Privacy Policy — Sellmate

Last updated: January 2025

1. Introduction

Welcome to Sellmate ("we", "us", "our"). Sellmate is an AI-powered Amazon seller analytics tool operated at sellmate.in. We are dedicated to helping Indian Amazon sellers understand their business through data.

This Privacy Policy explains what information we collect, how we use it, with whom we share it, and your rights regarding that information. By creating an account or using our service, you agree to the terms of this Privacy Policy.

If you have questions, contact us at: hello@sellmate.in.

2. Information We Collect

2.1 Account Information

When you register for Sellmate, we collect:

Your full name
Email address
Password (stored as a salted hash — we never store your password in plain text)
Phone number (optional, required if you enable WhatsApp alerts)
Business name and GSTIN (optional, used for GST reconciliation features)

2.2 Amazon Seller Central Data (via SP-API)

When you connect your Amazon Seller Central account to Sellmate, we access the following data via the Amazon Selling Partner API (SP-API) on your behalf:

Order data: Order IDs, order dates, item quantities, item prices, shipping fees, and order statuses for orders on amazon.in
Financial and settlement data: Amazon settlement reports, referral fees, FBA fulfilment fees, and payment disbursement records
Inventory data: SKU-level inventory quantities at Amazon fulfilment centres (FBA inventory) and merchant-fulfilled inventory
Listing data: ASIN details, product titles, bullet points, and listing status for the purpose of displaying and improving your listings
Catalogue data: Category, brand, and product classification data from the Amazon catalogue relevant to your listed products

We access only the SP-API data scopes that are strictly necessary to provide you with the features you have enabled. You will be shown and asked to approve the specific permissions during the Amazon OAuth authorization flow.

2.3 Usage Data

We automatically collect certain technical data when you use Sellmate, including:

Pages visited and features used within the dashboard
Browser type, operating system, and device type
IP address and approximate geographic location (country/city level)
Time and duration of sessions

This data is used solely for improving the product and diagnosing technical issues.

3. How We Use Amazon SP-API Data

Our use of Amazon SP-API data is strictly limited to providing the Sellmate dashboard features to the seller who authorized the connection. Specifically:

We do NOT sell, share, rent, or transfer your SP-API data to any third party for any purpose whatsoever, including for resale, analytics aggregation, or any commercial purpose beyond providing your own dashboard.
We do NOT use SP-API data for advertising or marketing purposes — neither to show you ads, nor to build advertising profiles, nor to share with ad networks.
We do NOT use SP-API data to train AI or machine learning models of any kind, including large language models, recommendation systems, or predictive models that would benefit parties other than you.
We do NOT aggregate or combine your SP-API data with data from other sellers to create benchmark products, industry reports, or any other derived data products.
SP-API data is accessed only with your explicit authorization via the Amazon OAuth 2.0 flow. We only maintain active access while you hold an active Sellmate account and have not revoked access.
SP-API data is used only to display your own business metrics back to you: profit calculations, GST reports, inventory dashboards, AI briefings, and other features you have enabled in your account.

These restrictions apply to all Sellmate employees, contractors, and any subprocessors we use to operate the service.

4. Data Storage and Security

4.1 Encryption

All SP-API OAuth access tokens and refresh tokens are encrypted at rest using AES-256 encryption.
All data transmitted between your browser and Sellmate is encrypted in transit using TLS 1.2 or higher (HTTPS).
All data transmitted between Sellmate's servers and the Amazon SP-API is encrypted in transit using TLS.
Access tokens are never written to application logs or exposed in any log aggregation system.

4.2 Access Controls

Access to your seller data within Sellmate's infrastructure is restricted to systems that require it to deliver the service.
Human access to production data is restricted by role-based access controls and requires multi-factor authentication.
We conduct internal audits of data access periodically.

4.3 Infrastructure

Your data is stored on secure cloud infrastructure with physical and logical access controls.
We use industry-standard practices for database backups, which are also encrypted.

5. Data Retention

While your account is active: We retain SP-API data needed to operate your dashboard. Historical order and financial data is retained for up to 24 months to support trend analysis.
Upon account deletion: All your personal data and SP-API data is permanently and irreversibly deleted from our systems within 30 days of account deletion.
Revoking SP-API access: You can revoke Sellmate's SP-API access at any time from your Amazon Seller Central account under Apps & Services > Manage Your Apps. Upon revocation, we will stop accessing your Amazon data immediately. We will delete the associated SP-API tokens within 72 hours of learning of the revocation.
Legal retention: We may retain certain account records (billing history, correspondence) for longer periods if required by applicable Indian law, including the Information Technology Act, 2000 and its rules.

6. Third-Party Services We Use

We use a limited number of third-party services to operate Sellmate. These are:

6.1 Amazon Selling Partner API

Provided by Amazon.com, Inc. We access this API to retrieve your seller data on your behalf. Your use of Sellmate is also subject to Amazon's Selling Partner API Terms of Service and Amazon's Privacy Notice. Sellmate's use of Amazon SP-API data is governed by and compliant with those terms.

6.2 Anthropic Claude API

We use the Anthropic Claude API to power AI features including the AI Daily Briefing and the AI Listing Rewriter. When we call this API, we send only the minimum data necessary for the specific AI task — such as aggregated performance metrics (e.g., "total sales yesterday: ₹45,200, top SKU: ASIN XYZ") or listing text you have asked us to rewrite.

We do not send to Anthropic: personally identifiable information (PII) such as customer names or addresses, individual order-level data, or your financial account details. Data sent to Anthropic is subject to Anthropic's Privacy Policy and is not used by Anthropic to train their models under their standard commercial API terms.

6.3 Payment Processor

Subscription payments are processed by a PCI-DSS compliant payment gateway. We do not store your full credit card or bank account details on our servers.

6.4 Transactional Email and WhatsApp

We use third-party services to deliver email notifications and WhatsApp alerts. Your email address and phone number are shared with these providers solely for the purpose of delivering messages you have opted into.

7. Cookies and Tracking

We use cookies to maintain your login session and remember your dashboard preferences. We do not use third-party advertising cookies or tracking pixels. You can disable cookies in your browser settings, but this will prevent you from remaining logged in.

8. Your Rights

As a user of Sellmate, you have the following rights regarding your personal data:

8.1 Right to Access

You may request a copy of all personal data we hold about you. Email your request to hello@sellmate.in. We will respond within 30 days.

8.2 Right to Correction

You may update your account information at any time from your dashboard settings. If you need help correcting data, contact us.

8.3 Right to Deletion

You may delete your Sellmate account at any time from your dashboard. Upon deletion, all your data will be permanently erased within 30 days as described in Section 5.

8.4 Right to Revoke Amazon SP-API Access

You may revoke Sellmate's access to your Amazon Seller Central account at any time. Go to your Amazon Seller Central account → Apps & Services → Manage Your Apps → find Sellmate → Delete authorization. This stops all data access immediately.

8.5 Right to Data Portability

You may request an export of your Sellmate data (profit reports, GST reports, custom COGS entries) in CSV format. Contact us at hello@sellmate.in.

9. Children's Privacy

Sellmate is not directed to individuals under the age of 18. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a minor, please contact us and we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email (at the address associated with your account) and by posting a notice on our website at least 14 days before the changes take effect. Your continued use of Sellmate after the effective date constitutes your acceptance of the updated policy.

11. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:

Email: hello@sellmate.in
Website: sellmate.in

We will respond to all privacy inquiries within 5 business days.