# Consent Forms & Templates **SnapSell AI** **Effective Date:** January 2025 **Last Updated:** January 2025 --- ## 1. Introduction This document contains consent form templates used by SnapSell AI for collecting valid consent under GDPR Articles 6(1)(a) and 7. All consent collection must be: - **Freely given** - no bundling with service access - **Specific** - clearly defined purpose - **Informed** - plain language explanation - **Unambiguous** - affirmative action required --- ## 2. Account Registration Consent ### 2.1 Terms & Privacy Acceptance **Location:** Registration screen **Type:** Checkbox (required for account creation) **Legal Basis:** Contract (Art. 6(1)(b)) ``` ┌─────────────────────────────────────────────────────────────────────┐ │ CREATE YOUR ACCOUNT │ ├─────────────────────────────────────────────────────────────────────┤ │ │ │ [ ] I have read and agree to the Terms of Service and │ │ acknowledge the Privacy Policy. │ │ │ │ • Terms of Service (link) │ │ • Privacy Policy (link) │ │ │ │ By creating an account, you confirm you are at least 18 years old. │ │ │ │ [Create Account] │ │ │ └─────────────────────────────────────────────────────────────────────┘ ``` **Backend Data:** ```json { "consent_type": "terms_acceptance", "timestamp": "2025-01-20T12:00:00Z", "version": "1.0", "ip_address": "[hashed]", "user_agent": "[browser info]" } ``` --- ## 3. Marketing Communications Consent ### 3.1 Email Marketing (Registration) **Location:** Registration screen (optional) **Type:** Checkbox (unchecked by default) **Legal Basis:** Consent (Art. 6(1)(a)) ``` ┌─────────────────────────────────────────────────────────────────────┐ │ STAY UPDATED (Optional) │ ├─────────────────────────────────────────────────────────────────────┤ │ │ │ [ ] Yes, I'd like to receive marketing emails from SnapSell AI │ │ including: │ │ • Product updates and new features │ │ • Tips for selling more effectively │ │ • Special offers and promotions │ │ │ │ You can unsubscribe at any time via email link or │ │ account settings. │ │ │ └─────────────────────────────────────────────────────────────────────┘ ``` **Backend Data:** ```json { "consent_type": "marketing_email", "consent_given": true, "timestamp": "2025-01-20T12:00:00Z", "version": "1.0", "scope": ["product_updates", "tips", "promotions"], "withdrawal_method": "email_link_or_settings" } ``` ### 3.2 Marketing Consent (In-App Prompt) **Location:** Settings or post-registration prompt **Type:** Toggle switch ``` ┌─────────────────────────────────────────────────────────────────────┐ │ COMMUNICATION PREFERENCES │ ├─────────────────────────────────────────────────────────────────────┤ │ │ │ Marketing Emails [○━━━━━━━━━●] │ │ Receive updates, tips, and promotional offers ON │ │ │ │ Push Notifications [●━━━━━━━━━○] │ │ Get notified about messages and sales OFF │ │ │ │ ───────────────────────────────────────────────────────────────── │ │ Transactional emails (order confirmations, security alerts) │ │ are always sent regardless of these settings. │ │ │ └─────────────────────────────────────────────────────────────────────┘ ``` --- ## 4. Analytics Consent ### 4.1 Cookie Consent Banner **Location:** Website first visit **Type:** Multi-option banner **Legal Basis:** Consent (Art. 6(1)(a)) ``` ┌─────────────────────────────────────────────────────────────────────┐ │ 🍪 Cookie Preferences │ ├─────────────────────────────────────────────────────────────────────┤ │ │ │ We use cookies to improve your experience. Essential cookies are │ │ required for the site to work. Other cookies help us understand │ │ how you use SnapSell AI. │ │ │ │ ┌─────────────────────────────────────────────────────────────┐ │ │ │ Essential Cookies [Required] │ │ │ │ Required for basic functionality │ │ │ ├─────────────────────────────────────────────────────────────┤ │ │ │ Functional Cookies [ ] Enable │ │ │ │ Remember your preferences │ │ │ ├─────────────────────────────────────────────────────────────┤ │ │ │ Analytics Cookies [ ] Enable │ │ │ │ Help us improve the platform │ │ │ └─────────────────────────────────────────────────────────────┘ │ │ │ │ [Accept All] [Save Preferences] [Reject Non-Essential] │ │ │ │ Cookie Policy (link) │ │ │ └─────────────────────────────────────────────────────────────────────┘ ``` **Backend Data:** ```json { "consent_type": "cookies", "timestamp": "2025-01-20T12:00:00Z", "version": "1.0", "preferences": { "essential": true, "functional": false, "analytics": true }, "interaction": "accept_all|save_preferences|reject" } ``` --- ## 5. AI Processing Consent ### 5.1 AI Model Training Opt-Out **Location:** Privacy Settings **Type:** Toggle (opted-in by default with clear disclosure) **Legal Basis:** Legitimate Interest with opt-out (Art. 6(1)(f)) ``` ┌─────────────────────────────────────────────────────────────────────┐ │ AI & DATA SETTINGS │ ├─────────────────────────────────────────────────────────────────────┤ │ │ │ Help Improve Our AI [○━━━━━━━━━●] │ │ ON │ │ │ │ When enabled, anonymized and aggregated data from your photos │ │ may be used to improve our AI models. This helps us provide │ │ better photo enhancement for all users. │ │ │ │ What we use: │ │ • Anonymized photo characteristics (not the photos themselves) │ │ • Enhancement quality feedback │ │ • Aggregated usage patterns │ │ │ │ What we never use: │ │ • Your original photos with identifiable content │ │ • Personal information │ │ • Individual user tracking │ │ │ │ Learn more about AI training (link) │ │ │ └─────────────────────────────────────────────────────────────────────┘ ``` **Backend Data:** ```json { "consent_type": "ai_training_optout", "opted_in": true, "timestamp": "2025-01-20T12:00:00Z", "version": "1.0" } ``` --- ## 6. Platform Connection Consent ### 6.1 External Marketplace Authorization **Location:** Platform connection flow **Type:** Explicit authorization screen **Legal Basis:** Contract (Art. 6(1)(b)) ``` ┌─────────────────────────────────────────────────────────────────────┐ │ CONNECT TO EBAY │ ├─────────────────────────────────────────────────────────────────────┤ │ │ │ By connecting your eBay account, you authorize SnapSell AI to: │ │ │ │ ✓ Create listings on your behalf │ │ ✓ Upload photos to your eBay listings │ │ ✓ Update listing information (price, description, status) │ │ ✓ Receive notifications about your sales │ │ │ │ We will NOT: │ │ ✗ Access your eBay password │ │ ✗ Make purchases on your account │ │ ✗ Access your payment information on eBay │ │ │ │ You can disconnect at any time in Settings. │ │ │ │ [ ] I authorize SnapSell AI to manage listings on my eBay account │ │ │ │ [Cancel] [Connect to eBay →] │ │ │ └─────────────────────────────────────────────────────────────────────┘ ``` --- ## 7. Data Subject Rights Forms ### 7.1 Data Access Request **Location:** Email template / In-app form **GDPR Reference:** Article 15 ``` SUBJECT: Data Access Request - SnapSell AI To: privacy@snap-sell.app I am requesting access to all personal data that SnapSell AI holds about me pursuant to Article 15 of the GDPR. Please provide: □ Categories of personal data being processed □ Purposes of processing □ Recipients of my data □ Retention periods □ A copy of my personal data in machine-readable format My account details: - Email: [user's email] - Account ID (if known): [user's ID] For identity verification, I confirm that this request is sent from my registered email address. Date: [date] Signature: [electronic signature or typed name] ``` ### 7.2 Data Deletion Request **Location:** Email template / In-app form **GDPR Reference:** Article 17 ``` SUBJECT: Data Deletion Request - SnapSell AI To: privacy@snap-sell.app I am requesting deletion of all my personal data held by SnapSell AI pursuant to Article 17 of the GDPR ("Right to be Forgotten"). I understand that: - Some data may be retained for legal obligations (e.g., tax records) - This action cannot be undone - My account will be permanently closed My account details: - Email: [user's email] - Account ID (if known): [user's ID] Reason for deletion (optional): [reason] For identity verification, I confirm that this request is sent from my registered email address. Date: [date] Signature: [electronic signature or typed name] ``` ### 7.3 Data Portability Request **Location:** Email template / In-app form **GDPR Reference:** Article 20 ``` SUBJECT: Data Portability Request - SnapSell AI To: privacy@snap-sell.app I am requesting a copy of my personal data in a structured, commonly used, and machine-readable format pursuant to Article 20 of the GDPR. Please provide my data in: [ ] JSON [ ] CSV [ ] Other: _______ Data categories requested: □ Account information □ Listing data □ Photos (original and enhanced) □ Transaction history □ Messages □ All available data My account details: - Email: [user's email] - Account ID (if known): [user's ID] Date: [date] Signature: [electronic signature or typed name] ``` --- ## 8. Consent Withdrawal ### 8.1 In-App Consent Management **Location:** Settings → Privacy **Functionality:** Central consent dashboard ``` ┌─────────────────────────────────────────────────────────────────────┐ │ MANAGE YOUR CONSENTS │ ├─────────────────────────────────────────────────────────────────────┤ │ │ │ Marketing Communications │ │ Granted: January 15, 2025 [Withdraw] │ │ │ │ Analytics Cookies │ │ Granted: January 15, 2025 [Withdraw] │ │ │ │ AI Training Data │ │ Status: Opted In [Opt Out] │ │ │ │ Connected Platforms │ │ • eBay - Connected Jan 16, 2025 [Disconnect] │ │ • Allegro - Not connected [Connect] │ │ │ │ ───────────────────────────────────────────────────────────────── │ │ │ │ Download my data (link) Delete my account (link) │ │ │ └─────────────────────────────────────────────────────────────────────┘ ``` ### 8.2 Withdrawal Confirmation ``` ┌─────────────────────────────────────────────────────────────────────┐ │ CONFIRM WITHDRAWAL │ ├─────────────────────────────────────────────────────────────────────┤ │ │ │ You are withdrawing consent for: Marketing Communications │ │ │ │ What this means: │ │ • You will no longer receive promotional emails │ │ • You may miss out on special offers and product updates │ │ • Your service will not be affected │ │ │ │ Note: This does not affect the lawfulness of processing │ │ based on consent before its withdrawal. │ │ │ │ [Cancel] [Confirm Withdrawal] │ │ │ └─────────────────────────────────────────────────────────────────────┘ ``` --- ## 9. Consent Record Keeping ### 9.1 Consent Log Structure For each consent, we record: ```json { "user_id": "user_123", "consent_id": "consent_abc123", "consent_type": "marketing_email", "consent_given": true, "timestamp": "2025-01-20T12:00:00Z", "ip_address_hash": "sha256:...", "user_agent": "Mozilla/5.0...", "consent_version": "1.0", "consent_text_hash": "sha256:...", "collection_method": "registration_form", "withdrawal_timestamp": null } ``` ### 9.2 Retention of Consent Records - Active consents: Duration of account + 3 years - Withdrawn consents: 3 years from withdrawal date - Purpose: Demonstrate compliance with GDPR Art. 7(1) --- ## 10. Implementation Notes ### For Developers 1. **Never pre-check consent boxes** - all optional consents must be unchecked by default 2. **Separate service and consent** - don't bundle marketing consent with account creation 3. **Record everything** - timestamp, version, IP, user agent for all consents 4. **Easy withdrawal** - make it as easy to withdraw as to give consent 5. **Version control** - track changes to consent text and link to specific versions ### For Legal/Compliance 1. Review consent texts before implementation 2. Update version numbers when consent language changes 3. Re-obtain consent if purposes materially change 4. Maintain audit trail of consent form changes --- ## 11. Contact Questions about consent management: **Email:** privacy@snap-sell.app **Data Controller:** SnapSell AI Operated by Nova AI Ventures Registered in Poland --- *These Consent Forms are part of SnapSell AI's GDPR compliance documentation.*