Notice at Collection

Effective: May 2026

This Notice at Collection supplements our Privacy Policy with the specific disclosures California residents are entitled to under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA). It also extends to residents of Virginia, Colorado, Connecticut, Utah, and Texas to the extent their respective state privacy laws apply.

1. Personal Information We Collect

In the past twelve months we have collected the following categories of personal information:

• Account data (name, email, login credentials) — CCPA category: identifiers
• Business data (Amazon Seller ID, store details) — CCPA category: commercial information
• Transactional data (orders, items sold, returns, refunds) — CCPA category: commercial information
• Limited buyer location metadata from Amazon (ZIP / postal code, city, state or region, and country only — no names, email addresses, telephone numbers, or complete street addresses are received) — CCPA category: commercial information
• Usage data (log files, analytics, feature usage within SellerLegend) — CCPA category: internet or other electronic network activity information

We do not collect special categories of sensitive personal information (e.g., precise geolocation, racial or ethnic origin, religious beliefs, genetic data) beyond what is reasonably needed to operate your account.

2. Sources of Personal Information

We collect personal information from the following sources:

• Directly from you — when you sign up, contact our support team, or interact with our website.
• From Amazon Seller Central — via the SP-API connection you authorize on signup.
• Automatically — through cookies, log files, and the choices you make in our cookie banner (see Cookie Policy).
• From the Intercom live-chat widget — when you start a conversation with our support team.

3. How We Use Your Information

We use this information to:

• Provide and improve SellerLegend's services
• Display analytics and business insights tied to your Amazon Seller Central account
• Manage subscriptions and payments
• Offer customer support
• Ensure security, fraud prevention, and compliance

4. Categories of Third Parties Receiving Your Information

We share personal information with the third-party service providers listed on our Sub-Processors page. Categories include hosting, security, payments, customer support, analytics, application monitoring, and internal collaboration tools. Each provider is contractually limited to processing only the personal information needed to deliver their specific service.

5. Sale or Sharing of Personal Information

We do not sell or share your personal information as those terms are defined by the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA). SellerLegend has not sold or shared the personal information of California residents in the preceding 12 months, and we have no current plans to do so.

If you believe your personal information has been sold or shared without your consent, contact us at [email protected].

6. Retention of Personal Information

Personal information is retained according to the schedule set out in our Privacy Policy. In brief:

• Active accounts — data is retained while your subscription is active.
• Closed accounts — Amazon marketplace data is deleted within 30 days of final closure.
• Billing records — retained for 6 years to comply with UK/EU tax law.
• Security and access logs — retained for up to 3 years for fraud detection and breach investigation.

7. Your California Privacy Rights

If you are a California resident, you have the following rights under the CCPA and CPRA:

• Right to know — request the categories or specific pieces of personal information we have collected, used, or disclosed about you, including the categories of sources and third parties.
• Right to delete — request deletion of personal information we have collected from you, subject to legal retention obligations (e.g., billing records).
• Right to correct — request correction of inaccurate personal information.
• Right to opt out of sale or sharing — although we do not sell or share, you may exercise this right at any time without impact on the services you receive.
• Right to limit use of sensitive personal information — we collect minimal sensitive personal information; you may still request we limit its use.
• Right to non-discrimination — we will not deny services, charge different prices, or provide a lesser quality of service because you exercised your privacy rights.

Residents of Virginia, Colorado, Connecticut, Utah, and Texas have similar rights under their respective state privacy laws (VCDPA, CPA, CTDPA, UCPA, TDPSA). Submit a request using the same channels below and we will honor the rights granted by your jurisdiction.

A note on language

This Notice at Collection is provided in English, Arabic, and Simplified Chinese. The English version is the authoritative source — in case of any inconsistency between language versions, the English version governs.

8. How to Submit a Request

Submit a request via either of the following methods:

• Email: [email protected] with the subject line "California Privacy Request".
• Live chat: open the Intercom live-chat widget on any page and message our support team.

We will verify your identity by matching the information in your request against our account records. If you do not have a SellerLegend account, we may ask you to provide two pieces of information sufficient to confirm your identity before we process the request.

We respond to verifiable consumer requests within 45 days as required by §1798.130(a)(2) of the CCPA. If we need additional time (up to 90 days in total), we will notify you in writing of the extension and the reason.

Authorized agents: A California resident may designate an authorized agent to make a request on their behalf. The agent must provide proof of written authorization signed by the consumer, and we may also require the consumer to verify their identity directly with us.