Data & security
Built to keep your account safe
SellerZero handles your selling and advertising data with care. Here is how we protect it and what control you keep.
Access to your accounts
Standard authorisation
You connect stores through the marketplace's own authorisation screen. We never see or store your seller or advertising password.
Least access
We request only the data access our features need. We do not request access to buyers' names, addresses or other personal details.
Revoke any time
Disconnect a store in SellerZero, or revoke access from your selling account settings, and our access stops immediately.
Protecting data
Encryption in transit
All traffic to SellerZero and to marketplace services uses HTTPS (TLS 1.2 or later).
Encryption at rest
Authorisation tokens are encrypted with AES-256-GCM, with keys kept separate from the database. Databases and backups are encrypted.
Tenant isolation
Every request is checked against your company and store membership, so one customer can never see another's data.
No secrets in logs
We never log tokens, passwords or full marketplace responses.
Control over changes
Preview and approve
Every change to bids, budgets, keywords or listings is prepared as a preview. Nothing is sent until it's approved.
Append-only history
Each applied change is recorded with who approved it and the old and new values. The history can't be edited or deleted.
Undo
Any change can be reversed from the history with one click — as a new, logged change.
People and processes
Two-factor sign-in
Available to every user; required for owners, admins and our own staff.
Roles
Owner, admin, manager, analyst and viewer roles, with access limited by store.
Limited staff access
Our support staff see customer accounts only when needed, in read-only mode, and every staff action is logged.
Incident response
If we discover a security incident affecting your data, we notify you and the relevant marketplace without undue delay, and within 24 hours where required.
Retention and deletion
We keep store data while the store is connected so you can see long-term history. When you disconnect a store or close your account, we delete its data within 30 days, and from backups within a further 60 days.
Full details are in our privacy policy. To report a vulnerability, email info@sellerzero.com.