Privacy Policy

Sol Market Intelligence is a software service operated by Daniel Ring in the United Kingdom.

Privacy questions and rights requests can be sent securely through the privacy contact form below. SMI does not publish the operator's residential address.

This policy covers personal information processed through the SMI website and application, connected marketplace and supplier integrations, account and workspace administration, operational communications, and enquiries submitted through the privacy contact form.

Accounts and workspaces. Account email addresses, display names, password hashes and salts, account status and role, workspace names, membership roles, invitation and setup records, and workspace preferences.

Marketplaces, listings and orders. Marketplace account and integration identifiers, safe connection metadata, listings, SKUs, quantities, order and payment status, timestamps, amounts, currencies, tax, shipping, discounts, refund or cancellation evidence, fulfilment information, and delivery country and postcode. SMI does not process customers' card details.

Suppliers and products. Product, variant, stock, warehouse, price, shipping-quote, quality and account-quota information from configured supplier services.

Integrations and credentials. OAuth authorisation metadata, granted permissions, token expiry information, and encrypted third-party credentials and tokens. These values are held server-side and are not intended to be exposed publicly.

Communications and operations. Invitation and transactional-email delivery records, authentication and administrative audit events, security and integration health information, safe error codes, request timing and other operational evidence.

Privacy enquiries. The name, email address, category, subject and message that a person voluntarily submits through the form below, plus a submission time and request identifier.

When a user connects an eBay account, SMI may obtain and process information made available through authorised eBay APIs according to the permissions that user grants. Depending on enabled functionality, this may include eBay account and integration identifiers, listings and listing status, orders and transaction information, fulfilment-related information, and marketplace metadata needed to operate and reconcile authorised workflows.

SMI uses eBay information only for authorised SMI functionality. SMI does not ask for or store a user's eBay password: connection uses OAuth or other eBay-authorised mechanisms, and access is limited to granted permissions. Users may disconnect SMI and revoke access through eBay. SMI does not sell eBay personal information and does not use eBay-derived personal information incompatibly with eBay's requirements.

SMI receives verified eBay Marketplace Account Deletion notifications through a public endpoint. Identifiers from a notification are stored as one-way hashes for matching and review. Matched eBay personal or account-linked records can be deleted where appropriate; information is retained only where the operator determines that a specific legal requirement applies. Commercial, tax, accounting, fraud, legal, audit, unrelated-workspace and uncertain records are not automatically erased without authorised review.

SMI uses information to operate and secure the service; authenticate users; administer workspaces; provide authorised marketplace and supplier connections; source and analyse products; support listing, order and fulfilment workflows; preserve audit and operational integrity; detect or prevent abuse and security incidents; send transactional communications; respond to privacy enquiries; and meet applicable legal and regulatory obligations.

The lawful basis depends on the activity. SMI may process information because it is necessary to provide a requested service or perform a contract, because it is required by law, or because SMI or another party has a legitimate interest such as operating and securing the service, preventing misuse, maintaining records and responding to enquiries. Where SMI specifically asks for consent, consent is the basis for that processing and may be withdrawn. Withdrawal does not affect processing already carried out lawfully.

Information may be shared with providers needed to operate SMI, including eBay for authorised marketplace services, Resend for outbound transactional and privacy-enquiry email, hosting and database infrastructure providers, and connected supplier or marketplace services expressly authorised by users. The current CJdropshipping connection supports product and supplier research where enabled.

Providers receive only information needed for the relevant service and may also process information under their own terms and privacy notices. SMI does not sell personal information.

Some third-party providers may process information outside the United Kingdom. Where UK data-protection law requires safeguards for an international transfer, SMI relies on an appropriate lawful safeguard applicable to the provider and transfer. The specific provider arrangements depend on the services configured for production.

SMI retains information only for as long as reasonably necessary for the purpose for which it was collected, including legal, security, accounting, audit, fraud-prevention and dispute purposes. The repository does not establish one fixed period for every category.

Credentials and sessions can be revoked, and sessions expire. Some evidence, order, transaction, decision and audit records are deliberately append-only or protected from automatic deletion to preserve integrity. A deletion request is assessed against applicable obligations; information may be deleted, de-identified, restricted or retained where a specific lawful requirement applies.

SMI applies access controls, workspace isolation, protected server-side credential storage, secure OAuth workflows, signed webhook verification and audit records. Stored integration secrets are encrypted and bound to their workspace and provider context. Passwords, session tokens, setup credentials and deletion identifiers are hashed where the original value is not needed. No online service can guarantee absolute security.

SMI uses a strictly necessary session cookie to authenticate signed-in users. In production it is marked Secure, HttpOnly and SameSite Strict. Database-backed sessions expire after eight hours and can be revoked. The public privacy page and form do not add analytics, advertising cookies, tracking pixels or behavioural-advertising technology.

SMI uses software analysis to support product, supplier, marketplace and operational decisions. Commercially consequential workflows use explicit safeguards and, where required by the current architecture, authenticated human review or approval. SMI does not currently use the service to make solely automated decisions that produce legal or similarly significant effects about the people whose personal information is described in this policy.

Depending on the circumstances and lawful basis, a person may have rights to request access, correction, erasure, restriction or portability of personal information, to object to processing, and to withdraw consent where consent is the lawful basis. SMI may need to verify the requester's identity and may keep a limited record of the request and response.

Use the privacy contact form below to make a request.

If a concern cannot be resolved directly, UK users may complain to the Information Commissioner's Office (ICO).

SMI is a business software service intended for adult users and is not directed at children.

SMI may update this policy when its services, providers or legal obligations change. The effective and last-updated date at the top of this page identifies the latest published revision.