Privacy policy

Who we are

Selby is a marketplace for buying and selling in the United States, at getselby.com. Write to us at support@getselby.com.

[For Selby’s lawyer: the legal entity’s name and address.]

What we collect

• Your account: your email address, the name and handle you choose, your ZIP code if you give it, and when you confirmed you’re 18 or older and accepted the terms.
• When you join, what brings you to Selby (finding things, selling, or both) and the kinds of things you pick as what you’re into, if you say. You can change them from your account.
• If you sign in with Google or Facebook, it gives Selby your name, email address, profile picture and account ID. If you sign in with Apple, Apple gives Selby your email address (or a private relay address that forwards to it) and your name, if you share them. Selby uses the email to sign you in, and offers the name as a start when you choose yours.
• Your phone number, when you verify it: sealed (encrypted) before it’s stored. Twilio sends the code and checks the number.
• Addresses: your ship-from address, and the addresses orders ship to, sealed (encrypted).
• Your listings, and their photos, with the photos’ location data removed.
• The messages you send and receive on Selby.
• Your orders, offers and payouts: what you bought and sold, for how much, and how it shipped. Your card details go straight to Stripe: Selby never sees or stores them.
• ID checks, when Selby asks for one: Stripe Identity checks your ID and a selfie, with your consent. Selby keeps only the result.
• For high-volume sellers, the details the INFORM Consumers Act requires: your legal name, your address (sealed), your tax ID (sealed: only its last 4 digits can be read) and how to reach you.
• Your devices and sign-ins: a random id for each browser you use, kept only as a fingerprint (a hash), and a short description of it (“Safari on iPhone”); and your IP address, kept as a hash in Selby’s security records. Supabase, which runs Selby’s sign-in, keeps its own record of sign-ins with their IP addresses.
• The reports you make, and reports about you.
• How fast pages load for you: how long a page took to show its main content and to answer a tap, and how much it moved as it loaded, with the kind of page it was (a listing, search), not its address, and nothing about you or your device.
• Your visits, counted by Vercel Web Analytics without cookies: the kind of page you open (a listing, never which one), the site that sent you, your browser, device and operating system, and your city. To tell visitors apart, Vercel uses a code made from your request, which it discards after 24 hours.
• Cookies: see below.

How we use it

• To run Selby: your account, listings, orders, payments, shipping, payouts and messages.
• To put what you’re into first on your home page.
• To keep Selby safe:
  • Every listing is checked before it goes live: by rules, by Anthropic’s AI, and sometimes by a person. Selby checks listings against the CPSC’s recalls.
  • Messages are scanned: Selby hides contact details, and holds messages that look like scams for a person to read.
  • Anthropic’s AI reviews some conversations: ones the scanner flagged or a member reported, and a new account’s first conversations. It reads the messages as they were shown, without names, handles, emails or ids.
  • Selby scores accounts for risk from what’s on record, including reports, held messages, the AI’s chat reviews, strikes, disputes, card issuers’ fraud reports, problem reports and claims, offers withdrawn, a photo used on another seller’s listing, a browser shared between accounts, and how new an account is. The score sends listings to a person, or asks for an ID check.
  • Photos are checked for child sexual abuse material with Cloudflare’s scanning tool, and matches are reported to NCMEC, as the law requires.
• When you ask, Anthropic’s AI drafts a listing from your photos.
• When you search with a photo, Anthropic’s AI turns it into words to search for. Selby doesn’t keep the photo.
• To follow the law: the INFORM Consumers Act, copyright notices, TAKE IT DOWN requests, and tax forms (Stripe sends sellers’ 1099-K forms).
• To email you about your account, your orders and your messages.
• To learn how Selby is used: how many people visit, the kinds of page they open, and the sites that send them (Vercel’s visit counts).

Who we share it with

• Everyone who visits Selby: your profile (your name and handle, when you joined, whether you’re a verified seller, whether your phone and your ID are verified, and the reviews of you), and your listings, with their town.
• When you post a note, members near you see it in Messages for 24 hours. We keep its words for 30 days after it ends, in case someone reports it. If someone answers it, your conversation with them keeps its words.
• When you post a story, anyone on Selby can see it for 24 hours. We delete its photo when it ends, unless someone has reported it, and keep its record for 30 days.
• The other member of an order: your handle and name; for a shipped order, the label carries the buyer’s address, and the seller’s ship-from address as the return address.
• Everyone, on a high-volume seller’s listings once their sales reach $20,000.00: the INFORM Consumers Act’s details (their name, their address, or only its state for a home address, their email, and their phone unless it’s personal).
• Companies that run parts of Selby, each with what it needs:
  • Supabase: Selby’s database and sign-in.
  • Vercel: hosts the site and counts its visits.
  • Stripe: payments (Klarna’s too), payouts and ID checks.
  • Shippo: shipping labels and tracking, and checking a shipping address at checkout (names and addresses).
  • Twilio: phone verification.
  • Resend: Selby’s emails.
  • Cloudflare: photo storage and delivery, the bot check on some forms (Turnstile), and CSAM scanning.
  • Anthropic: the AI checks above, drafting listings, searching by photo, and telling what a search is for from its words (never who searched).
  • Inngest: runs Selby’s background work (it gets ids, not your details).
• NCMEC and law enforcement, when the law requires it.
• Banks, in a dispute: when a buyer disputes a payment, Selby answers through Stripe with what happened, including the listing, the tracking, the shipping address and the order’s messages.

Selby doesn’t sell your personal information, doesn’t use it for ads, and uses no ad trackers. How fast pages load is measured by Selby itself, without anything that identifies you.

Cookies

• Supabase’s sign-in cookie keeps you signed in.
• selby_signin_email remembers the address a sign-in code went to, for 10 minutes.
• selby_device is a random id for your browser, kept 400 days and renewed each time you sign in, so Selby can tell you about a sign-in from a new device and spot accounts sharing a browser.
• selby_identity_next remembers where to return after an ID check, for an hour.
• selby_after_sign_in remembers which listing you pressed Save or Message on before signing in, so it’s saved, or its conversation opened, once you have, for an hour.
• selby_time_zone remembers your device’s time zone, so times on Selby show in yours, for a year.
• selby_phone_card remembers that you closed the card about Selby on your phone, for a year.
• selby_seen_stories: Selby remembers which stories you’ve watched in your browser only, for a day.
• Cloudflare’s bot check (on sign-in and some forms) and Stripe (on payment pages) load their own scripts, which may set cookies of their own.

How long we keep it

• An email’s address is dropped as soon as the email is sent.
• Selby’s queue of background work keeps its messages for 30 days after they’re done.
• Counts that limit how often something can be done: a day.
• Reports of content a page’s security policy blocked: 14 days, cleared as new ones come in.
• Operations alerts: 90 days.
• How fast pages loaded: 30 days.
• A removed photo’s fingerprints: 90 days.
• Recently viewed listings: your latest 50.
• CSAM evidence: a year after it’s reported to NCMEC, or longer when the law requires.
• Everything else, while your account is open. When you delete it, Selby keeps what it must (below).

[For Selby’s lawyer: how long order, payment, payout, tax and account records; INFORM, copyright, TAKE IT DOWN, enforcement and report records; and the security records are kept after an account closes; and how long the companies above keep what they get.]

Your choices and rights

• Download your data from your account. The file leaves out other members’ private details, Selby staff’s notes, the signals Selby uses against fraud (like a risk score), and the security records. Write to us to ask about those.
• Delete your account. Your profile, the listings you have for sale (their text stays with Selby, off sale), their photos, your saved listings, notifications, phone number, ship-from address and sign-in go. Selby keeps orders and payments, the addresses on them, the messages and reviews other members have, reports, and its safety and legal records; they show you as “Deleted member”. If you sold on Selby, your payouts account stays with Stripe, for tax forms and anything owed, and Selby asks Stripe to erase your ID checks. A suspended or banned account, or one Selby must keep for a legal hold, can’t be deleted by its member.
• Turn off emails about new messages in your account. Emails about your orders and account come with using Selby.
• Ask us to know, correct or delete what Selby keeps about you: write to support@getselby.com.

[For Selby’s lawyer: state privacy rights (California’s and others’), how a request is verified, and how quickly Selby answers.]

[For Selby’s lawyer: whether Selby asks Stripe to close a deleted seller’s payouts account.]

Children

Selby is only for people 18 or older. If you think someone younger has an account, write to us.

Security

Selby seals (encrypts) phone numbers, addresses and high-volume sellers’ tax IDs, keeps device ids and the IP addresses in its own records as hashes, and offers two-step verification. Supabase’s sign-in records keep IP addresses as they are. If you see a security problem, write to us.

Changes

When this policy changes, the new version is posted here.

[For Selby’s lawyer: how members are told of a change that matters.]