Privacy Policy

Crossell.io is a multichannel ecommerce management and marketplace integration platform. This Privacy Policy describes how we collect, use, store, and delete information when you use our service.

1. Data We Collect

When you use Crossell.io, we may collect:

• Account information — email address, name (optional), billing details for paid plans
• Seller-authorized marketplace data — OAuth tokens, API keys, and integration credentials you connect for Shopify, Etsy, eBay, Trendyol, TikTok Shop, and other supported channels (encrypted with AES-256-GCM at rest)
• Product and catalog information — listings, descriptions, images, pricing, inventory, categories, and mapping rules you import or create
• Shop metadata — store names, channel account identifiers, and operational settings required for sync workflows
• Operational integration data — sync logs, health scores, usage metrics, and workflow state needed to run catalog and listing operations
• Usage and security data — authentication logs, device/session information, and analytics about how you use the platform

We only access marketplace data you authorize through official OAuth or API credentials. We do not scrape marketplaces without seller authorization.

2. What We Do Not Do

• We do not sell, rent, or trade your personal information or seller marketplace data
• We do not resell customer or order information from your connected shops
• We do not use your catalog for unauthorized third-party marketing
• We do not perform unauthorized scraping of marketplace or consumer data

3. How We Use Data

We use collected information solely to:

• Provide catalog synchronization and multichannel listing management
• Run marketplace integrations and operational workflows you configure
• Calculate pricing conversions, health scores, and compliance checks
• Process subscriptions and communicate about your account
• Detect fraud, abuse, and unauthorized access
• Improve product reliability and support

4. Data Sharing

We share data only in these circumstances:

• Marketplace integrations — listing and catalog data transmitted to channels you connect, as directed by you
• Service providers — cloud hosting, databases, payment processing (Stripe), and email delivery under appropriate data protection terms
• Legal requirements — when required by law, regulation, or to protect rights and safety

5. Data Security

We use TLS/HTTPS for data in transit, AES-256-GCM encryption for stored credentials, access controls limiting production access, and MFA for administrative systems. See our Security page for more detail. No method of transmission is 100% secure.

6. Data Retention & Deletion

We retain account data while your account is active. You may delete your account or disconnect integrations at any time. See our Data Deletion Policy for retention periods, disconnect behavior, and how to request deletion by email.

7. Cookies

Crossell.io uses session cookies to maintain authenticated sessions. We do not use advertising or third-party tracking cookies for cross-site profiling.

8. Your Rights

Depending on your location, you may have the right to access, correct, delete, export, or restrict processing of your personal information. Contact privacy support to exercise these rights.

9. Breach Notification

If we confirm a security incident that materially affects your data, we will notify affected account holders by email when required by law or when notification is appropriate to protect sellers.

10. Children's Privacy

Crossell.io is not intended for individuals under 18. We do not knowingly collect data from minors.

11. International Transfers

Your information may be processed in the United States or other countries where our service providers operate. We use appropriate safeguards for cross-border transfers.

12. Changes to This Policy

We may update this policy and will revise the “Last updated” date on this page. Material changes may also be communicated by email.

13. Contact

Privacy inquiries: contact privacy. General support: Contact page.