Get started Sign in

PRIVACY POLICY

Privacy Policy

This policy explains how SellerOS handles account information, authorized marketplace and social-platform data, operating records, support requests, video publishing, and security events.

Updated 2026-08-17Product: SellerOSOperator: CWind Network Technology Co., Ltd.

1. Controller and scope

  • CWind Network Technology Co., Ltd. operates SellerOS and is responsible for the processing described in this policy, except where a customer or third-party platform independently determines processing purposes.
  • This policy covers the public website, SellerOS accounts, Amazon integrations, managed workflows, brand storefront operations, C2345 Video Publish, and related support and security processing.
  • Third-party platforms process information under their own terms and privacy policies when you use their sign-in, authorization, marketplace, or publishing services.

2. Information we process

  • Account and organization data: name, username, email, phone number, company, role, permissions, sign-in status, and identity-verification information.
  • Authorized operating data: Seller ID, marketplace, SKU, ASIN, products, listings, orders, returns, advertising, inventory, FBA, fees, settlements, reports, and synchronization status.
  • User-provided content: costs, supply-chain facts, operating goals, product and brand information, files, images, videos, captions, publishing settings, and support messages.
  • Technical and audit data: IP address, browser and device type, timestamps, sessions, requests, errors, page access, exports, permissions, approvals, execution results, and security events.
  • Buyer PII or restricted data is processed only when an authorized fulfillment, support, tax, compliance, or audit workflow requires it.

3. Sources of information

  • Information comes from users and organization administrators, authorized Amazon and advertising APIs, authorized Google/YouTube, Meta/Instagram, and TikTok APIs, and events generated when the service is used.
  • SellerOS may derive operating metrics, summaries, risk indicators, plans, publishing status, and audit records from authorized source data.
  • A person providing information for an organization must be authorized to provide it and instruct SellerOS to process it.

4. Purposes and legal bases

  • We process information to authenticate users, manage permissions, provide enabled features, synchronize authorized data, respond to support, secure the service, bill customers, and meet legal and platform obligations.
  • We process product and video information to prepare content, publish only after user confirmation, track platform status, and display results.
  • Depending on the context, processing is based on performing a contract, user consent or authorization, legitimate interests in secure service delivery, platform requirements, or applicable law.
  • If a purpose materially changes, SellerOS will update the notice and obtain new authorization or consent where required.

5. Google, YouTube, Meta, Instagram, and TikTok data

  • C2345 Video Publish connects only to a YouTube, Instagram, or TikTok account that an authorized user connects through OAuth or the platform login flow. SellerOS does not request or store the platform password.
  • Platform account identifiers, encrypted authorization tokens, user-confirmed publishing content, and platform results are used only for identity, publishing, status and available metrics, security, audit, and support. They are not sold, used for unrelated advertising profiles, or used to train unrelated public AI models.
  • OAuth scopes, processed fields, official policies, retention, revocation links, and deletion rules are maintained on the Platform User Data page at https://www.c2345.com/en/platform-user-data. Deletion instructions are at https://www.c2345.com/en/data-deletion.

6. Cookies and local storage

  • Strictly necessary cookies and similar storage maintain sessions, security, language, and user-requested preferences.
  • Optional analytics or marketing technologies, if introduced, will be identified and offered with the choices required by applicable law.
  • See the Cookie Policy for categories, retention, and browser controls.

7. AI and automated processing

  • SellerOS uses task-limited context and prioritizes aggregated, statistical, or de-identified information for AI-assisted analysis.
  • Buyer PII, API secrets, refresh tokens, access keys, database passwords, and system credentials are not ordinary AI prompt inputs.
  • AI recommendations do not independently authorize managed actions or social publishing. Required confirmation and system safeguards still apply.
  • See the Data and AI Security Statement for detailed controls.

8. Sharing and service providers

  • SellerOS does not sell seller data, platform user data, order data, advertising data, financial data, or buyer PII.
  • Minimum necessary information may be provided to hosting, storage, email, content delivery, security, payment, platform API, or authorized AI providers that support an enabled function.
  • Providers are required by contract or equivalent safeguards to process information only for the agreed service and protect it appropriately.
  • Information may be disclosed when required by law, necessary to protect rights and security, or directed by an authorized customer.

9. International processing

  • Authorized stores, users, infrastructure, and service providers may be located in different countries, so some processing may involve international transfer.
  • SellerOS limits transferred fields, uses encryption in transit, applies provider and access controls, and uses additional safeguards required by applicable law.
  • An optional U.S. store operating environment is used only for a customer's authorized Amazon operations and is not used to bypass social-platform geographic restrictions.

10. Retention

  • Information is retained for the period needed to provide enabled services, support security and audit, resolve disputes, meet contracts, and satisfy platform or legal requirements.
  • OAuth connections and incomplete publishing tasks are removed or de-identified after verified deletion requests unless limited records must be retained for security, legal, financial, or dispute purposes.
  • Verified requests to delete YouTube Authorized Data are completed within 7 calendar days. Other verified deletion requests are completed under the timing stated on the public User Data Deletion page.
  • Backup copies are deleted or overwritten through normal rotation, ordinarily no later than 90 days after verified deletion.

11. Security

  • SellerOS uses access controls, encrypted transport, password hashing, credential protection, seller and environment isolation, logging, backups, and incident-response procedures appropriate to the service.
  • No system can guarantee absolute security. Users must protect accounts and devices and report suspected compromise promptly.
  • SellerOS will provide legally required notices if a confirmed incident creates a notification obligation.

12. Your choices and rights

  • Depending on applicable law, you may request access, correction, deletion, restriction, objection, portability, or withdrawal of consent.
  • Organization-controlled operating data may require verification with the organization administrator before SellerOS can act on a request.
  • You can manage cookies in your browser, disconnect platform accounts in SellerOS, and revoke platform access in the platform's own settings.

13. Data deletion and platform revocation

  • Public deletion instructions are available at https://www.c2345.com/data-deletion.php and do not require SellerOS sign-in.
  • A verified request may remove OAuth tokens, account connections, cached profile data, incomplete publishing jobs, and related personal data that is no longer required.
  • Disconnecting SellerOS does not automatically delete content already published to a user's platform account. The user controls published content through that platform.

14. Children, policy changes, and contact

  • SellerOS is a business service and is not directed to children. Users must be legally eligible to act for the connected organization and accounts.
  • The policy may change as products, platforms, or laws change. Material changes will be communicated through a reasonable channel.
  • Privacy and data requests: support@c2345.com. China contact: 35F, Building 11, Wuyue Plaza, Xicheng Street, Huangyan District, Taizhou, Zhejiang, China, (+86) 0576 8403-1331. U.S. contact: 2800 E Philadelphia St, Ontario, CA 91761, United States, +1 (909) 222-9219. Operator: CWind Network Technology Co., Ltd.