Notice at Collection

Effective: 9 November 2026

This Notice at Collection supplements our Privacy Policy with the specific disclosures California residents are entitled to under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA). It also extends to residents of Virginia, Colorado, Connecticut, Utah, and Texas to the extent their respective state privacy laws apply.

1. Personal Information We Collect

In the past twelve months we have collected the following categories of personal information:

• Account data (name, email, login credentials) — CCPA category: identifiers
• Business data (Amazon Seller ID, store details) — CCPA category: commercial information
• Transactional data (orders, items sold, returns, refunds) — CCPA category: commercial information
• Limited buyer location metadata from Amazon (ZIP / postal code, city, state or region, and country; where Amazon includes them, a shipping recipient name and the anonymised Amazon relay email address of a seller-feedback entry — no telephone numbers or complete street addresses are received) — CCPA category: commercial information
• Usage data (log files, analytics, feature usage within SellerLegend) — CCPA category: internet or other electronic network activity information
• AI assistant data, where you use the assistant (the questions you send, its replies, and metadata about the data lookups performed to answer them) — CCPA category: internet or other electronic network activity information

We do not collect special categories of sensitive personal information (e.g., precise geolocation, racial or ethnic origin, religious beliefs, genetic data) beyond what is reasonably needed to operate your account.

2. Sources of Personal Information

We collect personal information from the following sources:

• Directly from you — when you sign up, contact our support team, or interact with our website.
• From Amazon Seller Central — via the SP-API connection you authorize on signup.
• Automatically — through cookies, log files, and the choices you make in our cookie banner (see Cookie Policy).
• From the Intercom live-chat widget — when you start a conversation with our support team.

3. How We Use Your Information

We use this information to:

• Provide and improve SellerLegend's services
• Display analytics and business insights tied to your Amazon Seller Central account
• Manage subscriptions and payments
• Offer customer support
• Ensure security, fraud prevention, and compliance
• Measure our advertising, if you allow Marketing cookies
• Answer your questions through the AI assistant, where you choose to use it

4. Categories of Third Parties Receiving Your Information

We share personal information with the third-party service providers listed on our Sub-Processors page. Categories include hosting, security, payments, customer support, analytics, application monitoring, internal collaboration tools, and the AI model providers that answer questions in the AI assistant. Each provider is contractually limited to processing only the personal information needed to deliver their specific service. If you allow Marketing cookies, online identifiers are also made available to the advertising partners listed on the same page, to measure our advertising (see section 5).

5. Sale or Sharing of Personal Information

We do not sell your personal information for money. If you allow Marketing cookies, our advertising partners (listed on our Sub-Processors page) receive online identifiers and information about your visit, and, if you arrived through one of our Google ads, the ad click identifier with the amount of your first payment, so we can measure our advertising. You can stop it at any time by turning off Marketing in “Cookie Settings” or by contacting us, and we will honour your request.

If you believe your personal information has been sold or shared without your consent, contact us at [email protected].

6. Retention of Personal Information

Personal information is retained according to the schedule set out in our Privacy Policy. In brief:

• Active accounts — data is retained while your subscription is active.
• Closed accounts — Amazon marketplace data and sign-in details are deleted within 90 days of final closure; name, email address and billing details are kept for 7 years after closure for tax purposes, then anonymised.
• Billing records — retained for 7 years after account closure, to meet our tax obligations.
• Logs — sign-in and API access logs retained for up to 3 years for fraud detection and breach investigation; account activity history (including sign-ins, failed sign-in attempts and security changes, with IP address, browser and approximate location) and records of dashboard pages used kept for 7 years, as evidence of account access, service use and our agreement.
• Support conversations — deleted 36 months after they end.
• AI assistant conversations — deleted 30 days after a conversation's last activity, or sooner if your Amazon authorisation is revoked.

7. Your California Privacy Rights

If you are a California resident, you have the following rights under the CCPA and CPRA:

• Right to know — request the categories or specific pieces of personal information we have collected, used, or disclosed about you, including the categories of sources and third parties.
• Right to delete — request deletion of personal information we have collected from you, subject to legal retention obligations (e.g., billing records).
• Right to correct — request correction of inaccurate personal information.
• Right to opt out of sale or sharing — we do not sell personal information; to opt out of the advertising measurement described in section 5, turn off Marketing in “Cookie Settings” or contact us. We also treat a Global Privacy Control signal from your browser as a request to turn off Marketing. Exercising this right does not affect the services you receive.
• Right to limit use of sensitive personal information — we collect minimal sensitive personal information; you may still request we limit its use.
• Right to non-discrimination — we will not deny services, charge different prices, or provide a lesser quality of service because you exercised your privacy rights.

Residents of Virginia, Colorado, Connecticut, Utah, and Texas have similar rights under their respective state privacy laws (VCDPA, CPA, CTDPA, UCPA, TDPSA). Submit a request using the same channels below and we will honor the rights granted by your jurisdiction.

A note on language

This Notice at Collection is provided in English, Arabic, Simplified Chinese, and German. The English version is the authoritative source — in case of any inconsistency between language versions, the English version governs.

8. How to Submit a Request

Submit a request via either of the following methods:

• Email: [email protected] with the subject line "California Privacy Request".
• Live chat: open the Intercom live-chat widget on any page and message our support team.

We will verify your identity by matching the information in your request against our account records. If you do not have a SellerLegend account, we may ask you to provide two pieces of information sufficient to confirm your identity before we process the request.

We respond to verifiable consumer requests within 45 days as required by §1798.130(a)(2) of the CCPA. If we need additional time (up to 90 days in total), we will notify you in writing of the extension and the reason.

Authorized agents: A California resident may designate an authorized agent to make a request on their behalf. The agent must provide proof of written authorization signed by the consumer, and we may also require the consumer to verify their identity directly with us.