Privacy Policy

Effective September 24, 2026. Last updated October 29, 2026.

1. Who we are

Restoq is operated by Chase McLean, an individual based in Montana, United States, doing business as Restoq ("Restoq," "we," "us"). Questions about this policy can be sent to chasepmclean@gmail.com.

2. What this policy covers

This policy covers getrestoq.com and the Restoq web application, storefronts, pay pages and the Restoq Lister browser extension (together, the "Service").

3. Information we collect

Accounts

Name, email address, mobile phone number, business name and details, and the team members you invite. Passwords are handled by our authentication provider and stored in hashed form. If you turn on two-factor login, the authenticator secret is stored by our authentication provider.

Phone number and text messages

A mobile number is required for every account. Text messages are optional: if you tick the box to receive them, we record when and where you agreed, and when you opt out. Only you can see your number in Restoq; your teammates cannot.

Subscriptions

Your plan, billing period, number of team members, trial dates and subscription status. Stripe handles your payment method and billing details, such as billing address, under its own privacy policy.

Sign in with Google

If you sign in with Google, Google shares your name, email address and profile picture with us. We use them only to create your account and sign you in. We do not receive your Google password or access any other Google data, such as your Gmail, contacts or files. Restoq's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Inventory, lots and listings

Information you add or import, including item details, photos, costs, loads, lot manifests, listings, prices, sales records, sales made outside Restoq, check-in counts and claims.

Connected marketplace accounts

When you connect an eBay account, you sign in on eBay's site and approve specific permissions. We receive access tokens and the data eBay provides under those permissions, such as your listings, business policies, orders, sale prices, fees, payouts and the buyer shipping details needed to fulfill orders. We do not receive your marketplace password.

Listings you post yourself

For marketplaces Restoq does not connect to, such as Depop, Poshmark and Mercari, we keep the listing link you paste back and the sales you mark. If you use the Restoq Lister browser extension, it runs only on Poshmark and Mercari, fills in the listing form you ask it to, and sends Restoq the link of a listing you just posted. It does not send Restoq your other browsing, and it signs in to Restoq with a token you create on the Connections page.

Payments

Payments are processed by Stripe. We do not store full card or bank account numbers. Distributors and resellers who accept payments through Restoq create Stripe accounts, and Stripe collects identity and banking information under its own privacy policy. We receive payment status, amounts, fees, refunds, invoice status, payouts and limited account details from Stripe.

Storefront purchases and pay pages

When a business buys from a storefront, we collect the buyer's name, email, shipping or pickup choice and order details, and share them with the seller to complete the order. When someone pays a seller in person through a Restoq pay page, Stripe collects their payment details and contact information under its own privacy policy, and we receive the payment status, amount and fee.

Resale certificates

If you upload a resale or tax exemption certificate, it is stored and shared with the distributor you provide it to.

Technical information

Our hosting provider records standard server logs, including IP address, browser type and pages requested. The Restoq app uses cookies that are necessary for sign-in and security. It uses PostHog for product analytics, to understand how features are used, and Sentry to record errors, which can include the page, browser and account involved. The marketing site does not use advertising cookies. It loads fonts from Google Fonts, which receives your IP address when fonts are requested.

4. How we use information

• To provide the Service, including creating and updating listings, syncing orders, ending listings after a sale, importing lots and calculating profit.
• To generate listing drafts, identify items from photos and map manifest columns with AI, as described in section 5.
• To look up product details from UPC barcodes.
• To process subscriptions, storefront payments and in-person payments through Stripe.
• To send service messages such as order notifications, sync alerts, trial and billing reminders, security alerts and account notices.
• To send text messages, only if you agreed to receive them, and to contact you about your account by phone if needed.
• To keep the Service secure, prevent fraud and abuse, and fix problems.
• To comply with legal obligations.

5. AI features

When you use an AI feature, the information it needs is sent to our AI provider, Anthropic: item details and photos for listing drafts and photo identification, and a manifest's column headers and sample rows for column mapping. Under our provider's commercial terms, this data is not used to train its models. AI results are suggestions you can review and change.

6. How we share information

We share information only as described below.

• Service providers that host and operate Restoq for us: hosting (Netlify), database, file storage and authentication (Supabase), background jobs (Trigger.dev), payments and subscriptions (Stripe), email delivery (Resend), product analytics (PostHog), error monitoring (Sentry), AI (Anthropic) and UPC product lookup (UPCitemdb, which receives only the barcode number). They may use the information only to provide services to us.
• Marketplaces you connect. We send listing, inventory and order information to eBay and other marketplaces you choose to connect, at your direction.
• Your team. Members of your business see its data according to the role you give them. Staff members do not see costs or profit.
• Other Restoq users, as part of transactions. When a reseller asks to buy from a distributor, the distributor sees the reseller's business name, the note they send and any resale certificate they upload. When a reseller buys, each party receives the information needed to complete the order, including claims for missing or damaged items. Distributors see which approved buyers purchase their lots.
• Resale data you choose to share. A reseller can choose, separately for each distributor, to share how items from that distributor's lots resell. The distributor sees only combined figures across the buyers who share, shown after at least 3 orders from at least 2 buyers. With few buyers, combined figures may reveal something about an individual buyer's results. You can stop sharing at any time on the Sources page.
• Legal and safety. When required by law, or to protect the rights, safety and property of Restoq, our users or others.
• Business transfers. If Restoq is sold, merged or reorganized, information may transfer to the new owner under this policy.

We do not sell personal information, and we do not share it for cross-context behavioral advertising. We do not sell, rent or share your mobile number or text-message consent with third parties for their marketing. Mobile numbers are shared only with the text-message provider that delivers our messages.

7. Retention

• Account data is kept while your account is active and deleted within 90 days after the account is closed, except records we must keep for legal, tax or accounting purposes.
• Marketplace access tokens are deleted when you disconnect the marketplace or close your account. Restoq Lister tokens stop working as soon as you disconnect that browser on the Connections page.
• If a marketplace notifies us that you closed your account there, we delete the data we received from that marketplace for that account, except where retention is legally required.

8. Security

Data is encrypted in transit. Marketplace access tokens are encrypted at rest. Access to user data is limited to what is needed to run the Service. No system is completely secure, and we cannot guarantee absolute security.

9. Your choices and rights

• Request access to, correction of, export of or deletion of your personal information by emailing chasepmclean@gmail.com.
• Disconnect a marketplace from Restoq, or revoke Restoq's access from the marketplace's own account settings.
• Unsubscribe from non-essential emails using the link in each email.
• Stop text messages at any time by replying STOP, or by unticking the box under Mobile number in your Profile. Reply HELP for help.

We respond to requests within 45 days. We may need to confirm your identity first, usually by replying from the email address on your account. An authorized agent can make a request for you with your written permission. We will not discriminate against you for exercising these rights. If we decline your request, you can appeal by replying to our decision with "Appeal" in the subject line, and we will respond within 45 days. Depending on where you live, including California, Colorado, Connecticut, Texas, Virginia and other states with privacy laws, you may have additional rights, and we honor those rights where they apply.

Do Not Track and Global Privacy Control

Restoq does not sell personal information or share it for cross-context behavioral advertising, so there is nothing for a Global Privacy Control signal to opt you out of. Our sites do not change their behavior in response to browser Do Not Track signals. We do not use advertising trackers. On payment pages, Stripe's scripts collect device and browser information to prevent fraud, under Stripe's privacy policy.

10. Age requirement

Restoq is intended for people 18 and older and is not directed to children. We do not knowingly collect information from anyone under 18, and accounts may only be created by adults. If we learn that we have collected information from a child under 13, or from anyone under 18 without a valid account, we will delete it. If you believe a minor has given us information, contact us.

11. Where data is stored

Restoq is operated from the United States, and information is stored and processed in the United States.

12. Changes to this policy

We will post any changes on this page and update the effective date. For material changes, we will notify account holders by email before the changes take effect.

13. Contact

Chase McLean, doing business as Restoq
Montana, United States
chasepmclean@gmail.com