Velista Privacy Policy

Effective date: November 2, 2026
Last updated: November 2, 2026

This policy explains how Groovy Holdings LLC ("Velista," "we," "us") collects, uses, shares and protects personal information when you use velista.ai, the Velista web app, the Velista browser extension, and our waitlist (together, the "Service").

Velista is a video-first crosslisting tool for resellers. You film your items, we draft listings, you review and approve them, and we post them to the marketplaces you connect.

1. Information we collect

Account information. Your email address and login details, your workspace, and an optional profile photo.

Waitlist information. When you join the waitlist we collect your email address, the marketplaces you sell on, your listing volume range, an optional shop URL, how you found us (source and campaign tags), the referral code you used, if any, and the time you signed up. We also record whether you opened, clicked, replied to or unsubscribed from our emails (see Section 6).

Listing content. Videos you upload, still frames and photos taken from those videos, photos you add, item descriptions, condition notes, measurements, prices, your edits, your approvals, and the AI-generated drafts we create for you.

Marketplace data received through your connections. When you connect a marketplace account using that marketplace's official sign-in (OAuth), we receive an access token and, depending on the marketplace, your marketplace user or shop ID, your listings and listing status, and order and sale information we need to mark items sold and end them on your other marketplaces. We keep only the order and listing ID, title, price, quantity and whether the order was cancelled. We do not collect buyer names or addresses. We use order information only to detect sales and update your listings.

Browser extension data. If you install the Velista extension, it uses your own logged-in session on marketplaces that do not offer an official API to fill in listing forms, detect sales and end listings. The extension stores a workspace token in your browser and sends us status signals (heartbeats), which marketplaces you are signed into, and sales it observes. It does not send us your marketplace passwords. The marketplaces the extension supports are shown in the app.

Feedback. Notes and comments you leave in the app or on our website.

Usage and device data. Records of actions in your account (such as uploads, edits, approvals, posts and sales), the cost of AI processing per workspace, error logs, and technical data such as IP address, browser type and device information. For referral links we store a hashed version of your IP address (salted daily) rather than the raw address.

Cookies. We use a small number of cookies that are needed for the Service to work, such as a login session cookie that lasts up to 30 days. We do not currently use third-party advertising cookies or website analytics tools. If we add an analytics tool, we will update this section first. If you arrive through a referral link, our website sets a first-party referral cookie that lasts 60 days so we can credit the person who referred you. Our website loads fonts from Google Fonts, which means Google receives your IP address when you visit.

2. How we use information

• Provide the Service: process your videos, draft listings, post approved listings, detect sales and end listings on your other marketplaces.
• Run your account, keep it secure, and prevent fraud and abuse.
• Send service emails (such as login links and account notices) and, if you joined the waitlist, updates about Velista. You can unsubscribe from marketing emails at any time.
• Track referrals for our affiliate program.
• Understand how the Service is used and fix problems, including improving our AI drafts using your edits and approvals.
• Meet legal obligations and enforce our Terms.

We do not use content received from eBay to suggest prices or to train machine learning models, consistent with the eBay API License Agreement.

3. Marketplace connections and OAuth tokens

• Encrypted storage. Access and refresh tokens are encrypted before we store them.
• Limited use. We use a token only to perform actions you ask for or turn on, such as posting an approved listing, checking for sales, and ending a listing after it sells.
• Your control. You can disconnect a marketplace at any time in Velista settings or from the marketplace's own connected-apps page.
• Deletion. When you disconnect a marketplace or delete your account, we delete the stored tokens for that connection.
• We never ask for your marketplace password for marketplaces that offer official sign-in.

4. How we share information

We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

We share information only:

• With marketplaces, when you tell us to. When you approve and publish a listing, we send that listing (text, photos, price and other details) to the marketplaces you selected, under your account. What happens next is governed by that marketplace's own terms and privacy policy.
• With service providers (subprocessors) that help us run the Service, under contracts that limit their use of the data:

• For legal reasons, if required by law, to protect rights and safety, or to investigate fraud or abuse.
• In a business transfer, such as a merger or sale of assets, subject to this policy.

5. Retention

• Account and listing content: kept while your account is active. When you delete a listing or photo in the app, it is archived; email hello@velista.ai and we will permanently delete it. When you delete your account, we archive it and right away delete your videos and marketplace credentials. We delete the rest of your data when you ask, except what we must keep for legal, tax or security reasons.
• Uploaded videos at our AI provider: deleted from Google's file storage after processing.
• eBay data: when eBay notifies us that a user closed or deleted their eBay account, we permanently delete that user's eBay data and keep only a non-identifying record that we did so.
• Waitlist data: kept until you unsubscribe and ask us to delete it, or 24 months after our last contact with you.
• Marketplace tokens: deleted on disconnect or account deletion.
• Logs and audit records: kept for up to 12 months for security and troubleshooting.

6. Email open and click tracking

Our waitlist emails contain a small image (a "pixel") and tracked links so we can see whether an email was opened or a link was clicked. Many email apps, including Apple Mail, block or fake these signals. You can turn off images in your email app to stop open tracking, and you can unsubscribe at any time.

7. Your choices and rights

Everyone. You can view and edit your listings, disconnect marketplaces, unsubscribe from marketing emails, and ask us to access, correct, export or delete your personal information by emailing hello@velista.ai. We respond within 30 days (45 days where state law allows) and may need to verify your identity. We will not discriminate against you for using your rights.

California and other US states. Residents of California, Colorado, Connecticut, Virginia, and other states with privacy laws may have the right to know what we collect, access, correct, delete, and receive a copy of their data, and to opt out of sale, sharing for targeted advertising, and profiling. We do not sell or share personal information as those terms are defined, and we do not use it for targeted advertising. You can use an authorized agent. If we deny a request, you can appeal by replying to our decision.

EEA, UK and Switzerland. If these laws apply, we process your data on these legal bases: to perform our contract with you (running the Service), our legitimate interests (security, product improvement, referral tracking), your consent (marketing emails, where required), and legal obligations. You may access, correct, delete, restrict, object to processing, and port your data, withdraw consent, and complain to your local data protection authority. Our servers are in the United States; transfers rely on safeguards permitted by applicable law.

Marketplace users. If you are a Squarespace, Shopify, Etsy or eBay user, you can make the requests above directly to us at the address in Section 13.

8. Children

The Service is not for anyone under 18, and we do not knowingly collect personal information from anyone under 18. If you believe a child has given us information, contact us and we will delete it.

9. Security

We use encryption in transit (HTTPS), encrypt marketplace tokens at rest, restrict database access to our private network, keep secrets out of our source code, scan code for leaked secrets, and limit who on our team can access data. No system is perfectly secure. If a breach affects your personal information, we will notify you as required by law. We do not claim SOC 2 or similar certifications.

10. AI processing

Velista uses AI to draft listing titles, descriptions, condition and price suggestions from your videos. Drafts may be wrong. You review and approve every listing before it is posted, except where you turn on automatic posting for a marketplace. Faces are not meant to appear in published listings; please avoid filming people.

11. Marketplace-specific notices

Etsy. The term "Etsy" is a trademark of Etsy, Inc. This application uses the Etsy API but is not endorsed or certified by Etsy, Inc. For Etsy seller data, we act as a service provider to the seller and process it only to provide the Service under our Terms.

eBay. Velista uses eBay's APIs under the eBay API License Agreement. Velista is not affiliated with or endorsed by eBay. We use eBay data only to provide the Service to you, we do not use it to train models or suggest prices, and we honor eBay account deletion notices as described in Section 5.

Shopify. Velista is not affiliated with or endorsed by Shopify. Shopify connections are not offered yet. When they are, we will collect through Shopify's APIs only what we need to provide the Service and honor Shopify's privacy requests.

Squarespace. Velista is not affiliated with or endorsed by Squarespace. Squarespace customers can exercise their access, deletion, portability and correction rights by contacting us at the address in Section 13.

"eBay," "Shopify" and "Squarespace" are trademarks of their respective owners.

12. Changes

We may update this policy. If changes are material, we will notify you by email or in the app before they take effect. The "Last updated" date shows the latest version.

13. Contact

Groovy Holdings LLC Email: hello@velista.ai