GDPR & CCPA
Last updated November 3, 2026
This page summarizes how DataSeller AI approaches the EU General Data Protection Regulation (GDPR), the UK GDPR and the California Consumer Privacy Act as amended (CCPA), both for our own processing and for customers who use the Service to package and sell data products. It supplements our Privacy Policy and Data Processing Addendum.
1. 1. Our roles
For account, billing, website and buyer checkout information, Ventureship acts as a controller under the GDPR and a business under the CCPA. For personal data contained in data that customers upload to the Service, we act as a processor under the GDPR and a service provider under the CCPA, processing it only on our customers' instructions.
2. 2. Privacy by design
The Service is built to help Sellers create data products that do not contain personal data. Controls include aggregation, minimum group-size thresholds, suppression of small cells, removal of direct identifiers and review steps before publication. These controls support data minimization and reduce the risk of re-identification.
3. 3. Rights under the GDPR and UK GDPR
If you are in the European Economic Area or the United Kingdom, you have the right to access your personal data, to rectify inaccurate data, to erasure, to restrict or object to processing, to data portability, to withdraw consent at any time, and to lodge a complaint with a supervisory authority.
4. 4. Rights under the CCPA
If you are a California resident, you have the right to know what personal information we collect, use and disclose; to request deletion; to correct inaccurate information; to opt out of the sale or sharing of personal information; to limit the use of sensitive personal information; and not to be discriminated against for exercising these rights.
We do not sell personal information or share it for cross-context behavioral advertising, and we do not use sensitive personal information for purposes that would require a right to limit.
5. 5. How to make a request
Email privacy@dataseller.ai with your request. We will verify your identity using information associated with your account or request, and respond within the time required by law, generally one month under the GDPR and 45 days under the CCPA, with extensions where permitted. You may use an authorized agent, who must provide proof of authorization.
If your request concerns data that one of our customers uploaded, we will direct you to that customer and support them in responding.
6. 6. International transfers
Where personal data is transferred outside the EEA, UK or Switzerland, we rely on adequacy decisions or standard contractual clauses, together with supplementary measures where appropriate.
7. 7. Support for customers
We offer a Data Processing Addendum that is incorporated into our Terms, maintain a list of sub-processor categories, provide breach notification within 72 hours, and assist customers with data subject requests and impact assessments. Customers can export and delete their data through the Service.
8. 8. Contact
For privacy questions or requests, contact privacy@dataseller.ai.