Client Login
shape
shape

Privacy Policy

Home / Privacy Policy

Sellocloud Logistics we provides ERP integration and order management services, including integrations with the Amazon Selling Partner API (SP-API) on behalf of our clients. This Privacy Policy explains what personal data we collect, why we collect it, how we protect it, how long we keep it, and the rights available to you.

This policy applies to visitors to our website, our clients and their authorized users, and the individuals whose personal data we process while providing our services (for example, buyers whose order information is made available to us through Amazon’s Selling Partner API).

1. Who we are

Sellocloud Logistics is a private limited company registered in India, with its registered office at SelloCloud Technology Pvt Ltd, Orchid Business Park 1st Floor, Subhash Chowk, Sector 48, Gurugram, Haryana 122004. For the purposes of applicable data protection law, we act as a data processor / service provider when handling order and customer data on behalf of our clients, and as a data controller / data fiduciary for our own website and business contact data.

2. Information we collect
a. Information provided by our clients

Business contact details of client personnel: name, work email address, phone number, job title, and company information.
Account and billing information necessary to provide and invoice our services.


b. Information processed through the Amazon Selling Partner API

When a client authorizes our application to access their Amazon Seller Central account, we receive order management data through Amazon’s Selling Partner API. Depending on the services the client has engaged us for, this may include:

  • Order information: order IDs, order status, items, quantities, prices, and fulfillment details.
  • Personally identifiable information (PII) of buyers, only where operationally required for order fulfillment: buyer name, shipping address, phone number, and email alias.
  • Listing, inventory, and catalog data associated with the client’s selling account.

We access buyer PII only when necessary to perform order fulfillment functions such as generating shipping labels and invoices, using Amazon’s restricted data workflows. We never use this data for marketing, advertising, profiling, or any purpose other than delivering the service our client has authorized.


c. Information collected on our website

Information you submit through contact or enquiry forms: name, email address, phone number, company, and message contents.
Technical data collected automatically: IP address, browser type, device information, pages visited, and referring URLs, collected through cookies and similar technologies (see Section 9).

3. How we use information
  • To provide, operate, maintain, and support our ERP–Amazon integration and order management services.
  • To synchronize, process, and fulfill orders on behalf of our clients as they have instructed.
  • To communicate with clients about their accounts, service updates, and support requests.
  • To secure our systems, detect and prevent fraud or misuse, and investigate security incidents.
  • To comply with legal, tax, accounting, and regulatory obligations.
  • To improve our website and services using aggregated, non-identifiable analytics.

We do not sell, rent, or trade personal data. We do not use data obtained through the Amazon Selling Partner API to build independent databases, train models, or for any purpose beyond the authorized service.

4. How we protect data

We maintain administrative, technical, and physical safeguards aligned with the Amazon Data Protection Policy and industry practice, including:

  • Encryption: personal data is encrypted in transit using TLS 1.2 or higher and at rest using AES-128 or stronger encryption.
  • Access control: access is restricted to authorized personnel on a least-privilege, need-to-know basis, protected by unique credentials and multi-factor authentication, and reviewed at least quarterly.
  • Monitoring: systems that process personal data are logged and monitored for unauthorized access and anomalous activity.
  • Incident response: we maintain a documented incident response plan. In the event of a security incident affecting Amazon data, we notify Amazon within 24 hours and affected clients without undue delay, and we cooperate fully with resulting investigations.
  • Personnel: employees and contractors with access to personal data complete data protection and security awareness training and are bound by confidentiality obligations.
5. How long we keep data
  • Buyer PII received through the Amazon SP-API is retained only as long as needed to fulfill the order and is securely deleted no later than 30 days after order delivery, unless a longer retention period is required by applicable law, in which case the data is archived in encrypted, access-restricted storage.
  • Non-PII order and listing data is retained for a maximum of 18 months, unless a longer period is required by law or by the client’s documented instructions.
  • Client business and billing records are retained for the duration of the engagement and thereafter as required by tax and corporate law.
  • Website enquiry data is retained for up to 12 months after our last interaction with you.

Data is destroyed using secure deletion methods consistent with NIST 800-88 guidelines. Where Amazon or a client instructs us to delete data, we do so within 30 days unless retention is legally required.

6. When we share data

We share personal data only in these circumstances:

  • With our clients: data processed on a client’s behalf is available to that client.
  • With subprocessors: vetted service providers (for example, cloud hosting providers) that support our services under written agreements imposing data protection obligations at least as strict as this policy. Current subprocessors: Amazon Web Services (AWS) — ap-south-1 (Mumbai).
  • With Amazon: as required under the Amazon Acceptable Use Policy and Data Protection Policy, including cooperation with audits and security investigations.
  • For legal reasons: where required by law, court order, or governmental authority, or to protect our legal rights.
  • Business transfers: in connection with a merger, acquisition, or asset sale, subject to this policy’s protections and applicable notification requirements.
7. International data transfers

Our services are operated from India, and data may be processed in the regions where our cloud infrastructure is hosted: ap-south-1 (Mumbai, India). Where personal data is transferred across borders, we use lawful transfer mechanisms and contractual safeguards required by applicable law.

8. Your rights

Depending on your location, you may have rights under applicable data protection laws (such as the Digital Personal Data Protection Act, 2023 (India), the EU/UK GDPR, or the CCPA), including the right to:

  • Access the personal data we hold about you and receive a copy.
  • Correct inaccurate or incomplete data.
  • Request deletion of your data.
  • Object to or restrict certain processing, or withdraw consent where processing is based on consent.
  • Lodge a complaint with your data protection authority.

Where we process data as a processor on behalf of a client, we will direct your request to the relevant client (the data controller) and assist them in responding. To exercise any right, contact us using the details in Section 11. We respond within the timeframes required by applicable law.

9. Cookies

Our website uses cookies and similar technologies for essential site functions and, with your consent where required, analytics. You can control cookies through your browser settings.

10. Children

Our website and services are directed at businesses and are not intended for children. We do not knowingly collect personal data from anyone under 18. If you believe a minor has provided us data, contact us and we will delete it.

11. Contact us

For privacy questions, requests, or complaints, contact our privacy point of contact / grievance officer:

Sellocloud Logistics
SelloCloud Technology Pvt Ltd
Orchid Business Park
1st Floor, Subhash Chowk, Sector 48, Gurugram, Haryana 122004
Email: support@sellocloud.com
Phone: +91 892 9073 553

12. Changes to this policy

We may update this policy from time to time. The current version is always available on this page with its effective date shown above. Material changes will be communicated to clients directly.