ENTERPRISE COMPLIANT Legal & Privacy Governance

Privacy & Data Protection Policy

1. Introduction & Scope

This Privacy and Data Protection Policy sets forth how eSellerOps ("we," "our," or "us"), operated as a SaaS application under Stupers International Inc. (a Delaware C-Corporation), collects, stores, processes, protects, and deletes user and account data. We are dedicated to maintaining the highest standards of data security, encryption, and operational privacy.

By registering for an eSellerOps account or utilizing our product analysis software (`esellerops.com` and `app.esellerops.com`), you agree to the collection and use of information in accordance with this policy.

2. What Data We Collect

When you register for eSellerOps and use our SaaS platform, we collect the precise, minimal data scopes required to perform our core software functions:

• User Profile & Business Identifiers: We collect your business email address, company name, and store identifiers to personalize your workspace and scope reverse sourcing analyses specifically to your catalog.
• Product Catalog & Watchlist Queries: We store targeted ASIN, UPC, and EAN queries, custom price lists, and watchlist targets you upload into the reverse sourcing engine.
• Operational Target Settings: We store your custom Return on Investment (ROI) targets, minimum net profit margins, inbound shipping rate per pound, and prep center labeling fees to accurately calculate max cost thresholds.
• User Account & Billing Information: We collect your full name, business email address, and encrypted Stripe customer identifiers for subscription billing and account management. We do not store raw credit card numbers on our servers.

3. How We Use Collected Data

All data collected from your user profile and product queries is utilized exclusively to provide, maintain, and enhance the eSellerOps software application:

• Real-Time Profitability & Verdict Computation: We combine your custom fee settings and inbound cost structures with live Keepa pricing and rank history to compute instant, highly accurate BUY / REVIEW / SKIP verdicts and true maximum landed cost thresholds.
• Wholesale Reverse Sourcing Engine: We cross-reference custom vendor CSV price lists against live marketplace offers to surface profitable arbitrage opportunities in seconds.
• Platform Security & Tenant Isolation: User identifiers and session tokens are used solely to authenticate and enforce strict multi-tenant Row-Level Security (RLS) policies within our database.

We never use your proprietary sales data, supplier lists, buy targets, or custom price lists to train public artificial intelligence models, nor do we share or sell your data to external advertisers or third-party competitors.

4. Data Storage, Security & Encryption

eSellerOps adheres to rigorous enterprise-grade security engineering principles:

• Cloud Infrastructure & Row-Level Security (RLS): All application and tenant data is hosted on isolated cloud infrastructure via Supabase PostgreSQL, deployed across secure AWS / Google Cloud data centers in the United States. Row-Level Security (RLS) is cryptographically enforced at the database engine level, ensuring that no tenant can read or modify another tenant's data.
• Encryption at Rest: All persistent database volumes, backups, and user credentials are encrypted at rest using industry-standard Advanced Encryption Standard (AES-256).
• Encryption in Transit: All communications between your browser, our backend microservices, and live market data endpoints are encrypted in transit using Transport Layer Security (TLS 1.3). Plaintext HTTP connections are rejected and redirected to HTTPS.
• Access Controls & Audit Logging: System access is strictly restricted to authorized lead DevOps engineers via multi-factor authentication (MFA) and zero-trust hardware keys. All administrative access and transaction events are recorded in immutable audit logs.

5. Data Retention & Deletion Rights

We believe in data minimization and complete user control over account lifecycle and retention:

• Active Account Retention: Your account profile, custom targets, and saved buy lists are retained while your eSellerOps subscription remains active.
• Account Termination & Deletion: You may request full account deletion or export your saved data at any time via our application settings or support desk.
• 30-Day Permanent Purge: If you cancel your account or request deletion, all associated user data, custom targets, and uploaded price lists are permanently and irreversibly purged from our active databases within thirty (30) days.
• Expedited Right to Erasure (GDPR / CCPA): If you require immediate deletion of your personal data prior to the standard 30-day purge cycle, you may submit an explicit erasure request to our privacy team. Immediate manual purges are executed within 48 business hours.

6. Contact Information for Privacy & Data Requests

If you have any questions, compliance inquiries, or official data deletion requests regarding this Privacy Policy, please contact our corporate governance and data protection officers:

7. Policy Modifications

We reserve the right to update this Privacy Policy periodically to reflect changes in legal regulations or software architecture enhancements. When material updates occur, we will update the "Effective Date" at the top of this document and notify active account owners via email or an in-app notification banner prior to enforcement.