Privacy Policy
1. Introduction
Sellertrey ("we," "our," or "us") is operated by Triple S & M LLC. This Privacy Policy explains how we collect, use, disclose, and protect information when you use our platform at sellertrey.com and related services (collectively, the "Service").
By using Sellertrey, you agree to the practices described in this policy. If you do not agree, please do not use the Service.
2. Information we collect
Account information: When you register, we collect your name, email address, and password (stored as a bcrypt hash — we never store your plain-text password). For billing purposes, payment details are processed directly by Stripe and are not stored on our servers.
Business information you provide: COGS (cost of goods sold) for your products, supplier names and contacts, product lists, expense receipts uploaded for OCR processing, and other business data you enter into the platform.
Amazon Selling Partner data (via SP-API): When you connect your Amazon seller account, we access data through Amazon's Selling Partner API (SP-API), including:
- Order history and financial settlement reports
- Listing information and inventory levels
- Pricing and buy box data
- Product catalog and fee information
- Solicitations (review request status)
- FBA inbound shipment data
This connection is established with your explicit authorization via Amazon's OAuth 2.0 flow. You can revoke this access at any time from your Sellertrey account settings or from your Amazon Seller Central account.
Usage data: We collect information about how you use the Service, including features accessed, pages visited, API calls made, and timestamps. This helps us improve the platform and diagnose technical issues.
Device and technical data: IP address, browser type, operating system, and similar technical identifiers collected automatically when you use the Service.
3. How we use your information
We use the information we collect to:
- Provide, operate, and improve the Sellertrey platform
- Authenticate your identity and maintain account security
- Analyze Amazon SP-API data on your behalf to generate reports, insights, and recommendations
- Run automated repricing on your listings as configured by you
- Send transactional emails (account verification, billing receipts, weekly briefings you opt into)
- Detect and prevent fraud and unauthorized access
- Comply with legal obligations
We do not sell your personal information or Amazon seller data to third parties.
4. Amazon SP-API data handling
Data accessed via the Amazon Selling Partner API is used exclusively to provide the features of the Sellertrey platform to you, the authorized seller. Specifically:
- Amazon SP-API data is used only to provide features and services within Sellertrey
- SP-API data is never shared with third parties except as required to operate the service (e.g., cloud hosting)
- SP-API data is never used for advertising or sold to data brokers
- Amazon access tokens are stored encrypted (AES-256-GCM) in our database
- You may disconnect your Amazon account at any time, which revokes our access
- Upon account deletion, all associated SP-API data is deleted within 30 days
Our use of Amazon SP-API data complies with the Amazon SP-API Developer Agreement and Amazon's data protection requirements.
5. Data sharing and disclosure
We share information only in the following circumstances:
- Service providers: Third-party vendors that help us operate the Service, including cloud infrastructure (Contabo VPS, PostgreSQL), payment processing (Stripe), email delivery (Resend), and AI inference (Anthropic). These providers are contractually bound to protect your data.
- Legal compliance: When required by law, court order, or government authority.
- Business transfers: In connection with a merger, acquisition, or sale of assets, with appropriate notice to you.
- Your consent: For any other purpose with your explicit consent.
6. Data security
We implement industry-standard security measures to protect your information:
- All data in transit is encrypted using TLS 1.2 or higher
- Passwords are hashed using bcrypt (never stored in plain text)
- Amazon access tokens and other sensitive credentials are encrypted at rest using AES-256-GCM
- Access to production databases is restricted to authorized personnel
- API endpoints are protected with rate limiting and authentication guards
No security system is impenetrable. In the event of a breach that affects your data, we will notify you in accordance with applicable law.
7. Data retention
We retain your account and business data for as long as your account is active or as needed to provide the Service. You may request deletion of your account and associated data by contacting us at privacy@sellertrey.com. Upon deletion, personal data is removed within 30 days, except where retention is required by law (e.g., financial records).
8. Cookies and tracking
Sellertrey uses session cookies and local storage to maintain your authenticated session. We do not use third-party advertising cookies or cross-site tracking technologies. We may use analytics tools in the future; this policy will be updated if so.
9. Your rights
Depending on your location, you may have the following rights regarding your personal data:
- Access: Request a copy of the personal data we hold about you
- Correction: Request correction of inaccurate data
- Deletion: Request deletion of your personal data
- Portability: Request your data in a portable format
- Objection: Object to certain types of processing
To exercise any of these rights, contact us at privacy@sellertrey.com. We will respond within 30 days.
10. Children's privacy
The Service is not directed to individuals under 18 years of age. We do not knowingly collect personal information from minors. If you believe a minor has provided us with personal information, please contact us immediately.
11. Changes to this policy
We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date at the top of this page and notify active users by email. Your continued use of the Service after changes become effective constitutes your acceptance of the updated policy.
12. Contact us
If you have questions or concerns about this Privacy Policy or our data practices, contact us at:
Triple S & M LLC
Email: privacy@sellertrey.com
Website: sellertrey.com