SellerbridgeSB-01 / NIGHT SHIFT
Decision Audit
Sellerbridge · legal

Privacy Policy

How Sellerbridge collects, uses and protects your data, including the Amazon Selling Partner and Advertising API data we read on your behalf.

This policy describes how the Sellerbridge service handles data. It does not yet identify the operating company or carry an effective date, and until it does it is published for information only.

This policy explains what data Sellerbridge collects, why we collect it, how long we keep it and what rights you have over it. It covers both our website and the Sellerbridge application, including the Amazon account data we read on your behalf.

Who we are

Sellerbridge is not affiliated with, endorsed by or sponsored by Amazon.com, Inc. or any of its subsidiaries. For any question about this policy or about your data, write to hello@sellerbridge.ai.

Data we collect

Account and contact data. Your name, work email address, company name, role and billing details when you create an account or contact us. We use this to provide the service, invoice you and reply to you.

Amazon account data. When you connect a selling account, we read data from Amazon's Selling Partner API and Advertising API under the authorisation you grant. This includes orders, settlements, fees, inventory, listings, advertising campaigns and performance metrics, account health metrics, and — where a report includes it — buyer information such as shipping addresses and order-level identifiers. We read this data to produce the decisions, reports and recommendations that are the service.

Access is read-only unless you explicitly grant write permissions. Where you grant them, we record every action we take on your account in an audit log available to you.

Usage and technical data. IP address, browser and device type, pages viewed, timestamps, and errors. We use this to keep the service secure, diagnose faults and understand which features are used.

Cookies and analytics. Our website uses Google Analytics 4 to measure traffic. It sets cookies that record a pseudonymised identifier, the pages you visit and approximate location derived from IP address. The application itself uses only the cookies and local storage needed to keep you signed in and remember interface preferences such as your light or dark theme choice.

Why we are allowed to use it

Where UK or EU data protection law applies, we rely on: performance of our contract with you, for everything needed to deliver the service you have signed up for; legitimate interests, for security, fraud prevention, service improvement and business analytics, balanced against your rights; consent, for optional analytics and marketing cookies, which you can withdraw at any time; and legal obligation, for tax, accounting and lawful requests from authorities.

Where your Amazon account data includes personal data about your own customers, you are the controller of that data and we act as your processor. Our data processing terms form part of the agreement between us.

What we never do

We do not use your account data to train machine learning models. We do not pool your data with other sellers' data. We do not share it with other tenants of the platform. We do not sell it, and we do not share it with advertisers or data brokers.

Who we share it with

We share data only with service providers who process it on our instructions under contract: cloud hosting and database providers, error monitoring, email delivery, payment processing and analytics. Each is bound to confidentiality and to use the data only to provide their service to us. We also disclose data where we are legally required to, and to a buyer or successor in the event of a merger or acquisition — in which case we will tell you before your data becomes subject to a different policy.

Large language model providers are used to generate parts of the written analysis in the product. Where a request includes your account data, it is sent under terms that prohibit the provider from retaining it or using it for model training.

International transfers

Some of our infrastructure and some of our service providers are located outside the country you are based in, so your data may be transferred across borders. Where it is, we rely on adequacy decisions where they exist, and otherwise on the UK International Data Transfer Agreement or the EU Standard Contractual Clauses, together with additional technical measures such as encryption in transit and at rest.

How long we keep it

Account and contact data is kept for as long as your account is active and for six years afterwards, to meet accounting and limitation-period requirements. Amazon account data is kept for the rolling period needed to produce trend analysis — ordinarily 24 months — and is deleted within 30 days of you disconnecting the account or closing your subscription, except where we are required to retain it. Audit logs of actions taken on your account are kept for 24 months. Analytics data is retained for 14 months.

Security

Data is encrypted in transit with TLS and at rest. Access by our staff is role-based, logged and limited to the people who need it to operate or support the service. Amazon API credentials are held in a managed secrets store, never in application code or logs. We test our systems regularly and maintain a documented incident response process. If a breach affects your data and is likely to cause you risk, we will notify you and the relevant supervisory authority without undue delay.

Your rights

Subject to the conditions in applicable law, you can ask us to: give you a copy of the personal data we hold about you; correct data that is wrong or incomplete; delete your data; restrict or object to our processing of it; transfer it to another provider in a machine-readable format; and withdraw consent where we relied on it. You can also object to automated decision-making that has a legal or similarly significant effect on you.

Write to hello@sellerbridge.ai and we will respond within one month. If you are not satisfied with our response, you can complain to your data protection supervisory authority — in the United Kingdom, the Information Commissioner's Office at ico.org.uk.

Managing cookies

You can block or delete cookies in your browser settings. Blocking analytics cookies does not affect the application; blocking the cookies used for authentication will prevent you from signing in. You can opt out of Google Analytics across all sites using Google's browser add-on.

Children

Sellerbridge is a business tool and is not directed at children. We do not knowingly collect personal data from anyone under 16. If you believe a child has given us data, write to us and we will delete it.

Changes to this policy

We may update this policy as the service changes. When a change is material we will email account holders and update the effective date above. The version published on this page is always the one in force.

Questions about this policy: hello@sellerbridge.ai.