Privacy Policy
Last updated: October 24, 2026
This policy explains how Wonder Group SIA ("we") processes personal data when you use WonderSnap. We are the controller for account and billing data. For the content you upload (photos, listings) and buyer data received from eBay, we act on your behalf as a processor.
1. Contact
Wonder Group SIA, Jāņa Ziemeļnieka iela 5, Valmiera, Valmieras nov., LV-4202, Latvia. Privacy questions and requests: privacy@wondertools.app.
2. What we process and why
- Account data (email, password hash, team roles, consent records) — to provide your account (contract, Art. 6(1)(b) GDPR).
- Photos and listing content you upload — to draft, store and publish your listings (contract). Photos are sent to our AI provider for analysis and to our own image service for white backgrounds.
- eBay connection data (encrypted access tokens, seller account ID, listing and order IDs) — to publish listings and detect sales (contract).
- Billing data (plan, invoices; card details are handled by Stripe, not by us) — contract and legal accounting obligations (Art. 6(1)(c)).
- Technical data (IP address, error reports, logs) — security, abuse prevention and fixing errors (legitimate interests, Art. 6(1)(f)).
- Usage statistics — aggregated, cookieless page analytics without personal profiles (legitimate interests).
3. AI processing
Photos and text are processed by Anthropic's API to generate listing drafts. Under our agreement, API data is not used to train their models. We do not use your content to train models either. You review every draft before it is published.
4. Processors and transfers
We use the following service providers, bound by data processing agreements. Transfers outside the EU/EEA rely on Standard Contractual Clauses or adequacy decisions.
| Provider | Purpose | Location |
|---|---|---|
| Supabase Inc. | Database, authentication and photo storage | EU (Frankfurt) |
| Anthropic PBC | AI analysis of photos and listing text | USA (Standard Contractual Clauses) |
| eBay Inc. / eBay Marketplaces | Publishing listings and reading orders on your connected account | USA / EU |
| Stripe Payments Europe Ltd. | Subscription billing and payments | EU / USA |
| Hostinger International Ltd. | Application servers and image processing | EU (Lithuania) |
| Resend Inc. | Transactional email (sign-up, password reset, billing notices) | USA (SCCs) |
| Functional Software Inc. (Sentry) | Error monitoring | EU / USA |
| Plausible Insights OÜ | Privacy-friendly, cookieless website analytics | EU |
| Crisp IM SAS | Support chat | EU |
5. Cookies
We only use cookies that are strictly necessary to keep you signed in and secure. Our analytics are cookieless and do not track you across sites, so no cookie banner is needed. If you open the support chat, Crisp stores a session identifier to keep your conversation.
6. Retention
- Account, photos and listings: until you delete them or your account.
- Deleted accounts: removed from our systems immediately; backups expire within 30 days.
- Invoices and billing records: as long as tax law requires (typically up to 10 years), held by Stripe and us.
- Logs and error reports: up to 90 days.
7. Your rights
You can access, correct, export and delete your data, restrict or object to processing, and withdraw consent. Export and account deletion are available self-service in Settings; for anything else email privacy@wondertools.app. You may also lodge a complaint with a data protection authority — ours is the Latvian Data State Inspectorate (Datu valsts inspekcija, dvi.gov.lv), or the authority in your own EU country.
8. eBay account deletion
When eBay notifies us that a user deleted their eBay account, we delete the associated eBay tokens and identifiers as eBay requires.
9. Security
Data is encrypted in transit; eBay tokens are additionally encrypted at rest. Photos are stored privately and served only through short-lived signed links. Access is limited to what is needed to run the Service.
10. Changes
We will notify you of material changes by email or in the app.