Privacy Policy

This policy explains what Sellerio keeps when you use sellerio.in — your Sellerio account, the free label crop tools, your plan, your wallet and your support tickets — how it is used and protected, and the rights you have over it. We do not sell your data to anyone, and we do not use it to train any third-party or general-purpose AI model.

Looking for the Chrome extensions? The Sellerio Seller Toolkit, Autofill and Insights browser extensions are covered by their own, more detailed document: the Sellerio Chrome Extensions Privacy Policy. It lists exactly what each extension collects, what never leaves your computer, and why every permission is requested.

The Sellerio web app at mysellerio.com, for sellers who use or have used it, is covered under its own heading below.

What sellerio.in keeps

Each of these is described in more detail under Data retention & deletion below. We do not sell data to data brokers or share it with anyone for their own purposes.

The free label crop tools

The free label crop tools on sellerio.in read and crop your label files entirely inside your browser. The files never leave your device: there is nothing to upload, and Sellerio's servers never see them. Each crop sends us the marketplace and how many labels the file held, never the file, an order or a SKU: under your account when you are signed in, and without a name when you are not. If you sign in on a crop page, it uses the label settings saved on your account, the same ones the Seller Toolkit uses, and saves the ones you change there. The pages count visits like the rest of sellerio.in, as described under Cookies on this website.

Security

• All traffic between your browser and sellerio.in, and between the Seller Toolkit and our servers, is encrypted in transit (TLS 1.2+).
• Passwords for Sellerio logins are hashed (never stored in plaintext) and are never visible to our own team.
• Card and UPI details are handled by our payment processor and are never stored by Sellerio.
• Our database runs on a private, access-controlled network that is not bound to any public network interface — it cannot be reached directly from the internet, and is not indexed or exposed by any public-facing page.
• Files you attach to a support ticket are never kept in a publicly browsable directory: they open only through a link given to you and our support team.
• Staff accounts with production access are individually logged and access is reviewed periodically; terminated staff have access revoked within 24 hours.

Data retention & deletion

• Your sellerio.in account keeps a record of when you accepted the Terms & Conditions and this Privacy Policy, and which version you accepted. It also keeps the IP address you signed up from and the one you last signed in from. These are kept for as long as the account exists. If you add a separate WhatsApp number, it is kept with the account too, with when you verified it: WhatsApp messages from the Seller Toolkit go to it instead of your mobile number, until you remove it. To give each seller one free trial of the Seller Toolkit and one Free plan allowance of labels a day, an account’s email address, mobile number, name, these IP addresses and, if you add billing details, its GSTIN and business address are compared with other accounts, and a later account of a seller who already has one gets no free trial of its own: it shares the seller's one trial, which ends on the same day on all of the seller's accounts. Accounts that belong to one seller share one Free plan allowance, and a mobile number can be verified on one account at a time. If you say an account is a separate account for another business, we keep that with the account and the day you said it; it has no free trial of its own. The same comparison gives each seller one welcome gift of free WhatsApp notifications for the Seller Toolkit, once an account’s mobile number is verified and only if its wallet has never had any; a seller who already had the gift gets none.
• For the Seller Toolkit, the billing details you give for your GST invoice (the name on the invoice, your address, state and PIN code, and your GSTIN if you have one) are kept with your account to issue a tax invoice for each payment, email it to you and send it on WhatsApp to your verified mobile number, or to your WhatsApp number if you added one, through our messaging provider. Each invoice keeps a copy of the details it was issued with, under the same tax-law retention. If you give a GSTIN, it is checked against the GST register by a GST verification service, which is sent the GSTIN alone; the registered names, status and address it answers are kept with your billing details and shown back to you, so the name on your invoice is the one your GSTIN is registered to.
• If you answer the Sellerio Toolkit feedback form at sellerio.in/feedback, we keep your answers and when you sent them: with your account when you opened the form from the Toolkit or are signed in on sellerio.in, and otherwise without a name, with an email address or mobile number only if you type one and ask us to contact you. They are kept to decide what to fix and build next, and you can ask us to delete them like any other data (see Your rights below). When you answer from your account, we also keep a record of the days added to your plan for answering, so they are given once.
• Files you attach to a support ticket on sellerio.in, such as a photo of a label or a screenshot, are kept with that ticket for as long as the ticket is kept. Only you and our support team are given a link to them, each link works for one day, and they are used only to answer that ticket.
• If you buy WhatsApp notifications for the Seller Toolkit from the wallet on sellerio.in or with a plan at its checkout, an add-on separate from every plan, or get them as a welcome gift or with your plan, we keep how many you have left, what you paid for them, and a record of each change: each top-up, with the payment's reference and how many notifications it bought (a pack bought with a plan names the plan's payment), each notification used, with the message it was for (such as a run report) and the marketplace, with the day and time, the welcome gift, the gift with your plan, and any change our support team makes by hand, with the reason you are shown. The record is kept for as long as the account exists, and payments stay under the same tax-law retention as invoices. The notifications are used only for WhatsApp messages: never for anything else, including any of your subscriptions, and they are not refunded in any case. If you ask us, we can instead turn the notifications left into days of a paid Toolkit plan at no extra charge, worked out pro rata at that plan’s monthly price from what you paid for them, and take them out of your wallet.
• When you ask us to close your account, its data is deleted within 90 days of your request, except where we're required to retain billing/invoice records for tax or accounting law (typically 7–8 years under Indian tax law, limited to invoice and payment records only).
• Backups that include deleted data are purged on our standard backup rotation, typically within 30 days of the live deletion.

Your rights over your data

As the account holder, you can exercise the following at any time by emailing contact@sellerio.in:

• Access — request a copy of the data Sellerio holds for your account.
• Correction — most of your details, such as your profile, your billing details and your SKU tables, can be edited in your account or in the Seller Toolkit; anything that can't, we'll correct on request.
• Deletion — request deletion of your account's data, subject to the billing-record exception under Data retention above.
• Portability — request a copy of your account's data in a common, machine-readable format; your SKU tables can also be exported from the Seller Toolkit at any time.
• Objection — object to a specific use of your data; we'll respond with either a change or an explanation of why it's required to operate the service.

We aim to acknowledge any of the above within 3 business days and resolve within 15 days, consistent with the timelines in India's IT Rules, 2021.

Cookies on this website

sellerio.in uses three kinds of cookies and browser storage:

• Necessary — they keep you signed in to your account and remember your choices on this site, such as the theme and your cookie choice. They are always on.
• Analytics — Google Analytics counts which pages of sellerio.in are opened, so we can see what is used and improve it. It keeps two of Google's own cookies on sellerio.in (_ga and _ga_0LXS5950WD) to tell one visit from the next. Google receives the page's address and title, the page you came from, your browser and type of device, and an approximate area that Google works out from your connection. A page whose address can carry something private sends its path alone: in your account each section is counted as its own page, by its name, and the sign-in, sign-up, support and What's New pages send only their own path (What's New also the Toolkit version it is about). Google never receives your name, email address, mobile number, GSTIN, your marketplace accounts, your orders or anything you type. A link that carries something private, such as your WhatsApp share message or a file on a support ticket, opens through sellerio.in/go, which Google Analytics does not see. On those pages Google's advertising features are turned off. The feedback form does not load Google Analytics. sellerio.in also keeps its own count of visits, on Sellerio's own server, beside Google Analytics: for each page opened, its path (never the rest of its address), the site you came from (its name only, such as google.com) and any campaign tags in the link, your browser, system and type of device, an approximate city worked out from your connection, and how many seconds the page was on screen. Two random values kept in your browser's storage (sio_visit_v1 and sio_vid_v1) tell one visit and one browser from the next, and are never linked to your account. Your IP address is not kept, and these counts are deleted after 14 months.
• Advertising — the free label crop pages and the blog show ads served by Google AdSense; no other page of sellerio.in does (the home page loads Google's ad code for Google's site check, with every ad request paused, so it shows none), and an account on any plan but Free sees none. Google and its partners use cookies to show ads based on your earlier visits to sellerio.in and other websites, and Google's advertising cookies let it and its partners show you ads based on those visits. Google receives what any page with an ad sends it, such as your connection's address, your browser and the page the ad is on; it never receives your label files, which are cropped inside your browser, nor your name, email address, mobile number, GSTIN or orders. You can turn off personalised ads in Google's Ads Settings, and turn off other companies' use of cookies for personalised ads at aboutads.info. With Analytics off under Cookie settings, no ads load on sellerio.in in that browser.

A banner on the home page and in your account asks you to accept these cookies, and keeps showing until you do; once you accept, it does not show again in that browser unless you change your choice or clear the site's data. Analytics is on until you turn it off. You can change your choice at any time under Cookie settings, at the foot of the home page and at the bottom of your account's menu: with Analytics off, Google Analytics and our own count are switched off on every page of sellerio.in in that browser, and their cookies and stored values are removed. Your choice is kept in your browser only. Turning Analytics off also stops the ads described above from loading on the crop pages and the blog.

Videos and posts from YouTube and Instagram. The home page shows videos from our YouTube channel, and can show posts from our Instagram account. Nothing is loaded from YouTube or Instagram until you press play on a video, or Show on the Instagram posts: until then, the pictures on the videos come through Sellerio's own server. Pressing play loads that video in YouTube's privacy-enhanced player (youtube-nocookie.com), and pressing Show loads the posts from Instagram. From then on, YouTube or Instagram receives what any embedded video or post receives, such as your connection's address, your browser and the page it is on, and may set its own cookies under its own privacy policy. Sellerio does not tell them who you are.

Third parties & subprocessors

Your data is not sold, rented, or shared with any third party for their own purposes. Sellerio uses the following subprocessors to operate the service:

Our messaging provider (for WhatsApp messages and verification codes), our email provider and a GST verification service also receive what each needs to do its part, as described above. Which of them received your data is told to you on request.

We review subprocessors periodically and will update this table if that list changes materially.

Where data is hosted

Sellerio's application and database run on Hostinger's Cloud Startup plan. The database is not bound to any public network interface — it is reachable only from the application itself, not directly from the internet. If you need details on the specific data center region for your own compliance or vendor-risk review, contact contact@sellerio.in and we'll confirm current hosting location in writing.

Children's privacy

Sellerio is a business tool for registered sellers and is not directed at, or knowingly used to collect data from, anyone under 18. If we become aware that a minor has provided us data in violation of this policy, we'll delete it.

Security incident notification

If a security incident affects your data, we will notify you without undue delay, and in any case within the timelines required by applicable law. The notification will describe what happened, what data was involved, and what we're doing about it.

Grievance officer

Changes to this policy

If this policy changes in a way that affects how your data is handled, the "Last updated" date above will be revised and account holders will be notified by email at least 7 days before a material change takes effect.

The Sellerio web app (mysellerio.com)

This section applies to the Sellerio web app at mysellerio.com, for sellers who use or have used it. It is unchanged, and it applies to the data the web app holds for you for as long as we hold it.

This policy explains what data Sellerio accesses through the Amazon Selling Partner API (SP-API), the Amazon Advertising API, and connected Flipkart/Meesho sources; how that data is used, protected, and retained; and the rights you have over it. Sellerio is a multi-tenant software platform — each customer connects their own accounts into their own isolated organization workspace. We do not use any customer's seller data for any purpose beyond that customer's own business operations, and one organization's data is never visible to another.

What data the web app accesses

Sellerio does not request access to Amazon buyer personal information beyond what's required to fulfill and report on orders (e.g. shipping status, city/state for logistics), and does not use SP-API or Advertising API data for advertising, marketing, or any purpose outside the account holder's own operations. We do not sell data to data brokers, and we do not use your seller data to train any third-party or general-purpose AI model.

What happens when you connect your Amazon account

The moment you authorize Sellerio, here's exactly what happens — so there's no black box between clicking "Connect" and your dashboard filling in:

1. You're redirected to Amazon. Sellerio sends you to Amazon's own Login with Amazon (LWA) consent screen. You log in with your Seller Central credentials directly on Amazon's site — Sellerio never sees your Amazon password.
2. You approve a defined scope. Amazon shows you exactly what Sellerio is requesting access to (orders, catalog, advertising, etc.) before you approve.
3. Amazon returns a refresh token. This token, not your password, is what lets Sellerio call the SP-API and Advertising API on your behalf going forward. It's encrypted immediately using your organization's own key — see Encryption & security below.
4. Initial sync begins. Sellerio pulls recent order history, active listings, and (if authorized) advertising campaigns to populate your dashboard. This typically completes within minutes for a standard-size catalog.
5. Ongoing sync runs on a schedule. After the initial sync, orders and ads data refresh automatically (see the sync cadence shown in your dashboard) — you don't need to manually re-import anything.
6. You stay in control. At any point after connecting, you can disconnect from within Sellerio or directly from Amazon's own app management screens — see Revoking access below.

Organization isolation

• Every connected account, credential, order, listing, and report is scoped to the organization workspace that connected it. There is no view, report, or admin screen in Sellerio that spans across organizations.
• Every database query is scoped by organization at the application layer, so one customer's data can never be returned in another customer's session, even by mistake.
• Within an organization, the account holder controls which of their own team members can see which connected brand — team access does not cross organization boundaries.

Encryption & security — even we can't read your tokens

Sellerio uses client-side, per-organization encryption for sensitive account data — SP-API and Advertising API refresh tokens, and other credential material. Each organization's encryption key is derived from that organization's own credentials at the point of use and is never stored in plaintext on our servers.

• Refresh tokens and API credentials are encrypted before they touch our database, using keys tied to your organization — not a single master key shared across all customers.
• Sellerio staff, including administrators with full platform access, cannot decrypt or read raw stored credentials or export them in usable form. Support access to a workspace is limited to what the interface itself shows, with your explicit permission.
• Refresh tokens and API credentials are never exposed to the browser or included in any client-side response — only masked placeholders are ever returned to the interface once a credential is saved. These credentials are configured via environment variables on our servers and are never hardcoded or committed to source control.
• Our database runs on a private, access-controlled network that is not bound to any public network interface — it cannot be reached directly from the internet, and is not indexed or exposed by any public-facing page.
• Uploaded files that contain account data (for example, an imported bank statement) are served through an authenticated route that requires a valid session — never from a publicly browsable directory.
• All traffic between Sellerio and Amazon's APIs, and between a user's browser and Sellerio, is encrypted in transit (TLS 1.2+).
• Passwords for Sellerio logins are hashed (never stored in plaintext) and are never visible to our own team.
• Staff accounts with production access are individually logged and access is reviewed periodically; terminated staff have access revoked within 24 hours.
• This protects against both external breaches and internal misuse — a compromised database or a rogue insider cannot recover a working Amazon credential without the organization's own key material.

Operational data you actively use in dashboards — order counts, revenue, ad spend — is stored so the product can display and chart it for you. What's protected under zero-knowledge encryption specifically is the credential layer: the tokens that grant access to your Amazon accounts.

Retention in the web app

• Order, inventory, and advertising data is retained for as long as the account remains active, to support historical reporting (e.g. year-over-year comparisons).
• If a subscription lapses due to non-payment, your data is retained in a read-only state for 30 days to give you a chance to resolve billing before anything is removed — see the Terms & Conditions for the full suspension timeline.
• Data for a disconnected brand, or a closed organization, is deleted within 90 days of your request, except where we're required to retain billing/invoice records for tax or accounting law (typically 7–8 years under Indian tax law, limited to invoice and payment records only).

Revoking access

An account holder can revoke Sellerio's access to their Amazon account at any time, either from within Sellerio (Remove/Disconnect on the relevant connection) or directly through Amazon — via Seller Central's Manage Apps & Services page, or the Solution Provider Portal's Manage Authorizations page. Revoking access stops all further API calls immediately; previously synced data already stored in Sellerio is not automatically deleted and can be removed on request per the retention terms above.

Security incidents

For the web app, notifying a security incident also follows Amazon's Data Protection Policy, which requires solution providers to notify Amazon within 24 hours of a confirmed incident.

Contact