Privacy Policy

Who we are

SellZyme, Inc. (“SellZyme”, “we”, “us”) is a corporation incorporated in Delaware, United States, with its registered office at 131 Continental Drive, Suite 305, Newark, New Castle County, Delaware 19713, United States. We are the controller of the personal data described in this policy.

For anything in this policy, contact privacy@sellzyme.com.

What we collect

We collect three kinds of information, and it is worth separating them because they are used very differently.

• Account and contact data you give us — name, work email, company, and what you tell us about your business. Used to talk to you and to run your account.
• Amazon advertising and selling data — campaign structure, targeting, bids, budgets, placements, search-term performance, and product, fee, and order context. This is retrieved through Amazon's official Advertising API and Selling Partner API, only after you authorise it, and only within the scopes required for the features you have enabled. It is business data rather than personal data in most cases, but it is the data the product runs on, so we describe it here explicitly.
• Product economics you provide — cost of goods and margin. Used to evaluate advertising against contribution profit rather than ad metrics alone.
• Technical and usage data — how the product and this website are used, for reliability, security, and improving the software.

What we do not collect

• We never ask for, receive, or store your Amazon Seller Central password. Access is via Amazon's OAuth authorisation only.
• We do not intentionally collect special category data (health, biometrics, and similar), and the product has no use for it.
• We do not knowingly collect data from anyone under 18. SellZyme is a business tool.

Why we process it, and on what basis

• To provide the product — predicting outcomes, making recommendations, and executing actions you have authorised. Basis: performance of our contract with you.
• To keep it safe and working — security, abuse prevention, debugging, and reliability. Basis: our legitimate interests in operating a secure service.
• To improve the product — understanding which decisions work. Basis: our legitimate interests, balanced against your expectations.
• To communicate with you — service messages, and marketing only where you have opted in or where permitted by law. You can opt out of marketing at any time.
• To meet legal obligations — tax, accounting, and lawful requests. Basis: legal obligation.

Automated decision-making

This deserves its own section, because it is what the product does. SellZyme makes automated decisions about advertising actions — bids, budgets, keywords, placements — and, at the autonomy levels you choose, executes them.

Those decisions are bounded by the guardrails you set, logged with the prediction that justified them, and reversible. You can run SellZyme in recommendation-only mode, where nothing changes without your approval, and you can change the autonomy level at any time. These are decisions about advertising, not about people: they produce no legal or similarly significant effect on any individual.

Who we share it with

We do not sell personal data, and we do not share it for cross-context behavioural advertising.

• Amazon — because the product acts on your Amazon account through their APIs. Their handling of that data is governed by your relationship with Amazon.
• Service providers who help us run the business — hosting, infrastructure, analytics, communications — under contract, and only for the purposes we specify. Our current list of sub-processors is being formalised and will be published here.
• Professional advisers, or authorities where we are legally required, or to establish or defend legal claims.
• A successor if the business is acquired or merged, subject to this policy continuing to apply.

How long we keep it

Account and contact data: for as long as you have an account, and afterwards only as long as needed for legal, tax, or dispute purposes.

Amazon advertising data: for as long as needed to make predictions and to score those predictions against outcomes — that history is what makes the product work. When you disconnect an account, we stop retrieving new data; the specific deletion windows are being finalised alongside our compliance programme and will be stated here rather than described vaguely.

Where it goes

We are based in the United States and our infrastructure is operated there. If you are in the EEA or UK, that means your data is transferred internationally, and we rely on appropriate safeguards for those transfers. The specific mechanisms and our data processing terms are part of the compliance work in progress.

Security

We use least-privilege access to Amazon's APIs, request only the scopes needed for the features you enable, and log every automated action with its reasoning. You can revoke our access at any time, from Amazon's authorisation controls or from within SellZyme, and revoking it stops all automation immediately.

No system is perfectly secure, and we will not claim otherwise. If you find a vulnerability, please tell us at security@sellzyme.com.

Your rights

Depending on where you live, you may have the right to access your personal data, correct it, delete it, restrict or object to processing, receive a portable copy, and withdraw consent where we rely on it. If you are a California resident, you have rights to know, delete, correct, and to opt out of sale or sharing — and as stated above, we do not sell or share personal data in that sense.

To exercise any of these, write to privacy@sellzyme.com. We will not discriminate against you for doing so. If you are unhappy with our response, you may complain to your local data protection authority.

Changes

If we change this policy materially, we will say so here and, where the change affects you meaningfully, tell you directly rather than relying on you to notice.