Privacy Policy
Last updated 25 September 2026
In short. We keep what we need to run your bots: your email, the Vinted session you connect, what your bots find and buy, and your Vinted conversations. We never store your Vinted password. We don't sell your data and we don't use advertising cookies. You can ask for a copy of your data, or for it to be deleted, at any time.
Who we are
Pouncio is run by [legal name], [registered address], Portugal, tax number (NIF) [NIF] ("Pouncio", "we"). We are the controller of the personal data described here.
For anything about your data, write to privacy@pouncio.com.
Pouncio is an independent service. It is not made, endorsed or supported by Vinted.
What we collect
Your account
- Your email address, and a name if you give one.
- Your workspace, its members and their roles.
- Sign-in records: when you signed in, and the IP address and browser that signed in. We use them to keep your account secure.
Your Vinted account, when you connect one
- We never store your Vinted password. You sign in on Vinted's own page, which runs in a browser on our servers so that Pouncio can act for you afterwards. We don't record or keep what you type.
- After you sign in, we keep the session Vinted gives that browser, encrypted. That is what lets Pouncio search, message, make offers and buy for you.
- Your Vinted user ID and username, the market you use, and the limits you set: budgets, price caps, test mode.
What Pouncio does for you
- Your bots, their filters and the price tables you make.
- Listings your bots matched, with the decisions and estimates behind them.
- Purchases, offers and their status.
- The conversations in your Vinted inbox and their messages, copied so you can read, sort and answer them in Pouncio.
- Items you track as stock, and the channels you list them on.
Other Vinted members
To find deals, Pouncio reads public listings on Vinted and the public profiles of their sellers, such as their username, rating and number of reviews. Your conversations also contain what other members wrote to you. We use this only to provide Pouncio to you. We don't build profiles of those members and we don't sell or share it.
Payments
Paid plans are billed by Stripe. We keep your plan, your billing period and a Stripe customer reference. Your card details go to Stripe and never reach us.
Notifications
If you connect Telegram, Discord, email alerts or a webhook, we keep what we need to deliver there, such as a Telegram chat ID or a webhook address.
Technical data
Our servers log requests, including IP addresses, to keep the service secure and to fix problems.
Why we use it
| What for | Legal basis |
|---|---|
| Running your account and your bots, and doing what you set them to do on Vinted | Our contract with you |
| Billing your plan | Our contract with you |
| Sign-in emails and alerts about your purchases and your account | Our contract with you |
| Keeping the service and your account secure, preventing abuse, fixing faults | Our legitimate interest in a safe, working service |
| Reading public Vinted listings and seller profiles to find deals | Our legitimate interest, and yours, in finding them |
| Keeping invoices and payment records | Legal obligation |
We don't use your data for advertising, and we don't sell it.
Who we share it with
Only the services that run Pouncio for us, bound by contract to use the data solely for that:
| Service | What it does for us | Where |
|---|---|---|
| netcup GmbH | Hosts our servers and database | EU (Austria) |
| Cloudflare, Inc. | Runs our domain's DNS | Global |
| Stripe Payments Europe, Ltd. | Takes payments for paid plans | EU (Ireland), with transfers to the US |
| Resend, Inc. | Sends our emails | US |
| OpenRouter, Inc., and the AI model providers it routes to | Reads listing titles, descriptions and photos to identify and price items. If you use AI replies or translation, it also reads the messages involved. | US |
| Telegram, Discord, or your own webhook | Delivers alerts, only if you connect them | Depends on the service |
Pouncio also sends requests to Vinted on your behalf, as you set your bots to. Vinted handles that data under its own privacy policy.
We may disclose data when the law requires it, or to protect our rights or someone's safety.
Outside the EU
Some of the services above are in the United States. When your data goes there, it is protected by the European Commission's adequacy decision for the EU-US Data Privacy Framework, where the provider is certified, or by the Commission's standard contractual clauses.
How long we keep it
- While your account is open, we keep what the service needs to work.
- When you ask us to delete your account, we delete your data within 30 days. Copies in backups disappear as the backups are replaced.
- Invoices and payment records are kept for 10 years, as Portuguese tax law requires.
- Server logs are kept only as long as needed for security and troubleshooting.
Disconnecting a Vinted account deletes its stored session straight away.
Your rights
Under the GDPR you can ask us to:
- give you a copy of your data, or send it to another service;
- correct it;
- delete it;
- restrict how we use it, or stop using it where we rely on legitimate interest.
Write to privacy@pouncio.com. We answer within one month. You can also complain to the Portuguese data protection authority, the CNPD, or to the authority where you live.
Cookies
We use only the cookies needed to sign you in and keep you signed in. They don't need your consent and they don't track you across other sites.
We don't use analytics or advertising cookies today. If we add any, we will ask for your consent first and list them here.
Security
Traffic to Pouncio is encrypted. Vinted sessions are encrypted when stored, and each workspace's data is kept apart from every other's in the database. Only the people who run Pouncio can reach the servers. No system is perfectly secure. If a breach puts your data at risk, we will tell you and the authorities as the law requires.
Age
Pouncio is for people aged 18 or over.
Changes
If we change this policy in a way that matters, we will email you before it takes effect. The date at the top says when it last changed.