action of its own.

In line with the Chrome Web Store's Limited Use requirements, data the extension handles is used solely to provide the features described above. We do not sell it, transfer it to anyone except the processors listed below, use it for advertising, use it to build profiles, or use it to assess creditworthiness or for lending purposes. Cavri is an independent tool and is not affiliated with, endorsed by, or sponsored by Vinted.

5. Who processes data for us

• Supabase, authentication, database hosting, and the sign-in and password-reset email that goes with an account.
• Railway, application hosting.
• Cloudflare R2, storage of your item photos and of the shipping labels your sales generate.
• Stripe, payment processing.
• Resend, product email: a failed payment, a plan change, confirmation that your account was deleted, an acknowledgement when you send us feedback, and our reply to it. Resend receives your email address and the contents of the email we send you. Sign-in and password-reset email does not go through Resend; it comes from Supabase.
• Google / OpenAI / Anthropic. AI listing generation, only when you use AI features.

Some processors store data outside the UK/EEA; where they do, transfers rely on adequacy decisions or standard contractual clauses.

Our website analytics is not on this list because it is not a third party: we host it ourselves on infrastructure operated by Sandbanks Digital Limited, the same controller named at the top of this notice. Analytics data is never sold, shared or used for advertising.

6. How long we keep it

• Account and inventory data, for as long as your account exists, then deleted within 30 days of account closure.
• Payment records, 6 years (legal requirement).
• Security logs, up to 12 months.
• Website analytics, kept as aggregate counts. The 24-hour hash described in section 1 is the only visit-level identifier, and it cannot be linked to you or to your other visits once it rotates.

7. Your rights

You can ask for access to, correction of, deletion of, or a portable copy of your personal data, and you can object to or ask us to restrict processing. Write to us at the contact above; we respond within one month. You also have the right to complain to the Information Commissioner's Office (ico.org.uk).

8. Automated decisions

Cavri automates work on your listings: relisting, delisting, price changes, and accepting or declining offers. All of it runs against rules you set up yourself, and only on your own inventory. None of it makes a decision about you. Nothing here profiles you, scores you, or produces a legal or similarly significant effect on you, so the right not to be subject to a decision based solely on automated processing under Article 22 of the UK GDPR does not arise. You can switch any automation off at any time from the app.

9. Cookies and local storage

The app uses essential local storage for your sign-in session only, and our marketing-site analytics sets no cookies and stores nothing on your device. See the Cookie Notice for detail.

10. Changes

If this notice changes materially we will tell you in the app or by email before the change takes effect.