Privacy Policy

Last updated: August 9, 2026

This Privacy Policy describes how HushNest (“we”, “us”, “our”), as a sole proprietorship in India operating SellerSage (https://sellersage.in), collects, uses, processes, stores, and protects information when you access our website or connect your Amazon account via the Amazon Selling Partner API (SP-API) and Amazon Advertising API.

This policy is designed to comply with:

• The Digital Personal Data Protection Act, 2023 (DPDP Act) (India).
• The Information Technology Act, 2000 & IT Rules (India).
• The Amazon Selling Partner API Data Protection Policy (DPP) and Acceptable Use Policy (AUP Sections 4.4 & 4.5).

Geographic Scope: SellerSage is designed for and marketed to Amazon sellers operating in India. If you are based in the European Economic Area (EEA) or the United Kingdom, please contact our Grievance Officer at privacy@sellersage.in before using the service so we can assess GDPR applicability to your specific circumstances.

1. Categories of Information We Process

A. Account & Registration Data (Provided by You)

• Contact Information: Name, business email address, phone number, business entity name, country of operation.
• Billing Information: Payment and transaction details processed securely via PCI-DSS compliant third-party gateways (Razorpay). We do not store raw credit/debit card credentials.
• Purpose: To create and maintain your SellerSage account, verify your identity, communicate service updates, process subscription payments, and provide customer support.

B. Amazon Marketplace Data (Retrieved via SP-API & Ads API)

Upon authorization via LWA OAuth, SellerSage retrieves store-specific operational data:

• Inventory & Catalog Data: FBA stock levels, SKU identifiers, listing details, ASIN performance, storage fee metrics.
• Financial & Sales Data: Settlement summaries, order totals, net fee breakdowns, profit metrics.
• Advertising Metrics: Campaign performance, keyword impressions, clicks, spend, conversion rates, and ACoS.
• Order Status Data: Order IDs, SKU quantities, fulfillment status, ship-by SLA deadlines.
• Purpose: To provide restock predictions, inventory analytics, advertising campaign insights, pricing recommendations, order management tools, and operational alerts — the core functionality of the SellerSage service.

C. Non-PII Operating Standard

SellerSage is designed to operate primarily on non-Personally Identifiable Information (non-PII). We do not request, process, or store buyer names, street delivery addresses, phone numbers, or recipient tax identifiers for FBA or standard analytics workflows.

• Purpose: To minimize privacy risk by design. Our analytics and recommendation engines operate on operational store metrics without requiring buyer-level personal data.

D. Anonymized Technical Telemetry & App Usage Data

HushNest collects anonymized application telemetry and technical usage metrics (e.g., feature navigation frequency, system error logs, dashboard latency, and API response performance).

• Purpose: Strictly to diagnose technical bugs, optimize server architecture, and improve system performance. This telemetry does not include your Amazon store metrics or any seller-identifying marketplace data.

E. Data Ownership: User Data vs. System Outputs

Users retain all ownership rights to their underlying seller account data. HushNest retains all right, title, and interest (including all intellectual property rights) in and to SellerSage, its software code, restock algorithms, user interface designs, AI prompt workflows, and system outputs.

• Purpose: To clarify the boundary between user-owned marketplace data and HushNest-owned platform intellectual property, consistent with the Terms of Service §4.4.

2. Strict Amazon AUP Compliance Statement (Sections 4.4 & 4.5)

To comply with Amazon’s Acceptable Use Policy, HushNest explicitly enforces the following architectural controls:

2.1. Strict Per-Tenant Data Isolation (AUP Section 4.5): All data retrieved via SP-API is isolated per seller using per-tenant encryption keys managed through our cloud provider’s key management service. We do not aggregate, pool, combine, or cross-reference data from multiple Amazon Selling Partners. Metrics from one seller account are never visible to, benchmarked against, or used to derive commercial intelligence for another seller.

2.2. No Data Resale or External Sharing: We do not sell, rent, license, or distribute SP-API data or advertising insights to third-party ad networks, data brokers, competitors, or other selling partners.

2.3. No Unlawful Scraping or Manipulation (AUP Section 4.4): SellerSage accesses Amazon data solely through official, secure SP-API and Ads API endpoints. We do not engage in web scraping, credential sharing, review manipulation, or artificial sales rank inflation.

3. Data Processing Safeguards & Amazon Security Protocols

3.1. Encryption Standards: All data in transit is encrypted using TLS 1.2 or higher. All stored credentials (including Amazon refresh tokens and API secrets) are encrypted at rest using industry-standard AES-256 encryption with cloud-managed encryption keys.

3.2. 30-Day Automated PII Purging: In the event that transient Order details or temporary buyer-related data enter our system environment, such data is subject to an automated expiration policy in our cloud database. All transient PII is automatically and permanently purged within 30 calendar days of order delivery.

3.3. Third-Party Service Providers: Where required to deliver our core application functionality, data is processed strictly through isolated, enterprise-grade cloud platforms:

• Cloud Infrastructure Provider: Secure infrastructure hosting and database management in audited data centers.
• AI Model Provider: Per-seller, non-PII operational metrics processed strictly for algorithmic insights; data is not retained by the AI model provider for external training.
• Messaging Webhooks: Operational alerts containing non-PII seller metrics transmitted directly to the seller’s verified mobile device via WhatsApp and Telegram.

3.4. Service Improvement Within the Isolated Tenant: SellerSage processes historical store metrics, inventory velocity, and ad performance strictly within the authorizing user’s isolated account environment. This processing is used exclusively to generate, refine, and improve restock calculations, bid recommendations, and account alerts for that specific user. No data is used to train, refine, or improve services for any other seller.

3.5. Data Retention Schedule: SellerSage applies the following retention periods by data category:

Data Category	Retention Period	Rationale
Transient PII	30 days (automated TTL purge per §3.2)	Amazon DPP requirement
Seller Account Data	Duration of active account + 90 days post-cancellation	Allows account reactivation; then securely purged
Anonymized Telemetry	Up to 24 months	Long-term system performance trending (non-PII only)
Billing & Tax Records	7 years from the end of the relevant fiscal year	Indian Income Tax Act, 1961 — statutory requirement

Upon written request to privacy@sellersage.in, we will confirm the deletion of your account data within the applicable retention window. Data subject to statutory retention obligations (e.g., tax records) cannot be deleted before the mandatory retention period expires.

4. Incident Response & 24-Hour Amazon Notification Procedure

HushNest maintains a documented Incident Response Plan. In the event of a confirmed or suspected security breach resulting in unauthorized exposure of Amazon Information or system data:

• We will contain and remediate the vulnerability immediately.
• We will notify Amazon Security (security@amazon.com) within 24 hours of incident detection, detailing the scope, affected records, and containment actions taken.

5. Your Rights Under the DPDP Act, 2023 (India)

As a Data Principal under India’s Digital Personal Data Protection Act, you have the following rights regarding your personal registration data:

• Right to Access: You may request a summary of personal data processed by HushNest.
• Right to Correction & Erasure: You may request the correction of inaccurate personal details or the erasure of your SellerSage account data.
• Right to Withdraw Consent: You can disconnect your Amazon account via Seller Central at any time, which revokes our API access instantly.
• Right to Deletion & System Disconnection: Upon account cancellation, termination, or revocation of LWA OAuth access via Seller Central, HushNest reserves the right to immediately purge all stored API credentials, configuration files, and cached metrics associated with your account. In accordance with Amazon Data Protection Policies, transient data is automatically deleted within 30 days.

6. Consent & Lawful Basis for Processing (DPDP Act §6)

6.1. Consent-Based Processing: HushNest processes your personal data (Account & Registration Data, §1.A) on the basis of your explicit consent, as required under Section 6 of the Digital Personal Data Protection Act, 2023. Consent is obtained at the point of account registration and at the point of Amazon SP-API OAuth authorization.

6.2. Contractual Necessity for Marketplace Data: Processing of Amazon Marketplace Data (§1.B) is necessary for the performance of the service contract — SellerSage cannot provide inventory analytics, restock predictions, or advertising insights without access to your SP-API and Advertising API data.

6.3. Withdrawal of Consent: You may withdraw consent at any time by:

• Disconnecting SellerSage’s API access via your Amazon Seller Central dashboard (“Manage Your Apps”).
• Contacting our Grievance Officer at privacy@sellersage.in to request account deletion.

Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

6.4. Data Fiduciary Designation: Under the DPDP Act, HushNest (Sole Proprietor: Vignesh) is the Data Fiduciary for your personal data. Our cloud infrastructure providers and AI model providers act as Data Processors bound by contractual data processing agreements and this Privacy Policy.

7. Grievance Redressal Officer (DPDP Act & IT Act Notice)

In accordance with the Digital Personal Data Protection Act, 2023, and the Information Technology Act, 2000, the contact details for our Grievance Officer are provided below:

Field	Value
Name / Title	Vignesh (Data Protection & Grievance Officer)
Entity Name	HushNest (Sole Proprietorship)
Operating Location	Tamil Nadu, India
Primary Email	support@sellersage.in / privacy@sellersage.in
Response Timeline	All privacy inquiries and grievances will be acknowledged within 3 business days. A resolution plan will be provided within 30 calendar days.