1. Operator and scope
Ecom Seller LLC operates ecomseller.co and the EcomSeller application at app.ecomseller.co. This policy covers our website, application, and related support. Amazon SP-API access is pending approval; descriptions of intended API processing are conditional on approval and seller authorization.
2. Information processed
We process account names, business email addresses, authentication identifiers, workspace roles, and support messages. Workspace records can include supplier catalogs, product identifiers, ASINs, purchase costs, fee assumptions, research observations, notes, invoices, and fulfillment records that users provide. Connected-service settings and credentials are stored when an integration is configured. Technical information includes IP addresses, browser information, timestamps, request and error logs, and security events.
The intended SP-API scope covers permitted seller, catalog, pricing, fee, inventory, and performance information needed for the approved features. Our sourcing workflow is not intended to collect Amazon buyers’ shipping or other personally identifiable information. Do not upload buyer information in supplier files or support messages.
3. Sources and purpose
Information comes from users, workspace members, supplier files, configured integrations, and service-operation records. We use it to organize catalogs, calculate profitability, document buying decisions, authenticate users, maintain workspaces, troubleshoot problems, process subscriptions, and respond to support or privacy requests.
Existing application code supports third-party product research, including Keepa, imported research observations, and optional AI matching. These integrations require compliance review and must not be represented as Amazon-approved. Where previously used, associated records and integration settings may remain in a workspace. We do not claim that legacy data has been removed. Direct Amazon data retrieval requires approval and the seller’s authorization.
4. Providers and sharing
Cloudflare infrastructure hosts the application and supports database and uploaded-file storage. Hosting and operational providers process information necessary to serve and maintain the application. Authorized personnel may access workspace information when needed for support, security, or administration.
Where enabled in an existing workspace, third-party research requests may send product identifiers to the selected provider. Optional AI matching code uses OpenRouter to send supplier and product context for model assessment. Those paths require review before use with Amazon Information; we do not assert that there is no third-party processing. Contact us for the providers and processing applicable to your workspace.
When selected and available, Stripe or PayPal processes subscription payments on its hosted pages. EcomSeller uses account, customer, subscription, and payment-status identifiers to manage billing; it does not receive full card numbers or security codes. Billing does not require Amazon buyer records.
We do not sell personal information or Amazon Information. Amazon Information may be disclosed only as necessary for permitted activities for the authorizing seller, or as legally required. It must not be shared with other sellers or affiliated businesses for their own sourcing or marketing. Service providers receiving Amazon Information must be assessed for the required security protections.
5. Storage and protection
The application uses HTTPS, authenticated access, role-based permissions, and encryption routines for stored integration credentials. Data is processed in hosted databases and file storage. Access should be limited to the people and services needed for the selected workflow. This policy is not a certification that every Amazon security requirement has been independently verified. No online service can guarantee absolute security.
6. Retention and deletion
Information should be retained only as long as necessary for its authorized purpose or a specific legal obligation. Amazon Information is subject to Amazon’s deletion requirements, including deletion within 30 days after revocation, termination, loss of authorization, or an Amazon deletion notice, with only applicable legal exceptions. Deletion must cover stored credentials, related live records, and applicable backup handling. See our deletion instructions for requests and scope.
7. Your choices
Contact support@ecomseller.co to request access, correction, export, or deletion, or to ask about processing applicable to your workspace. We verify the requester’s authority before disclosing or deleting records. You may revoke Amazon authorization in Seller Central if a connection has been established. Revocation is a deletion trigger under the applicable Amazon policy; a separate email is not a condition for that obligation.
8. Updates and contact
We publish changes to this policy with the revised date above. Privacy, processing, and data-rights questions may be directed to Ecom Seller LLC at support@ecomseller.co.