Security and privacy

How we protect accounts and how abuse is handled.

Protect your account

• Use a long, unique password. Sign-up asks for at least 8 characters (at most 72 bytes) and refuses very common passwords. You must accept the Terms of Service and Privacy Policy to register; if they change you are asked to accept the new version in the dashboard.
• Passwords are stored hashed. We cannot read them.
• Reset links are valid for one hour and verification links for 24 hours.
• Two-factor authentication is used for SellSpace staff accounts. Never share a login, and use a different password for your Stripe account.
• Delivered files are served through time-limited signed links. Stock lines are visible only to the shop owner.

Reports, quarantine and bans

Anyone can report a shop with the report button on the storefront. Moderation works like this:

• Reports never restrict a shop automatically. The team reads every report and decides by hand whether a shop is put in quarantine, cleared or banned.
• Product titles, descriptions and variant names are checked by an automatic keyword filter. A match flags the product. Automatic filtering is a safety net and is followed by human review by the SellSpace team.
• After review a shop is cleared, or banned.

When reporting a shop you choose a category, describe the problem and can leave your e-mail address to receive a confirmation. We do not share it with the shop owner.

The full rules and how to report illegal content are in the Acceptable Use Policy.

Moderation notices and appeals

When we restrict a shop, block a product, reject a marketplace listing or reject a Media Helpers video, you receive a statement of reasons by e-mail and under Moderation notices in the dashboard. It explains what we did, why, whether the decision was automated, on which rule it is based and how to appeal.

• You can appeal for free within 6 months. There is one open appeal per decision.
• A different team member reviews your appeal and e-mails you the outcome with reasons. If the decision is overturned, the restriction is lifted.
• You can also use an out-of-court dispute settlement body certified under the Digital Services Act, or go to court.

Data

See the Privacy Policy for what we collect and your rights, and the data processing terms for how we process your customers' data.