Privacy Policy

1. Information we collect

Account information. When you sign up we collect your name, work email, business or agency name, country and a hashed password. If you enable two-factor sign-in we store an encrypted authenticator secret and hashed recovery codes.

Marketplace data. When you connect a store, we receive data from the marketplace through its official API with your authorization, such as orders, financial events and settlements, fees, inventory, listings, returns, reimbursements and account health metrics. We do not request access to buyers' personal information (such as names, addresses or phone numbers) through restricted marketplace roles.

Information you add. Product costs, expenses, notes, team invitations, branding and messages you send us.

Usage and device information. Sign-in times, IP address, browser type and actions in the app, recorded for security, troubleshooting and audit purposes.

2. How we use information

• To provide the service: importing and analyzing your marketplace data, calculating profit, detecting recoverable amounts and showing results to the people you authorize.
• To secure accounts: verifying email addresses, detecting suspicious activity, rate-limiting sign-in attempts and keeping audit logs.
• To communicate with you: service emails (verification, password reset, alerts) and replies to your requests. Marketing emails only with your consent, and you can unsubscribe at any time.
• To improve SellerSyd, using aggregated and de-identified information.

We do not sell your personal information or your marketplace data, and we do not use your marketplace data to compete with you or for advertising.

3. Legal bases (EEA/UK)

We process personal data to perform our contract with you, for our legitimate interests in securing and improving the service, to comply with legal obligations, and with your consent where required.

4. Sharing

We share information only with:

• People you authorize: your team members, and your agency if you are an agency client, according to the permissions set in your account.
• Service providers who process data on our behalf under contract, such as cloud hosting (Amazon Web Services, Amazon Lightsail) and transactional email (Resend).
• Marketplaces, when you take an action that requires it (for example filing a claim or sending a review request).
• Authorities, when required by law, or to protect the rights and safety of our users and the public.

5. Retention

We keep account and marketplace data while your account is active. If you disconnect a store or close your account, we delete the related data within 90 days, except where we must keep limited records for legal, tax or security reasons. In practice: a disconnected Amazon account's data is deleted 30 days later unless you reconnect, and you can delete your whole account yourself in Settings → Account & Security, which takes effect 14 days later so you can change your mind. Backups are overwritten on a rolling schedule.

6. Security

We use encryption in transit and at rest, account isolation, least-privilege access, two-factor sign-in and audit logging. See our security page for details. No system is perfectly secure, and we will notify you and the relevant authorities of a data breach as required by law.

7. International transfers

Our infrastructure is located in the United States (AWS us-east-1, N. Virginia). Where we transfer personal data internationally, we use appropriate safeguards such as Standard Contractual Clauses.

8. Your rights

Depending on where you live (including under India's Digital Personal Data Protection Act, 2023, the GDPR, UK GDPR and California privacy law), you may have the right to access, correct, delete or export your personal data, to object to or restrict certain processing, and to withdraw consent. To exercise these rights, or to raise a grievance, email our Grievance Officer at privacy@sellersyd.com; we respond within 30 days. You can also complain to your local data protection authority.

9. Cookies

SellerSyd uses only essential cookies: a session cookie to keep you signed in and short-lived cookies that secure marketplace connections. We do not use advertising cookies.

10. Children

SellerSyd is a business service and is not directed to children under 16.

11. Changes and contact

We will post changes to this policy here and, for material changes, notify account owners by email. Questions: privacy@sellersyd.com.