1. Core principles
- SellerOS applies authorization, minimum necessary access, purpose limitation, seller isolation, reviewable execution, and lifecycle controls.
- Data is not made available to competing sellers or used for unrelated advertising profiles.
- Security controls are reviewed as products, integrations, risks, and platform requirements change.
2. Authorized marketplace and platform data
- Amazon and advertising data is synchronized only for authorized stores and enabled features.
- Google, YouTube, Meta, Instagram, and TikTok data is used for identity, user-confirmed publishing, status, available metrics, security, and support.
- Revocation stops new activity within the affected authorization scope.
3. Buyer PII and restricted data
- Routine operating analysis avoids buyer PII.
- Where fulfillment, support, tax, compliance, or audit requires restricted data, access is limited by role, purpose, time, and logging.
- Restricted data is not used as general AI context or provided to unrelated parties.
4. Secrets and AI inputs
- API secrets, refresh tokens, access keys, database credentials, private keys, and passwords are not ordinary prompt inputs.
- AI context is limited to fields and time ranges needed for the current task and favors aggregated or de-identified evidence.
- Product-video planning may use authorized product facts and selected product assets while excluding unrelated store data.
5. AI providers and model training
- SellerOS may use authorized AI providers to perform an enabled task and transmits only the information needed for that task.
- SellerOS does not use customer store data to train unrelated public AI models without explicit authorization.
- Provider selection, retention controls, and contractual protections are reviewed against the sensitivity of the task.
6. Human control and automated actions
- AI output is advisory until an authorized workflow and required confirmation permit execution.
- Managed actions remain constrained by store, object, budget, inventory, margin, strategy, risk, permission, and real-time safeguards.
- Social publishing requires the user to review the target account, media, metadata, privacy, interactions, and required disclosures.
7. Isolation, encryption, and audit
- Organizations, sellers, stores, and users are separated according to access and service boundaries. Optional store environments add separate operating-system or virtual-machine boundaries so accounts, files, tools, and sessions are not reused across environments.
- SellerOS uses encrypted transport and protects credentials at rest; sensitive values are excluded from ordinary pages and logs.
- Relevant access, approvals, actions, platform responses, and errors are recorded for troubleshooting and audit.
8. U.S. operating environments and platform geography
- Optional isolated U.S. environments support a customer's own authorized Amazon store operations and team collaboration. Browser-profile separation is only an additional control inside each operating-system or virtual-machine boundary.
- They are not public shared proxies, consumer VPNs, anonymity services, or social-platform publishing relays.
- SellerOS does not use them to bypass TikTok or any other platform's geographic availability, account eligibility, or security restrictions.
9. Retention, deletion, and incidents
- Data is retained only for service, security, audit, contract, platform, or legal needs and is deleted, de-identified, or restricted when no longer required.
- Verified deletion requests are handled under the Privacy Policy and User Data Deletion instructions.
- Suspected security incidents are investigated, contained, documented, and notified when applicable law requires it.
10. Contact
- Questions about data boundaries, AI processing, security, or platform authorization may be sent to support@c2345.com.
- Operator: CWind Network Technology Co., Ltd.