SellerWolfby Tenet Labs LLP
← Back to home

Privacy Policy

Last updated: 14 October 2026

Delete your account — instructions and retention

1. Who we are

Seller Wolf (the "Service") is operated by Tenet Labs LLP, a limited liability partnership registered in India (LLPIN ADA-0579), with its registered office at No. 60/2, MCCW K No. 247/216, Nallurahalli, Borewell Road, Whitefield, Bangalore South, Bangalore – 560066, Karnataka, India. For any question about this policy — including data-protection and grievance matters under the DPDP Act 2023 — email us at help@sellerwolf.com. A founder reads every email.

Grievance Officer. Our Grievance Officer is Siva S (Designated Partner, Tenet Labs LLP), reachable at admin@sellerwolf.com. Customer-care and Grievance Officer telephone: +91 8105691925. We acknowledge grievances within 48 hours and redress them within one month; any shorter applicable legal period prevails.

Our processing responsibilities

Tenet Labs LLP is the Data Fiduciary for account registration, billing, security and our own service administration. For personal data in seller records processed on your instructions to provide the Service, we act as a processor; you are responsible for the lawful purpose, notices and permissions for those records. The role depends on the actual processing. The Information Technology Act 2000 and SPDI Rules 2011 apply where relevant. The DPDP Act 2023 and Digital Personal Data Protection Rules 2025 have phased commencement: statutory duties and rights apply as the relevant provisions come into force. Our stated privacy commitments remain applicable in the meantime.

Contact us to access or correct account information, request erasure or withdraw consent. Where applicable, DPDP rights also include grievance redressal and nomination of another individual to exercise rights on death or incapacity. Necessary processing or legal retention may continue on a lawful basis; withdrawal can prevent us from providing the affected feature. You may approach the competent authority under the applicable statutory mechanism.

Optional website session analytics

We use Microsoft Clarity in cookie-free mode on public marketing pages to understand clicks, scrolling and navigation through heatmaps and session recordings. Microsoft receives website interaction data and browser/device information. Without analytics cookie consent, Clarity uses a separate identifier per page view and does not persist session identifiers in cookies. With your separate opt-in, analytics cookies can link visits across pages. We do not intentionally send names, email addresses, form values, Amazon credentials or seller business data. Clarity is not installed in our logged-in seller dashboard.

You can allow or decline analytics cookies through Website analytics preferences, or select Turn off session analytics to stop recordings entirely. Previous choices to decline all Clarity recording remain respected. Advertising storage permission is not granted by this choice. Learn more in Microsoft’s privacy statement.

2. What we collect on this website

When you sign up or join our mailing list, we collect:

  • The details you enter, such as your email address
  • Metadata: timestamp, hashed IP address, user agent, referrer URL, UTM parameters
  • A confirmation token (used to validate you actually own the email)

We use Google Ads conversion measurement on this site and our signup page when you choose “Allow measurement”. Google advertising cookies (_gcl_*) help connect an ad visit with a completed account registration across sellerwolf.com and app.sellerwolf.com. Google receives advertising identifiers and the registration event; we do not include your name, email, phone number or Amazon account data in that event. We also use first-party, privacy-respecting analytics for page performance. We do not sell your data. Google processes advertising identifiers under its own privacy terms.

Measurement is off until you opt in. You can change your choice using “Ad measurement preferences” on this site or the signup page. You can also block advertising cookies in your browser settings, or opt out at Google Ads Settings. Blocking them does not affect anything on this site.

3. Why we collect it

Mailing-list details support product and onboarding communications. Account data supports registration, billing, security and support. Optional advertising measurement attributes signups to ads; usage and performance analytics help us operate and improve the website, as described above.

4. Your rights (DPDP Act 2023)

  • Access: Ask us for a copy of everything we have on you.
  • Correction: Tell us to fix any incorrect detail.
  • Erasure: Tell us to delete your data. Account deletion and retention are explained below.
  • Withdraw consent: Email us to withdraw consent or request removal from our mailing list. Account deletion and retained records are explained below.

To exercise any right, email help@sellerwolf.com.

5. Where your data lives

Our application database is hosted in India. This is not a promise that every copy stays in India: website hosting, advertising measurement and the service providers described below may process data in other countries.

Mobile app, AI assistant and diagnostics

The Seller Wolf mobile app signs you into your existing account. We process account and seller identifiers, authentication credentials and session tokens to provide and secure the Service. The Service holds the name, email and phone associated with your account. Optional advertising controls and historical file uploads send the instructions, amounts or selected files needed for those features.

Push notifications are optional. If you enable them, the app registers push identifiers, including Expo push tokens and native Google Firebase Cloud Messaging (FCM) tokens, along with platform and app version, to deliver seller alerts. Expo and Google FCM process these identifiers for notification delivery. You can disable notifications in your device settings; the app also attempts to revoke its notification registration when you sign out.

Agent Wolf is optional. We store your prompts and conversation messages to provide chat history. We send your current message, conversation history and relevant seller context to Anthropic to generate AI answers.

Reporting an AI response is optional. We store the report reason, optional feedback and selected response reference with your account association. We email the reason, feedback, selected answer and report reference to our review team at help@sellerwolf.com through Resend. We do not add your account email or other conversation turns as separate fields; submitted feedback and the selected answer may themselves contain personal information. Please avoid submitting credentials or other sensitive information. Receiving a report does not mean it has already been reviewed or resolved.

We process operational diagnostics, including request routes, status, outcomes and duration, to operate and secure the Service. We use backend error monitoring through Sentry to investigate errors; this is server-side monitoring and does not imply that the native app has a crash-reporting SDK. We may use Sentry for web/browser error monitoring when enabled (when a DSN is configured), including performance tracing and masked session replays associated with errors. In these replays, text is masked and media is blocked.

Delete your account

Account owners can request account-wide deletion. In the mobile app, open More → Settings → Delete account and data and follow the confirmation prompts. On the web dashboard, open Settings → Data & Privacy → Delete my data.

You can also request account deletion without using the app: email help@sellerwolf.com from your account email, asking to delete your Seller Wolf account. The email route is always available, whether or not you can use in-app deletion. This route is also available to non-owner users and if the in-app request is unavailable. We may verify account ownership before processing the request.

We delete your data from our active systems within 30 days after you revoke Seller Wolf's access in Seller Central or request deletion. We delete seller data from active systems within 30 days of your account-deletion request. We delete data for the affected Amazon store within 30 days of you deliberately disabling Seller Wolf in Seller Central (Manage Your Apps → Disable authorization). Disabling one store’s authorisation does not delete other connected stores or close your Seller Wolf account. If your yearly authorisation expires, we send a reconnect notice; expiry alone does not trigger deletion. A temporary connection error alone does not trigger deletion either.

Account-wide deletion covers the account’s seller profiles and associated logins, imported business records, seller archives and their versions, AI conversations and associated reports, and push registrations. Deletion removes login contact details and credentials. Our retained technical identifiers and deletion-state records contain only internal account/profile IDs, deletion request and completion timestamps, and a revocation flag. We use this minimal record to prevent re-sync and prove deletion. This technical record contains no Amazon data or seller content and has no scheduled expiry. Compliance audit records have a separate retention period of 390 days.

We retain our own subscription invoices and billing records for the period Indian tax law requires. For GST, this is 72 months from the due date of the annual GST return for the relevant year. Records involved in a tax proceeding or investigation must be kept until one year after its final disposal or the ordinary retention period ends, whichever is later. This tax retention covers our billing data only, never Amazon data.

Processor copies and backups have separate retention rules. Automated backup copies are deleted automatically on a rolling schedule, about three weeks after the data is removed from our active systems. We keep 7 days of automated database backups. Database-backup files expire after 21 days and their older versions a day later. Manual pre-release database snapshots are deleted by our team 21 days after creation. In the financial archive and AI-history storage, older versions expire 21 days after they are replaced or deleted. Exports expire after 21 days. Backups of our internal operations storage follow the same 21-day schedule; copies made before 14 October expire by 17 November. Storage lifecycle processing is asynchronous, so these are not exact physical-deletion days. Account deletion does not individually purge every backup or processor copy.

Payment providers (including Razorpay), email and infrastructure providers retain their own records under their own policies. When handling deletion, we delete copies we control, including support-mailbox copies, subject to the retention periods explained here, and request deletion where the provider supports it. Provider-held records may follow different retention periods.

When you become a Seller Wolf customer — Amazon Seller Central data

The remaining sections describe what Seller Wolf reads from your Amazon Seller Central account via the official Amazon Selling Partner API (SP-API), how it is stored and protected, and your rights at every step. By connecting your Amazon account during onboarding, you authorise access for the services described below. Our Amazon data handling is subject to the Amazon SP-API Data Protection Policy (DPP) and Acceptable Use Policy (AUP).

6. What we read from your Amazon account

Ordinary analytics uses non-restricted SP-API roles for business data:

  • Inventory and Order Tracking — order line items: SKU, ASIN, quantity, price, fulfilment status. No buyer name or address.
  • Finance and Accounting — financial events: fees, refunds, reimbursements, settlements, payouts.
  • Amazon Fulfillment — FBA inventory levels, storage fees, reimbursement reports.
  • Product Listing & Pricing — your catalogue, listing health, Buy Box status.
  • Buyer Solicitation— tokenised access to the Request-a-Review button. No buyer identity is exposed. Review Requester is off until you turn it on; once on, it sends Amazon's standard review request once per eligible order after your chosen delay, and you can switch off individual products.
  • Brand Analytics (only if you are Brand-Registered and grant access) — Amazon Brand Analytics reports for brand-registered sellers.

We may also read your Amazon Advertising data via the separate Amazon Ads API (PPC spend, campaign performance, keyword metrics). Seller Wolf suggests advertising changes. A bid, budget, campaign or target state, or negative-keyword change is sent to your connected advertising account only when you click to apply it in Seller Wolf, and you can reverse it from the change log.

7. GST data and personal information

GST features use files you upload (such as Merchant Tax Reports, invoices and registers) and, if you choose to connect it, your GST portal through our GST Suvidha Provider. We don't receive buyer personal information from Amazon's Selling Partner API.

Uploads and account or support submissions can also contain personal information, including tax identifiers. Provide only information needed for the feature and that you are authorised to share. We process these records to provide the requested tax and reconciliation tools, only for your business and not to contact your buyers. New uses requiring additional authorisation must be explained and authorised before use.

8. Where your data lives and how it is protected

  • Storage: encrypted PostgreSQL database operated on cloud infrastructure hosted in India (ap-south-1).
  • Encryption at rest: database storage is configured for encryption. Application credential encryption supports AWS KMS and Fernet, depending on configuration and the stored record version; token rotation and legacy record migration are managed separately.
  • Encryption in transit: our Amazon API client uses HTTPS, and database infrastructure is configured to require encrypted connections.
  • Tenant isolation: scoped application access uses PostgreSQL Row-Level Security, including FORCE ROW LEVEL SECURITY and profile/marketplace checks to restrict seller-data access. Account records and service metadata have their own access rules.
  • Two-factor authentication:Seller Wolf supports two-factor authentication (an authenticator-app code at every sign-in) on every account. Turn it on in Settings → Profile & Security — we strongly recommend it.
  • Access controls: application roles are designed for restricted access; privileged support and maintenance access is governed separately by authorisation and audit controls.
  • Token security: SP-API and Ads refresh tokens use encrypted storage fields, and logging controls are designed to redact credentials. No security measure eliminates every risk.

9. How long we keep it (retention)

  • Active sellers: we retain the history of orders and financial events needed for the features you use. Retention varies by record type and configured cleanup; the backup and processor exceptions in Delete your account also apply. Seller Wolf is not your statutory tax archive: keep independent records for filings and audits.
  • Revoked access: if you revoke Seller Wolf's access in Seller Central or request deletion, we delete your data from our active systems within 30 days. Technical, compliance, backup and processor copies described above are exceptions.
  • Deletion on request: request account-wide deletion using the instructions in the Delete your account section. That section explains cleanup, retained records and separate processor and backup retention.
  • Audit log: compliance audit records survive account deletion and are retained for 390 days.

10. How we use and share Amazon data

We access your Amazon data only with your authorisation and use it only to provide Seller Wolf's services to you. This includes the reports and calculations you use for your own Amazon business. We never sell your Amazon data. We never share your Amazon data with another seller.

We disclose Amazon data to service providers under contract only as needed to provide and secure these services for you, or when required by law. These providers may use that data only for their contracted services, subject to confidentiality and security obligations. Retention, deletion requests and deliberate Seller Central “Disable authorization” are explained in Section 9 and Delete your account above, including the separate treatment of backups and provider-held copies.

Service providers. We use Amazon Web Services for application servers and database hosting in Mumbai, India; Cloudflare to route and protect traffic to our API (security filtering and delivery); Anthropic for optional AI chat; Expo and Google FCM for mobile push delivery; Resend for transactional email, including AI-response reports; WhiteBooks (a GST Suvidha Provider) for GST portal connections you choose to make; Razorpay for subscriptions and payments: we send your name, email, optional phone number and account ID to create your payment customer record; Sentry for backend error monitoring and, when enabled, web/browser error monitoring, performance tracing and masked session replays; and Vercel for the website and dashboard web interface. These providers process the data needed for their functions. Provider processing, including global web hosting, network protection, AI, notifications, email and error monitoring, may occur outside India.

11. Your rights as a customer

  • Access: request a copy of your personal account information by contacting us. We verify the request and explain the available format, timing and applicable legal exceptions.
  • Export: use available dashboard report and GST export controls for records you can access. Contact support if an export is unavailable; no complete archive or unrestricted access after cancellation is promised.
  • Correction: ask us to correct inaccurate account information or investigate derived figures. Use the available controls for your own inputs such as COGS; marketplace source errors may require correction through Amazon.
  • Cancellation: use Settings → Billing → Cancel plan for billing cancellation where available, or contact support. It takes effect at period end; renewals may be presented up to two days earlier. Deletion or Amazon revocation does not itself cancel billing.
  • Deletion: request deletion of your account using the Delete your account instructions above, including the email route and retained-record information.
  • Revoke Amazon authorisation: from Amazon Seller Central → Apps and Services → Manage Your Apps. Revocation prevents further authorised API access; known revocation blocks protected reads. Manage Ads authorisation separately through Amazon.
  • DPDP Act 2023 (India): the rights described above apply as the relevant statutory provisions commence, in addition to our stated contractual privacy commitments.

12. Audit log & breach response

We record Amazon API activity and authorised support access for security and compliance, including timestamps, event types and relevant account or marketplace identifiers. Compliance audit records survive account deletion and are retained for 390 days.

Our incident-response procedures cover investigation, containment and notification, with a designated incident contact. If we detect or are notified of a security incident affecting Amazon Selling Partner data, we will notify Amazon within 24 hours of detection, as required by the Amazon DPP. We will notify affected individuals and competent authorities as required by applicable law. When the relevant DPDP provisions commence, affected individuals must be informed without delay; the 72-hour period for additional details to the Data Protection Board is not a permission to delay individual notification. Each notice covers what happened, what data was involved, what we are doing about it, and what steps you should take.

13. Consent — how you grant and revoke it

  • Grant:by completing the "Connect Amazon" OAuth flow during onboarding. Amazon will show you the exact roles being granted before you confirm.
  • Revoke (Amazon side): Seller Central → Apps and Services → Manage Your Apps → revoke Seller Wolf. Access stops immediately; deletion from our active systems completes within 30 days.
  • Revoke (Seller Wolf side): request account deletion through the Delete your account instructions above.
  • Contact for any data question: help@sellerwolf.com — a founder reads every email.

14. Changes to this policy

We may update this policy as the Service evolves. Material changes (anything that expands what we collect, how we use it, or who we share it with) get an email notification at least 14 days before they take effect.