Privacy Policy

Last updated 20 October 2026

This translation is provided for convenience. Where it differs from the English version, the English version applies.

Who we are

Pouncio is run by Victor Campello, Unipessoal LDA, Rua Daniel Lopes nº 8, 2735-094 Agualva-Cacém, Portugal, tax number (NIF) 518155552 ("Pouncio", "we"). We are the controller of the personal data described here.

For anything about your data, write to privacy@pouncio.com.

Pouncio is an independent service. It is not made, endorsed or supported by Vinted.

What we collect

Your account

• Your email address, and a name if you give one.
• Your workspace, its members and their roles.
• Sign-in records: when you signed in, and the IP address and browser that signed in. We use them to keep your account secure.
• How you found Pouncio, noted once when you create your account: the site or campaign your visit that day came from (for example a search engine), the page you arrived on, your country and the kind of device.

Your Vinted account, when you connect one

• We never store your Vinted password. You sign in on Vinted's own page, which runs in a browser on our servers so that Pouncio can act for you afterwards. We don't record or keep what you type.
• After you sign in, we keep the session Vinted gives that browser, encrypted. That is what lets Pouncio search, message, make offers and buy for you.
• Your Vinted user ID and username, the market you use, and the limits you set: budgets, price caps, test mode.

The Pouncio browser extension, if you install it

• The extension lets your bots buy from your own browser. It only works on Vinted's sites and on pouncio.com.
• When you pair it, it sends us the pairing code and the name of your browser, and we give it a key that links it to your Pouncio account.
• While it is connected, it tells us which Vinted account is signed in in that browser (user ID and username) and whether its Vinted tab is ready. When one of your bots decides to buy or make an offer, it does it in that tab: it starts the checkout, sets its delivery, makes the offer or pays, and sends us Vinted's answer, such as the status of the order and the payment. If your plan buys by itself, it also reads Vinted's newest listings in the categories your bots watch, for your bots only.
• It doesn't read your browsing history or other sites, it never sees your passwords or card details, and it doesn't send us your Vinted cookies. What it sends is used only to make your purchases and show you their status. It is never sold or used for advertising.
• You can unpair or uninstall it at any time. We then stop accepting its key.

What Pouncio does for you

• Your bots, their filters and the price tables you make.
• Listings your bots matched, with the decisions and estimates behind them.
• Purchases, offers and their status.
• The conversations in your Vinted inbox and their messages, copied so you can read, sort and answer them in Pouncio.
• Items you track as stock, and the channels you list them on.

Other Vinted members

To find deals, Pouncio reads public listings on Vinted and the public profiles of their sellers, such as their username, rating and number of reviews. Your conversations also contain what other members wrote to you. We use this only to provide Pouncio to you. We don't build profiles of those members and we don't sell or share it.

Payments

Paid plans are billed by Stripe. We keep your plan, your billing period and a Stripe customer reference. Your card details go to Stripe and never reach us.

Notifications

If you connect Telegram, Discord, email alerts or a webhook, we keep what we need to deliver there, such as a Telegram chat ID or a webhook address.

Technical data

Our servers log requests, including IP addresses, to keep the service secure and to fix problems.

Counting visits

We count visits to our pages without cookies. For each page we keep which page it was, the site that linked to it, any campaign tag in the link, the country (worked out from your IP address on our own server), your browser's language, and the kind of device, browser and operating system. We don't keep your IP address or your browser's details for this. So that a visitor who comes back is counted once, we use a code made from your IP address and browser (or your account, when you're signed in) with a secret key that stays on our server; it can't be turned back into your address, and it is deleted with the counts. Country lookups use DB-IP's database on our own server; nothing is sent to anyone.

If you came from one of our Google ads

When you arrive by clicking one of our ads on Google, we ask whether we may tell Google if you then sign up. Only if you say yes, we keep the click code Google added to the link, first in your browser and then with your account, and send Google that code with what happened (a sign-up or a first payment), when, and the amount paid. Never your email, and nothing you do in Pouncio. Google uses it to measure which ads work, not to show you ads. If you say no, or don't answer, nothing is kept or sent. You can withdraw your consent at any time by writing to us, and we will delete the code.

Why we use it

Apart from telling Google which ad brought you, when you agree to it, we don't use your data for advertising, and we don't sell it.

Pouncio in ChatGPT

You can ask Pouncio about Vinted prices from inside ChatGPT, without a Pouncio account. ChatGPT then sends Pouncio only what it needs to answer the question:

• the item you asked about, in the words you or ChatGPT typed, or the Vinted listing link you pasted;
• an asking price, if you gave one, and the Vinted country you asked about;
• an anonymous code ChatGPT adds to each request, which we use only to limit how many questions are answered per hour.

We don't receive your name, your email, your ChatGPT account or the rest of your conversation, and nothing links your questions to a Pouncio account. Pouncio in ChatGPT only reads: it doesn't sign in to Vinted, buy, message or change anything.

We use what we receive only to answer your question, from prices Pouncio already holds: Vinted sales Pouncio read in the last 60 days, second-hand retail prices and our own price tables. Nothing is sent to Vinted, to an AI model or to anyone else to answer it. The legal basis is our legitimate interest, and yours, in answering the question you asked.

We don't save your questions in our database or use them to build a profile. Like every request to our servers, they can appear in our server logs, which are deleted within 30 days. We also count how many questions each tool answers per day, with nothing that shows who asked.

Pouncio's answer goes back to ChatGPT, which OpenAI handles under its own privacy policy.

For anything about your data, write to privacy@pouncio.com.

Who we share it with

Only the services that run Pouncio for us, bound by contract to use the data solely for that:

Pouncio also sends requests to Vinted on your behalf, as you set your bots to. Vinted handles that data under its own privacy policy.

We may disclose data when the law requires it, or to protect our rights or someone's safety.

Outside the EU

Some of the services above are in the United States. When your data goes there, it is protected by the European Commission's adequacy decision for the EU-US Data Privacy Framework, where the provider is certified, or by the Commission's standard contractual clauses.

How long we keep it

• While your account is open, we keep what the service needs to work.
• When you delete your account in Settings, or ask us to, we delete your data within 30 days. Copies in backups disappear as the backups are replaced.
• Invoices and payment records are kept for 10 years, as Portuguese tax law requires.
• Server logs are kept only as long as needed for security and troubleshooting.
• Visit counts are deleted after about 13 months.
• A Google ad's click code is kept with your account while it is open, if you agreed to it.

Disconnecting a Vinted account deletes its stored session straight away.

Your rights

Under the GDPR you can ask us to:

• give you a copy of your data, or send it to another service;
• correct it;
• delete it;
• restrict how we use it, or stop using it where we rely on legitimate interest.

Write to privacy@pouncio.com. We answer within one month. You can also complain to the Portuguese data protection authority, the CNPD, or to the authority where you live.

Cookies

We use only the cookies needed to sign you in and keep you signed in, and one that remembers the language you picked on our pages (vp_lang, kept for a year). They don't need your consent and they don't track you across other sites.

We don't use analytics or advertising cookies; the visit counting above works without any. If we add such cookies, we will ask for your consent first and list them here.

If you say yes to the question about our Google ad, your browser also keeps that ad's click code (vp_ad) for up to 90 days, so it can go with your sign-up. It is not a cookie, and it is sent nowhere until you sign up.

Security

Traffic to Pouncio is encrypted. Vinted sessions are encrypted when stored, and each workspace's data is kept apart from every other's in the database. Only the people who run Pouncio can reach the servers. No system is perfectly secure. If a breach puts your data at risk, we will tell you and the authorities as the law requires.

Age

Pouncio is for people aged 18 or over.

Changes

If we change this policy in a way that matters, we will email you before it takes effect. The date at the top says when it last changed.