Privacy Policy

This policy explains how we use personal data when you visit eve-sellerops.com, use the Eve SellerOps application or contact us. Eve SellerOps is a trading name of USANDIA LTD., a company registered in England and Wales under number 12785893, whose registered office is 7 Bell Yard, London, WC2A 2JR (we, us). You can reach us at contact@eve-sellerops.com.

We are the controller of personal data we use to run our website, accounts, billing and business. Where we handle personal data inside a customer's selling or business data on that customer's instructions, the customer is the controller and we act as its processor under the data processing terms in our terms of service. In that case the customer's own privacy notice applies, and requests about that data should be sent to the customer.

Eve SellerOps is a business service for Amazon selling partners. It is not intended for consumers or for anyone under 18.

1. Personal data we use

• Account data: name, email address, organisation, role, password hash, authentication, session and invitation records.
• Service data: Amazon account identifiers and the catalogue, listing, order, sales, offer, pricing, inventory, shipment, reimbursement and fee data you authorise us to read; and anything you add, such as costs, supplier details, uploads, bank statements, VAT settings, workflows, ship-from addresses and carrier details.
• Billing data: billing name and address, VAT number, subscription, invoice and payment references, and any partner or promotional code you use. Card details go directly to Stripe; we never receive full card numbers.
• Communications: support conversations, feedback, contact-form enquiries (name, email, company, message, the page sent from, IP address, browser information and campaign parameters) and our correspondence with you.
• Technical and usage data: IP address, device and browser information, timestamps, security and audit records, feature usage and diagnostic information.
• Website data: pages viewed, time on page, referring site, campaign parameters and approximate location derived from an IP address. See our cookies and analytics notice.

We obtain this data from you, your organisation, Amazon and other services you connect, our payment and technical providers, partners who refer you, and your browser or device. Information marked as required is needed to open an account or use the relevant feature.

2. Amazon information

Connecting Amazon happens through Amazon's own consent flow. We never ask for or receive your Amazon password. We use the Selling Partner API only to read the selling data the features you use need and, where you enable it, to submit price changes and inbound shipment operations for your account.

• We do not request buyer contact details through the Selling Partner API. A VAT Transactions Report you choose to import through the browser extension can contain buyer names, street addresses and invoice links. We process that report transiently to remove those columns before storing the reduced report, and shorten postcodes to their outward code. We do not use the removed details to contact or profile buyers.
• Amazon authorisation tokens are encrypted with AES-256 before storage, and all data is encrypted in transit.
• Your Amazon information is used only to provide the Service to your organisation. We do not sell it or disclose it to other customers.
• You can revoke our access in Seller Central at any time. Deleting your account deletes your Amazon information as described in section 6.
• If we become aware of a security incident affecting Amazon information, we notify Amazon and affected customers as required by Amazon's policies and the law.

EVE Browser Extension (EVEBE)

The EVE Browser Extension connects your EVE account to work carried out through your existing signed-in browser sessions. From version 0.9.11, new Chrome Web Store installations enable the features and diagnostics described here immediately after Chrome's installation confirmation, without a separate enable step. Earlier versions require a one-time choice in the extension popup. Updates preserve any previous paused or withdrawn choice; resuming access remains your decision.

• Keepa connection: when you request a connection, the extension reads the API key control on Keepa's API page and sends the key directly over HTTPS to EVE's server. EVE validates and encrypts the key and uses it to update platform market data, as explained when you connect. The extension does not persist or log the key, or return it to scripts on the EVE page.
• Seller Central UK: the extension uses your Amazon session to read the merchant identifier, requested sourcing costs and claim status, VAT Transactions Reports, seller-fee invoices and credit notes. A claim-status check can run when you open Recoveries. VAT imports can request missing reports and briefly process buyer details as described above.
• Supplier accounts: when you request an invoice sync, the extension reads order history, product and cost details, invoice files and the business/contact details contained in those documents from supported suppliers: Very Cosmetics, Cherry Cosmetics, Connect Beauty (including its Shopify account pages), Wholesale Cosmetics and Central Cosmetics.
• Submissions to Amazon: after you confirm the action in EVE, the extension can send sourcing costs or file inbound-shipment claims and reimbursement re-evaluations, including the relevant identifiers, amounts, claim text and supplier invoices. These submissions go to Amazon under your existing account.
• Diagnostics: while enabled, the extension automatically records and sends EVE reduced errors, error codes and stack frames, timestamps, occurrence counts, extension/browser versions and relevant site addresses. Extension error sanitisation removes query strings and fragments, masks recognised identifier-shaped path segments and removes recognised key/token strings and email addresses. This is feature reliability data; it is not a general browsing-history feed.

Imported records and documents go to your organisation in EVE and are available to its authorised users. Session cookies are used by Chrome with the sites you sign in to; the extension does not export them or your passwords to EVE. The extension stores its access preference locally, non-secret activity summaries for the browser session, and a bounded local error history (up to 50 distinct entries). Job tickets, job keys and document contents are used for the current job rather than kept as a local credential or document archive.

You can turn the extension off, remove its site permissions or uninstall it from Chrome's Extensions page at any time. Turning it off stops new jobs and diagnostic uploads; uninstalling it also deletes its local activity and error history. These actions do not delete documents or connected keys already saved in EVE: remove a Keepa key in Settings, or use the account deletion controls or contact us about stored data. Server retention is described in section 6.

Chrome Web Store Limited Use: our use of information obtained through the EVE Browser Extension complies with the Chrome Web Store User Data Policy, including its Limited Use requirements. We use extension-derived data only to provide or improve the disclosed EVE connection, import and submission features, including their operation, security and reliability. These restrictions also apply to aggregated, anonymised and derived data.

We do not sell extension-derived data, use it for personalised advertising, unrelated marketing, creditworthiness or lending, or transfer it to data brokers. We share it only as necessary to provide or improve those features, comply with law, or protect against malware, spam, phishing, fraud or abuse. A transfer as part of a merger, acquisition or asset sale requires your explicit prior consent. Humans may read extension-derived data only with your explicit consent to specific data, for necessary security investigations, to comply with law, or where data is aggregated and anonymised for internal operations. Ordinary staff account views do not expose Recoveries or VAT data. These extension-specific restrictions take precedence over the broader service provisions below, including staff support, analytics, marketing and business transfers.

3. Why we use it and our lawful bases

• Providing the Service: opening and administering accounts, authenticating users, connecting the services you choose, running features, billing, and support. Lawful basis: performance of a contract or, where the contract is with your organisation, our legitimate interests in providing the Service it has bought.
• Security, fraud and abuse prevention: enforcing permissions, preventing misuse of trials, codes and accounts, investigating incidents and keeping audit records. Lawful basis: legitimate interests in protecting our customers, the Service and our business.
• Supporting you: our staff may open a read-only view of your account to answer a support request, investigate a fault or protect the Service. Every such view is recorded in our security audit log. Lawful basis: legitimate interests and, where applicable, our contract with you.
• Improving and developing the Service: measuring use, testing changes, evaluating acquisition channels, and creating aggregated or de-identified statistics. Lawful basis: legitimate interests in running and growing our business.
• Marketing to business contacts: telling account holders and business contacts about our products, features and offers. Where the law requires consent we ask for it; otherwise we rely on legitimate interests. Every marketing email includes an unsubscribe link, and you can opt out at any time.
• Partners and referrals: if you use a partner's code or link, we record it so we can apply the offer and pay the partner. Lawful basis: legitimate interests and performance of our contract with you.
• Legal, tax and accounting: keeping records, handling claims and responding to lawful requests. Lawful basis: legal obligation and legitimate interests.

Where we rely on consent, you may withdraw it at any time without affecting earlier processing. We do not make solely automated decisions about individuals that have legal or similarly significant effects.

4. Who receives personal data

We share personal data only as needed with:

• Service providers acting for us: Amazon Web Services (hosting and storage, London region), Resend (transactional email), IONOS (our mailbox and DNS), Sentry (error monitoring), PostHog (product and website analytics, EU region) and Google Fonts (website typefaces).
• Payment provider: Stripe, which processes payments, tax and invoices and is also a controller for its own regulatory purposes.
• Services you choose to connect: Amazon; Keepa, if you connect a Keepa key; and shipping carriers or brokers (such as UPS, FedEx, Parcel2Go, Parcel Monkey and Interparcel) when you buy labels, which receive the shipment and ship-from details needed to carry it.
• Referral partners: if you used a partner's code or link, we tell that partner that it was redeemed and whether the subscription is still active, so we can calculate their commission. We do not share your selling data with partners.
• Your organisation: the account owner and members the owner authorises.
• Advisers, authorities and others: professional advisers, insurers, banks, tax authorities, regulators, courts and law enforcement where required by law or to establish, exercise or defend legal rights.
• Successors: a buyer, investor or successor in connection with a proposed or completed sale, merger, financing or reorganisation of our business, under confidentiality.

We may add or replace providers as the Service develops. We do not sell personal data.

5. International transfers and security

Some providers process data outside the UK, including in the European Economic Area and the United States. Where transfer rules apply, we rely on UK adequacy regulations, the UK International Data Transfer Agreement, the UK Addendum to the EU standard contractual clauses or another lawful mechanism. Ask us for details of the relevant safeguard.

We protect data with measures appropriate to the risk, including encryption in transit and at rest, separation between customer accounts, role-based access, breached password checks, rate limits and audit logging. No system is completely secure, and you are responsible for keeping your own credentials safe.

6. How long we keep it

• Account and service data: while the account is open. When an account is deleted, its live data is deleted promptly; copies in backups expire within 12 months as backups rotate.
• Inactive FREE accounts: we may close a FREE account with no sign-in for 12 months, after giving the owner 30 days' notice by email.
• Billing, tax and accounting records: six years after the end of the financial year they relate to, or longer where the law requires.
• Security and audit logs: at least 400 days.
• Support and contact enquiries: up to two years after the last contact, or longer while a business relationship or claim continues.
• Marketing suppression list: if you opt out, we keep your email address on a suppression list so we do not contact you again.
• Aggregated or de-identified data: may be kept without limit, because it no longer identifies you.

We may keep specific records longer where needed for a legal claim, investigation or legal obligation.

7. Cookies and analytics

We use cookies and similar technologies that are strictly necessary for sign-in, security and the features you request, and limited, privacy-minimised statistics to improve the website and the Service. We do not use advertising cookies. Our cookies and analytics notice lists them and lets you turn statistics off on your browser.

8. Your rights

Depending on the circumstances, you may have rights to access, correct, erase or obtain a copy of your personal data, to restrict or object to its use, and to withdraw consent. You have an absolute right to object to direct marketing.

Send requests to contact@eve-sellerops.com from the email address on your account where possible. We may ask for information to confirm your identity. We respond within one month, which the law allows us to extend by up to two further months for complex or numerous requests. Where a request is manifestly unfounded or excessive we may charge a reasonable fee or decline it, as the law permits. Requests about data we process for a customer are passed to that customer.

You may complain to the UK Information Commissioner's Office. We would appreciate the chance to address your concern first.

9. Changes and contact

We may update this policy as the Service and our processing change. The current version is always on this page with the date it was last updated, and we tell account owners about material changes by email or in the application.

USANDIA LTD., 7 Bell Yard, London, WC2A 2JR · contact@eve-sellerops.com.