Privacy policy
Last updated: April 2026. We don't sell seller data, ever.
Plain-English summary
- We collect the minimum data needed to run the product (account info, marketplace credentials, your catalog and orders).
- We never sell, rent, or share seller data with third parties for marketing.
- Marketplace API credentials are encrypted at rest with a per-tenant key.
- You can export or delete all your data at any time from the Account page.
- We use sub-processors only for what you'd expect (Stripe for billing, SendGrid for email, Cloudflare for CDN).
1. Who we are
SellersSense is a product of Evolved Sense Technologies ("we", "us"). Contact: [email protected].
2. What we collect
Account data: name, email, hashed password, role, sign-in timestamps. Stored as long as your account exists.
Marketplace data: product catalog, listings, orders, inventory, repricing rules, keyword tracking, PPC reports — synced from connected marketplaces under your authorisation. We are a data processor for this content; you remain the controller.
Marketplace credentials: OAuth refresh tokens encrypted with a per-tenant key. Never logged in plaintext. Revocable from the Connections page; revocation deletes the token.
Usage data: server logs (request URL, response code, duration, anonymised IP) retained 30 days for debugging + abuse prevention. Not joined with marketing pixels.
Billing data: handled by Stripe. We store a customer-id pointer, not card numbers. See Stripe's privacy policy.
3. How we use it
- Operating the product (rendering listings, repricing, syncing orders).
- Sending transactional email (login alerts, billing receipts, weekly digest if subscribed).
- Customer support (when you email us, we may look up your workspace to help).
- Aggregate, anonymised analytics on product usage to prioritise improvements.
- Legal compliance (responding to lawful requests; we publish a transparency report).
4. What we don't do
- Sell seller data to third parties.
- Use seller data to train AI models without explicit opt-in.
- Share data across tenants.
- Track sellers across other websites.
- Enrol you in marketing email by default.
5. Sub-processors
Oracle Cloud (compute + storage, Mumbai region by default; Frankfurt available on Scale plans for EU customers). Stripe (billing). SendGrid (transactional email). Cloudflare (CDN, Turnstile bot protection). GitHub (source code; no customer data). Full list at /security.
6. Your rights (GDPR / CCPA)
You can: export all your data (Account → Export); delete your account + all associated data (Account → Delete); object to specific processing; correct inaccurate data; lodge a complaint with your supervisory authority. Email [email protected] to exercise any of these.
7. Retention
Account data: while you're a customer + 30 days after closure (allows un-do). Marketplace catalog/orders: while you're a customer, then anonymised + retained for aggregate analytics. Server logs: 30 days. Audit log: 90 days, then summarised.
8. Cookies
One first-party session cookie for authentication. One first-party preference cookie for theme (light/dark). No third-party tracking cookies. We don't run a cookie banner because we don't have the cookies that would trigger one.
9. Children
SellersSense is not directed at children under 16 and we don't knowingly collect their data.
10. Changes
We update this policy when we change practice. Material changes get a banner on the dashboard + an email. The "Last updated" date at the top reflects the latest revision.