Privacy – Auction Assistant

Scope and controller

These notices concern the private “mac-store24 Auktionsassistent” application for authorised business users. Controller: Remacs GmbH, represented by managing director Kevin Ludwig, Talstr. 18, 71116 Gärtringen, Germany; support@mac-store24.com; +49 7034 6557262. The application currently retrieves eBay Sandbox test listings only. Automatic bidding is not implemented. These notices will be updated before production use. Visiting this shop information page is also covered by the shop’s general privacy policy.

Purpose, legal basis and data

We process necessary personal data for secure access, account connection, abuse prevention and internal hardware purchasing checks on the basis of Article 6(1)(f) GDPR. Our legitimate interests are secure, traceable offer assessment and account protection. OAuth is a technical access authorisation, not automatically a GDPR consent.

The app receives the signed-in ChatGPT user’s identifier and email address for access control. Connection data include Sandbox application credentials, RuName, OAuth access and refresh tokens, validity and connection times, and a hashed temporary callback value. The eBay password is entered directly at eBay and is not collected or stored by this app.

eBay Sandbox supplies listing IDs, titles, links, prices, currencies, shipping information, end times, conditions, item specifics and seller descriptions. Personal information may occur in those descriptions; the respective Sandbox listing is its source. Suitable test data should be used. Users supply search terms, specifications, exclusions, budgets, price and quantity limits, descriptions and test plans. The server keeps user-related request counters and time windows. Hosting and sign-in providers also process technical access data such as IP address, time, resource and browser information.

Storage and processing

Application credentials and buyer tokens are encrypted on the server and excluded from browser status responses. Traffic uses HTTPS. Rules, separate EUR/USD budgets and test plans are now stored centrally for the authorised app user and can be loaded across devices. Central plans contain title, link, amounts, rule and times, not the full seller description. Earlier browser records remain locally until cleared and are imported only on explicit request. Bid records also contain the title and rule snapshot.

Checks compare the complete seller description, title and item specifics using rules; descriptions are not sent to a language model. Users may explicitly confirm a manual Sandbox bid for a chosen auction and maximum amount. The server rechecks the listing and reserves budget and quantity before sending. There is no automatic scheduler or production bidding and no automated decision about individuals with legal or similarly significant effects. Installed system fonts are used without Google Fonts requests from the app.

Providers and international transfers

Authorised business users and necessary technical providers can access data. The app is hosted through OpenAI ChatGPT Sites with Cloudflare infrastructure. The OpenAI business data processing addendum names OpenAI Ireland Ltd. for EEA customers and forms part of the business services agreement. Cloudflare is listed for Sites web hosting. eBay receives information needed for Sandbox authentication and API requests. OpenAI separately processes account sign-in data. Remacs does not sell listing data or use app data for its advertising mailing lists.

Processing may take place outside the EEA, particularly in the USA. For transfers by OpenAI from the EEA, its addendum provides EU standard contractual clauses or an applicable adequacy decision. Details and copies of safeguards can be requested through our privacy contact. No exclusively European processing is promised.

Retention and disconnection

Credentials and buyer tokens remain until disconnection, replacement or requested deletion; expiry does not automatically delete them. OAuth callbacks are valid ten minutes and once only; invalid metadata can remain until replaced or removed. Request counters have no scheduled deletion. Central rules and unsent test plans remain until removed in the app or on request. Budgets and bid records remain until requested deletion. Accepted or uncertain bids retain their reservation; automatic result reconciliation is not yet implemented. Earlier local records remain until browser site data are cleared. Disconnecting eBay does not delete these central or local records.

The published OpenAI addendum gives no uniform fixed day limit for all platform logs and backups. Relevant criteria are service provision, maintenance and security needs, specific security incidents, contract duration and legal retention requirements. After contract termination, it provides return or deletion on our instruction, subject to legal obligations. An app deletion does not guarantee simultaneous removal from every platform log or backup. Requests can be addressed to us and, where necessary, we involve the hosting provider.

Removing the buyer connection in the app does not automatically revoke eBay’s authorisation; it can also be revoked at eBay. Statutory retention and information required for legal claims remain unaffected.

Your rights

Use is voluntary; protected features require the corresponding sign-in and connection information. Subject to legal conditions, you may request access, correction, erasure, restriction and portability. You may object to legitimate-interest processing on grounds relating to your situation, withdraw data-protection consent where applicable for the future, and complain to a supervisory authority, including the Baden-Württemberg data protection authority. Contact: support@mac-store24.com. Updated: 30 October 2026.

To prevent duplicate bids and document the test, the server stores the linked app user ID, test item ID, attempt ID, status and result, amount and currency, timestamps and any bid ID returned by eBay. Records remain for test review and duplicate prevention until requested deletion; there is no scheduled automatic deletion. Contact us for deletion.