Privacy Policy

SellerCtrl ("we", "us") handles information about visitors, account holders, business contacts and people whose details a business enters into the service. Our privacy contact is info@sellerctrl.com.

We determine how account administration, subscription, security and support information is used. We process business records to provide the services requested by the business and follow its authorized instructions. That business is responsible for its lawful collection and use of customer, supplier, employee and other records and for informing the people concerned. If an employer or seller entered your information, contact that business first; we can help route your request.

Account and company information: names, email addresses, usernames, password hashes, business and contact details, addresses, tax identifiers, roles, membership, preferences and optional profile images. We also handle authentication records and, when enabled, multi-factor authentication information.

Records you enter, import or generate: products, SKUs and ASINs, stock, purchases, sales, invoices, returns, fees, accounting entries, bank or payment references and reports. These may contain customer and supplier names, contact details, addresses and tax information; or employee details, attendance and payroll when those modules are used. Documents, attachments and support messages may contain further information you provide.

Connected service information: seller, store and marketplace identifiers, authorized permissions, integration credentials or OAuth tokens, synchronization records and data returned by enabled integrations. Marketplace records can include order IDs, dates, items, quantities, amounts, currencies, fulfilment status, inventory, settlements, reimbursements, returns, catalog and competitive-offer information. Availability depends on your authorization and the provider's API. Reports or files you supply may contain additional buyer or business details.

Subscription and technical information: plans, subscription status, transaction amounts, payment methods and references, receipts or transfer evidence, correspondence, IP addresses used for abuse prevention, request and error details, timestamps, security and audit events, and limited referral information described below.

We use information to administer accounts and workspaces; authenticate users and enforce permissions; provide selected business tools; synchronize authorized marketplace data; reconcile transactions and prepare reports; manage subscriptions and payments; answer support requests and send service messages; maintain backups; investigate errors, fraud and misuse; and meet applicable legal obligations.

Where applicable law requires a legal basis, it depends on the purpose: performing our agreement, legitimate interests in operating and protecting the service, legal obligations, or consent where required. Businesses are responsible for the basis for their operational records. Integration authorization permits specified API access; it is not consent to unrelated marketing. Optional authorizations can be withdrawn as described below.

SellerCtrl currently implements Amazon Selling Partner API (SP-API) connections for authorized seller workflows. Login with Amazon (LwA) is used to authorize that connection and exchange tokens. Current SellerCtrl account login uses SellerCtrl credentials; linking a seller account does not mean your Amazon shopping profile is used to sign you into SellerCtrl.

Amazon handles its sign-in and consent process. We receive connection identifiers and tokens for the permissions granted to our application, not your Amazon password. Stored connection refresh tokens are encrypted; access tokens are used for authorized API requests.

We use connected Amazon data for requested seller services, including order, inventory, financial and marketplace reporting and permitted offer comparisons. We do not sell or rent that data or use it for unrelated advertising. It is not available to another business's workspace. Authorized users within your business and authorized support personnel may access it as needed to provide the service.

Amazon Ads API access and advertising analytics are planned additions. They are not currently implemented as an active Ads API integration. This notice does not represent Amazon approval or partnership. Preparing an LwA security profile does not activate advertising access or change your existing ERP workflows.

If introduced after the necessary approval and implementation, these features will require an appropriate authorized connection. Depending on approved scopes, they may process advertising profile and account IDs, campaigns, ad groups, advertised products, targeting or keywords, budgets, spend and performance reports such as impressions, clicks and attributed results, for requested reporting and analysis. We will update this notice and explain access and controls before processing starts. This section does not assert that these data categories are collected today.

We do not sell or rent personal information or business records. Information is available to authorized workspace members according to their permissions and to personnel who need it for administration, support or security, including controlled workspace support access.

Service providers process information needed for hosting, network delivery and security, databases, file storage, backups, email and enabled payments. Our implementation includes SMTP or Resend for transactional email, xpay for configured checkout, and optional Telegram or configured webhook destinations for notifications and operational alerts. Which providers process your information depends on the configuration and features used. Payment details entered in provider checkout are handled by that provider; SellerCtrl subscription records store transaction and billing information rather than card numbers or card security codes.

We exchange relevant information with Amazon and other providers when you use enabled connections. Document links, email or WhatsApp sharing, exports, notifications and configured automations/webhooks deliver selected content to the recipient or destination you choose. Recipients can retain copies outside SellerCtrl. We may also disclose information to comply with applicable law or valid legal requests, protect people and the service, investigate misuse, or support a business transfer with appropriate confidentiality and notice where required. External services have their own privacy notices.

When you choose AI invoice reading, the document or image you select is sent to Anthropic's API to extract its contents. The feature sends that file and extraction instructions; matching existing suppliers and products takes place within SellerCtrl. Extracted drafts and usage information may be stored. Do not submit unnecessary personal information. Availability depends on configuration; an ordinary Claude subscription is not itself this API service.

If you authorize an external assistant through SellerCtrl's MCP connection, its provider receives results of permitted tool requests. Grants are tied to the authorizing user and one company, are currently read-only, and can be revoked in personal assistant connection settings. SellerCtrl records tool activity. Review the external provider's privacy and retention settings; revoking access does not erase copies it already received.

We use authentication/session and security cookies, a selected-company cookie and language preferences. Language preferences can persist for up to one year. Browser local storage supports preferences such as theme and notification sounds. Blocking or clearing these technologies may sign you out or reset preferences.

The marketing site uses a first-party referral cookie, sc_src, for up to 30 days. It records a source/referral parameter, referring website host or "direct" to associate later signup with its acquisition source. It is not a third-party advertising pixel. You can remove cookies through browser controls.

The current application does not embed a general third-party advertising pixel or a dedicated third-party website analytics SDK. External checkout, support links and embedded learning videos, including YouTube's privacy-enhanced player, can still cause providers to receive connection or usage information when used. We will explain new non-essential tracking and obtain consent where applicable law requires it before enabling it.

Safeguards include HTTPS for public access, hashed passwords, encryption of stored integration secrets, role and company access controls, database tenant isolation, audit records and restricted access to private attachments and backups. Some images, such as product images and company logos, are intentionally served as public display assets; do not put sensitive documents in public-image fields.

No service guarantees absolute security. Protect your credentials and connected accounts, use multi-factor authentication where available, and contact info@sellerctrl.com if you suspect unauthorized access. We assess incidents and provide notifications where applicable law requires. This notice does not claim a security certification or encryption of every category of stored information.

We keep information for the purposes described, considering the account relationship, business instructions, applicable recordkeeping obligations, security, disputes and recovery needs. Subscription expiry does not itself immediately delete all company records. Business records, support correspondence, logs, files and backups can have different retention needs.

An authorized company administrator can request company deletion in organization settings. The current workflow provides a 14-day cancellation window before company-record deletion is scheduled for processing. Export needed records first. Company deletion is distinct from personal-user-account deletion: a user can belong to several companies. Contact us for personal-account deletion or records outside that company workflow.

Deletion from the active service is not instantaneous deletion from every file store, log, backup or third-party recipient. Residual copies may remain pending separate cleanup or backup rotation; off-site copies and user exports can have different lifecycles. Contact us to request handling of residual files and copies. Where retention is required for law, security or a dispute, we explain the limitation when responding. We do not promise one deletion deadline for every category.

Subject to your role, disconnect a marketplace connection in its connection settings and revoke the application's authorization through the provider's account controls. Disconnection removes saved connection credentials in SellerCtrl and prevents their future use; an already-running request may finish. Individual MCP grants can be revoked in personal assistant connection settings.

Disconnection or revocation does not automatically delete imported orders, invoices, reports or other business records. Request deletion separately when required. Revoking a connection does not delete your SellerCtrl account or your Amazon account.

Depending on applicable law, you may have rights to access, correct, delete or obtain a portable copy of personal information; restrict or object to certain processing; withdraw consent for optional processing; and complain to a competent data protection authority. Exceptions may apply, including other people's privacy and lawful recordkeeping obligations.

Email info@sellerctrl.com with your request. We may proportionately verify your identity and authority and coordinate with the business responsible for the records. We respond within applicable legal time limits and explain if a request cannot be fulfilled in full. Account settings and authorized exports also provide some direct controls.

SellerCtrl and the providers or integrations you use may process information outside your country. Locations depend on hosting and provider configuration and may change. We do not promise storage in one particular country. Where applicable law requires safeguards for a cross-border transfer, those requirements must be addressed for that transfer. Contact us about the arrangements relevant to your account.

SellerCtrl is intended for business use and is not directed to children. We do not knowingly invite children to create consumer accounts. Contact us if you believe a child provided personal information without appropriate authority so we can assess and address it.

We may update this notice when the service, integrations or requirements change. We publish the updated notice here with its date and provide additional notice or request consent for material changes where required. Planned Ads features do not authorize new processing before those features are introduced and appropriately authorized.