Privacy Policy

1. Introduction

SellerSmart ("Company", "we", "our", or "us") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you access or use our platform and related services (collectively, the "Service").

By accessing or using the Service, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with our policies and practices, please do not use our Service.

2. Information We Collect

2.1 Information You Provide

We collect information that you voluntarily provide when registering for an account, including:

• Name and email address
• Account credentials
• Profile information from third-party authentication providers, where applicable
• Any other information you choose to provide to us directly

2.2 Marketplace Data

With your express authorisation, we access and process data from your connected marketplace accounts, which may include:

• Order history and transaction data
• Inventory levels and product information
• Financial reports and fee information
• Fulfilment and shipment data
• Performance and advertising metrics

This data is processed solely for the purpose of providing the Service to you.

2.3 Payment Information

Payment processing is handled by secure third-party payment processors. We do not store complete payment card details on our systems. Our payment processors collect and process payment information in accordance with their respective privacy policies and applicable payment card industry standards.

2.4 Automatically Collected Information

When you access the Service, we may automatically collect certain technical information, including:

• Device and browser information
• IP address and approximate location
• Pages visited and features accessed
• Date, time, and duration of visits
• Error logs and diagnostic data

2.5 Google Account, Sheets and Drive Data

Connecting Google is optional. With your authorisation, SellerSmart uses Google Sheets and Drive to let you find spreadsheets, select tabs and columns, and import SellerAmp sourcing exports into your organisation's sourcing workspace for product review and purchase tracking.

Access and collection

• We request read-only Sheets access (spreadsheets.readonly) to read spreadsheet and tab titles, headers and cell values from the sheets you select for import. This permission can read all spreadsheets accessible to your connected Google account; it is not restricted by Google to only the files you select here.
• We request read-only Drive metadata access (drive.metadata.readonly) to list spreadsheet IDs, names and modification times in the file chooser. This permission covers metadata for files in your Drive, although our chooser requests spreadsheet metadata. It does not grant access to other file contents. The integration does not edit or delete Google files.
• We request email and basic profile permissions (userinfo.email and userinfo.profile). Google returns account information; we store your Google email address and account ID to identify the connected account and display its connection status.
• Imported data can include ASINs, product titles, images and links, supplier details, prices, fees, profit, ROI, sales and rank estimates, categories, barcodes, dates, notes and comments. We also retain raw imported row values, including unmapped columns, column mappings, sheet identifiers and import history. Only include information you intend to share with your SellerSmart organisation in an imported sheet.

Use, storage and sharing

We process this data to display and refresh sourcing imports, preserve import history, identify duplicate rows, and support your sourcing decisions and purchase records. Connections and imports are associated with your SellerSmart organisation, rather than a private Google-only workspace, and are available to authorised organisation users. Our Convex backend stores imported data and Google access and refresh tokens, together with token expiry and granted permissions. Refresh tokens allow continued authorised access without asking you to sign in to Google for each import. Google API requests use HTTPS and application access requires authentication and organisation checks.

Google and our infrastructure service providers, including Convex for backend processing and storage, process data as needed to operate this integration. If you choose to include imported information in an assistant conversation, that content is processed by our configured AI service provider to answer your request and is stored with the conversation. Importing a sheet is not itself an instruction to send its contents to an AI model.

Google API Limited Use

SellerSmart's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. These restrictions also apply to data derived from Google API data and take precedence over the general uses and sharing provisions in this policy. Google data is limited to providing or improving prominent, user-facing features. It must not be sold or used for advertising, creditworthiness or lending purposes.

Transfers of Google data are limited to providing or improving these features with your consent, security purposes, compliance with applicable law, or a merger, acquisition or sale of assets with your explicit prior consent. Human access is limited to your affirmative agreement to view specific data, security needs, legal requirements, or aggregated data used for internal operations as permitted by Google's policy and applicable law.

Retention, disconnecting and deletion

We retain the connection credentials while the connection is in place. Disconnecting Google Sheets in SellerSmart removes the stored connection credentials and linked-sheet settings. Unlinking a single sheet removes that sheet's link. Neither action deletes previously imported rows, import history or sourcing and purchase records created from those imports. These records remain stored for your workspace; they do not have an automatic expiry tied to disconnecting or unlinking.

Disconnecting in SellerSmart does not revoke the permission in your Google account. To revoke Google authorisation, remove SellerSmart from your Google Account connections. Revoking access prevents further authorised Google API access but does not erase copies already imported into SellerSmart.

To request deletion of Google-derived data retained in SellerSmart, including import history and related workspace records, contact support@sellersmart.io. Please identify your organisation and the data concerned. We review requests under applicable data protection law, including any legal obligations requiring retention. Deleting SellerSmart copies does not delete your original Google spreadsheets.

3. How We Use Your Information

We use the information we collect for the following purposes:

• To provide, operate, and maintain the Service
• To process transactions and manage your subscription
• To generate analytics, reports, and insights based on your marketplace data
• To communicate with you regarding your account, including technical notices, updates, and support
• To respond to your enquiries and requests
• To monitor and analyse usage patterns and trends to improve the Service
• To detect, investigate, and prevent fraudulent, unauthorised, or illegal activity
• To comply with legal obligations and enforce our terms

4. Cookies and Tracking Technologies

4.1 Essential Cookies

We use essential cookies that are strictly necessary for the operation of the Service, including authentication and session management. These cookies cannot be disabled as they are required for the Service to function.

4.2 Performance and Analytics

We may use performance cookies and similar technologies to collect information about how you interact with the Service. This helps us identify and resolve technical issues and improve user experience.

4.3 Third-Party Technologies

The Service may incorporate third-party tools and widgets to provide certain functionality, such as customer support. These third parties may use their own cookies and tracking technologies in accordance with their respective privacy policies.

4.4 Your Cookie Choices

You may control cookies through your browser settings. Please note that disabling essential cookies may impair your ability to use certain features of the Service.

5. Data Sharing and Disclosure

We do not sell, rent, or trade your personal information. We may share your information in the following circumstances:

• Service Providers: We engage trusted third-party service providers to assist in operating the Service and conducting our business. These providers are contractually obligated to protect your information and use it only for the purposes for which it was disclosed.
• Legal Requirements: We may disclose your information where required by law, regulation, legal process, or governmental request.
• Protection of Rights: We may disclose information to protect the rights, property, or safety of SellerSmart, our users, or others.
• Business Transfers: In the event of a merger, acquisition, reorganisation, or sale of assets, your information may be transferred as part of that transaction.

6. Data Retention

We retain your personal information for as long as your account remains active or as necessary to provide you with the Service. We will also retain and use your information as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements.

Marketplace data is retained for the duration of your subscription and for a reasonable period thereafter to facilitate account reactivation. You may request deletion of your data at any time by contacting us.

7. Your Rights Under Data Protection Law

Depending on your location, you may have certain rights regarding your personal data under applicable data protection legislation, including the UK General Data Protection Regulation (UK GDPR) and the EU General Data Protection Regulation (EU GDPR). These rights may include:

• Right of Access: The right to request a copy of the personal data we hold about you.
• Right to Rectification: The right to request correction of inaccurate or incomplete personal data.
• Right to Erasure: The right to request deletion of your personal data in certain circumstances.
• Right to Restriction: The right to request restriction of processing of your personal data.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used format.
• Right to Object: The right to object to processing based on legitimate interests or for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on consent, the right to withdraw that consent at any time.

To exercise any of these rights, please contact us using the details provided below. We will respond to your request within the timeframe required by applicable law.

8. Data Security

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit using industry-standard protocols
• Encryption of sensitive data at rest
• Access controls and authentication mechanisms
• Regular security assessments and monitoring

However, no method of transmission over the Internet or method of electronic storage is completely secure. While we strive to protect your personal information, we cannot guarantee its absolute security.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from those in your jurisdiction. Where we transfer personal data internationally, we ensure that appropriate safeguards are in place in accordance with applicable data protection law, including the use of Standard Contractual Clauses approved by the relevant authorities.

10. Children's Privacy

The Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal information, please contact us immediately.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. We will notify you of any material changes by posting the updated Privacy Policy on this page. We encourage you to review this Privacy Policy periodically.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at support@sellersmart.io.