Privacy Policy

For the purposes of applicable data protection law:

• Data Controller (User Accounts): GetSeller Suite Limited is the Data Controller for personal data collected about our registered account users.
• Data Processor (Marketplace Data): For order metadata and buyer messaging information processed through marketplace APIs (Amazon SP-API & eBay REST API), GetSeller Suite Limited acts as a Data Processor on behalf of the registered seller (Data Controller).
• Data Protection Contact: support@getsellersuite.com
• Operating Jurisdiction: England and Wales, United Kingdom.

We collect information to provide, secure, and optimize our feedback automation services:

• Account Registration Data: Name, email address, password hash, and company details provided during sign-up.
• Authentication Credentials & API Tokens: Encrypted OAuth authorization tokens, marketplace seller IDs, and integration access keys required to communicate with Amazon SP-API and eBay API endpoints.
• Marketplace Order & Buyer Metadata: Minimal order metadata (order ID, purchase date, item SKU, shipping status, buyer communication identifiers) fetched via platform APIs necessary to execute compliant feedback automation.
• Billing & Payment Details: Payment processing is handled entirely by our PCI-DSS compliant third-party payment gateways (e.g., Stripe/Paddle). We do not store credit card numbers on our servers.
• Technical Log Data: IP address, browser type, operating system, and system access logs collected for operational monitoring and security audits.

We process personal data under the following lawful bases:

• Performance of a Contract: Processing required to fulfill our obligations under our Terms of Service (e.g., executing automated review requests).
• Legitimate Interests: Processing required for platform security, operational stability, fraud prevention, and customer support.
• Legal & Regulatory Obligations: Compliance with applicable tax, legal, and marketplace developer regulations.

• Strict Purpose Limitation: Buyer information and order metadata fetched via marketplace APIs are used strictly to evaluate request timing rules and dispatch automated post-purchase feedback requests.
• No Sale or Monetization: We never sell, rent, trade, share, or monetize seller or buyer personal information.
• Encryption Standards: All credentials, OAuth tokens, and sensitive data are encrypted using AES-256 at rest and transmitted using TLS 1.2+ encryption in transit.
• Access Control: Access to production infrastructure is restricted to authorized personnel subject to strict confidentiality agreements.

• Account Data: User account information is retained for as long as the account remains active.
• Marketplace PII: Buyer identifiers and order metadata are retained only for the duration required to process feedback requests and enforce rate-limiting rules, after which PII is automatically purged in accordance with Amazon SP-API Data Protection Policies.
• Account Deletion: Users may request full account, data, and token deletion at any time by contacting support@getsellersuite.com. Upon request, all stored credentials, tokens, and account logs are permanently erased within 30 days.

Under UK and EU privacy laws, you possess the following rights regarding your personal data:

• Right of Access: Request copies of your personal data held by us.
• Right to Rectification: Request correction of inaccurate or incomplete information.
• Right to Erasure (‘Right to be Forgotten’): Request erasure of personal data where processing is no longer required.
• Right to Restrict Processing: Request restricted processing under specific circumstances.
• Right to Data Portability: Request transfer of your data to another provider in a structured, machine-readable format.
• Right to Object: Object to processing based on legitimate interests.
• Right to Lodge a Complaint: You have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO) at ico.org.uk or your local EU Data Protection Authority.

If you reside in California or US states with applicable privacy legislation:

• You have the right to know what personal data is collected, used, and disclosed.
• We do not sell or share personal information as defined by California law.
• You may exercise your rights without discrimination by emailing support@getsellersuite.com.

We engage trusted third-party service providers (such as cloud infrastructure hosting, database management, and transaction email dispatches) solely to support platform functionality. All third-party sub-processors are vetted for strict compliance with data protection laws and bound by data processing agreements.

Personal data processed by GetSeller Suite Limited may be stored and transferred across secure servers in the UK, EU, and US. Where cross-border data transfers occur, we implement standard contractual clauses (SCCs) or legal adequacy mechanisms to ensure equivalent data protection.

We may update this Privacy Policy from time to time. Material updates will be published on this page with a revised ‘Last Updated’ date. For questions regarding this policy or data protection inquiries, contact us at: support@getsellersuite.com