Terms of service

This describes how the product actually behaves, clause by clause, written from the code that implements it. It is published so you can read the arrangement before you rely on it.

It has not been reviewed by a lawyer, and it is not a substitute for advice about your own situation. If you need a countersigned agreement, or terms under a particular jurisdiction, ask before you build a business on this.

Where this document and the product disagree, the product is what is true and this document is what needs fixing. Changes are dated at the top, and material ones are announced on the changelog.

Sellstamp is a payment facilitator, not a merchant of record. We are not party to the sale between you and your customer.

You connect a payment provider you already hold an account with — Stripe, PayPal, Mollie, Monri, CoinGate, a bank rail or cash on delivery. The customer pays into that account, on that provider’s terms. There is no Sellstamp balance, no payout schedule and no float, because there is nothing for one to hold.

Three consequences follow, and they are the whole shape of this agreement:

• You are the seller. The contract of sale is between you and your customer. Your returns policy, your warranty, your consumer-law duties.
• The tax is yours. Sellstamp computes VAT from the scheme you declare and freezes it onto the order, and it will produce the invoices and the numbers a return is filed from. It is not a tax advisor and it never files anything for you.
• We cannot refund your customer. A refund is an instruction you give your provider; Sellstamp records it. If a customer writes to us about an order, we will tell them to write to you.

You need a verified email address to sign in, and one workspace can hold several stores and several people with different roles. Anyone you invite acts with the authority their role carries, and what they do is written to an audit log with their name against it.

• Keep your credentials to yourself. We support passkeys, two-factor authentication and step-up prompts on the acts that deserve them — revealing a licence key, minting an API key, changing where your money lands.
• Changing a payout destination pauses that connection for 24 hours. That is deliberate, it protects you rather than us, and it cannot be waived.
• You are responsible for what your team does with your workspace, and for what an API key or an AI connection you authorise does with it.

A monthly or yearly fee, charged by us, for the software. Never a percentage of your sales. Every plan states the limits it enforces, and the pricing page is rendered from the live plan catalogue rather than from a copy of it — no plan lists a feature the entitlement service does not actually enforce.

• Cancel whenever you like. You keep access to the end of the period you paid for, and we do not pro-rate a partial month back.
• If a payment to us fails, you get a grace period and a short sequence of emails inside it before anything changes. Nothing is deleted at the end of it.
• Exceeding a plan limit stops the next thing you try to create; it never deletes what already exists and never takes a live store offline.
• Your data stays yours. Export it from the dashboard at any time, including on the way out.

The rules live in the acceptable use policy, and they are part of this agreement. The short version: it has to be legal where you and your buyer are, it has to be yours to sell, and it has to be what you say it is.

Enforcement is a person reading a report and typing a reason, never a classifier. There are exactly two actions — hiding one listing, or suspending a store — both reversible, both recorded, and both appealable from your own dashboard.

There is no uptime guarantee here, no service credit and no support SLA. We would rather say that plainly than publish a number nobody is staffed to defend.

• Incidents are written up by a person on the status page. Nothing on it is automatic, which is the point.
• The software is provided as it is. We do not warrant that it fits a particular purpose, and we are not liable for lost profits or lost sales.
• We do not issue TLS certificates for your custom domain. Verification is a DNS record; the proxy in front of your store obtains the certificate.
• Beta or preview surfaces are labelled as such where they exist, and nothing that is not built is described as though it were.

You can close your account whenever you want. We can end this agreement if you break the acceptable use policy, if a payment to us goes unpaid past its grace period, or if we are legally required to.

A suspension is never automatic. A person decides it, types a reason, and that reason is what you are shown and what you appeal against.

Your customers’ rights outlive the account: a licence already issued stays valid on its own terms, and the money already in your provider account was never ours to touch.

For your customers’ personal data you are the controller and we are the processor: it is your shop, your relationship and your legal basis. For your own account data — your email, your sessions, your billing — we are the controller. The privacy policy sets out both, in detail, with what is collected and for how long.

Your customers can export or erase their own data at your store without going through you, and you can trigger an erasure yourself when a request arrives by email. Either way the money records survive with the identifying fields stripped, because you are obliged to keep transaction history.