Privacy Policy

Who is the data controller?

The data controller is FBA SELLER EXPERTS LLC, a Limited Liability Company registered in the State of Delaware (United States), with its registered office at Corporation Trust Center, 1209 Orange Street, Wilmington, Delaware 19801, USA.

For individuals located in the European Union, our representative pursuant to Article 27 of the GDPR is: Data Protection Representative Limited (DataRep), 77 Camden Street Lower, Dublin, D02 XE80, Ireland.

You can contact our Data Protection Officer (DPO) at: privacy@fbasellerexpert.com.

What data do we collect?

We only collect data strictly necessary to provide our services. This data is either provided directly by you or collected automatically during your use of the Platform.

Account data

First and last name, email address, country, language, currency, subscription plan. If you choose to sign in with Google, we receive your Google identifier and associated email address.

Business data

Profitability simulations, products, orders, suppliers, professional contacts that you enter in the Sourcing, Cashflow, Contacts modules, etc.

Content and documents

Uploaded documents (CSV, PDF, images), personal notes, images submitted to the Photo Studio module, imported Amazon reports.

Usage data

Login logs, actions performed in the interface, module usage statistics, AI Expert call history (questions/answers anonymized after 30 days).

Payment data

We do not collect or store any credit card data. Payments are fully managed by a PCI-DSS Level 1 certified provider. We only keep a history of your transactions (amount, date, status).

Why do we use your data? (purposes and legal bases)

We process your personal data for the following purposes, based on the legal bases indicated:

Performance of the contract

Creating and managing your account, providing modules (simulator, compliance, sourcing, etc.), managing subscriptions and customer support. Legal basis: performance of a contract (Article 6.1.b GDPR).

Legitimate interest

Improving our services, platform security, fraud prevention, aggregated statistics, complaint management. Legal basis: legitimate interest (Article 6.1.f GDPR). You can object to this processing at any time.

Consent

Use of non-essential cookies, newsletter subscription (if you opted in), activation of optional features (Google login, Dropbox import). Legal basis: consent (Article 6.1.a GDPR), which you can withdraw at any time.

Legal obligations

Storage of invoices, responding to requests from competent authorities. Legal basis: legal obligation (Article 6.1.c GDPR).

Who has access to your data?

Your data is only accessible to our authorized personnel and to carefully selected technical service providers, bound by contract:

• Hosting and database provider: data stored on servers located in the European Union and the United States.

• Artificial intelligence service providers: your textual content and documents may be transmitted to specialized natural language processing providers located in the United States, acting as processors and bound by European Commission Standard Contractual Clauses.

• Image processing provider: your images may be sent to a third-party automated retouching service, also located in the United States, bound by appropriate contractual guarantees.

• Payment service provider: transactions are handled by a PCI-DSS Level 1 certified provider, which does not transmit full credit card details to us.

No sale, rental, or sharing of your data with third parties for commercial purposes takes place.

International transfers

Your data is hosted within the European Union (notably Frankfurt, Ireland) and the United States. When data is transferred to a country outside the European Economic Area that does not benefit from an adequacy decision by the European Commission, we implement appropriate safeguards, such as the Standard Contractual Clauses (SCCs) approved by the European Commission, along with additional technical and organizational measures.

You can obtain a copy of these safeguards by contacting privacy@fbasellerexpert.com.

How long do we keep your data?

We retain your data for as long as necessary for the purposes for which it was collected:

Account data

Duration of active subscription + 3 years after last activity, to meet potential legal obligations or claims.

Business data, content, documents, notes

Deleted 30 days after the cancellation of the subscription followed by account deletion.

Usage logs and AI history

Retained for 12 months, then anonymized.

Payment data

Only our payment provider retains banking information according to its own retention periods. We keep transaction history for 10 years in compliance with our accounting obligations.

Photo Studio images and results

Deleted 30 days after the cancellation of the subscription followed by account deletion.

Total deletion after unsubscription and account deletion

When you decide to cancel your subscription and then permanently delete your account, all your personal and business data (simulations, products, orders, documents, notes, contacts, logs, images, etc.) are permanently deleted from our active servers within 30 days after deletion confirmation. This period allows for secure deletion and to meet any legal requirements. Backups are also purged within this same period. Once this period expires, no recovery is possible.

Your rights

In accordance with applicable regulations (GDPR, CCPA, etc.), you have the following rights regarding your personal data:

• Right of access: obtain a copy of your data.

• Right to rectification: correct inaccurate information.

• Right to erasure (right to be forgotten): request deletion of your data, within legal limits.

• Right to data portability: receive your data in a structured, commonly used format.

• Right to restriction of processing: restrict the use of your data in certain cases.

• Right to object: object to processing based on legitimate interest.

• Right to withdraw consent at any time (for consent-based processing).

• Right to define directives regarding the fate of your data after your death.

To exercise these rights, write to: privacy@fbasellerexpert.com. We will respond within one month (extendable to two months for complex requests).

If you believe your rights are not being respected, you may lodge a complaint with the competent data protection supervisory authority in your country of residence.

Cookies and similar technologies

We only use cookies strictly necessary for the operation of the Platform (authentication, session, language preferences). No advertising or profiling cookies are placed without your prior explicit consent.

You can manage your cookie preferences via the management panel accessible from the cookie banner displayed on your first visit, or by configuring your browser settings.

Security

We implement appropriate technical and organizational measures to protect your data against unauthorized access, loss, modification, or disclosure: communication encryption (TLS), data isolation per user (Row Level Security), strong authentication, validation of critical actions, double confirmation for account deletion, access monitoring, and regular audits.

Changes to this policy

We may update this privacy policy. In the event of a material change, we will notify you by email or via an in-app notification at least 30 days before it takes effect. Continued use of the Service after that date constitutes acceptance of the new terms.

Contact

For any questions regarding this policy or the protection of your data:

• Email: privacy@fbasellerexpert.com

• Security: security@fbasellerexpert.com

Last updated: [DATE]