1. Scope and roles
This policy applies to the public OmniSeller pages, OmniSeller accounts, seller-authorized marketplace connections, profitability workspaces, beta support and related communications. It does not replace the privacy terms of Amazon, Hostinger or another third-party service that operates under its own policy.
Nexa generally determines how OmniSeller account, security, support and billing-contact information is handled. For marketplace information that a business user authorizes OmniSeller to process on its behalf, the business controls the connection and requested use. Depending on applicable law and the relationship, Nexa may act as a service provider or processor for that information.
2. Information we collect
Information you provide
- Account information: name, work email, organization name, password hash, role, language and account preferences.
- Commercial information: selected plan, billing contact, subscription status and records of manually confirmed beta payments. OmniSeller is not designed to store complete payment-card numbers.
- Profitability inputs: product cost, sale-price scenarios, shipping, advertising, return-rate, storage and other cost assumptions that you choose to enter.
- Support information: messages, diagnostic details and any attachments you voluntarily send. You should not send passwords, access tokens or customer personal information by email.
Information received through an authorized Amazon connection
- Seller and marketplace identifiers, region, authorization state and connection timestamps.
- An authorization refresh credential, stored in encrypted form, used to request access permitted by the seller.
- The seller's own listing information within current beta scope, including SKU, ASIN, listing ID, title, price, quantity, condition and status.
- Report identifiers, synchronization state, timestamps and error information needed to operate and troubleshoot synchronization.
The current beta is not intended to ingest buyer names, buyer contact details, shipping addresses, government identifiers, payment-card data or other restricted customer personal information. If future functions require additional categories, this policy and the permission request will be updated before collection.
Information collected automatically
The application may record IP address, browser or device information, request time, route, authentication events, security events and diagnostic logs for fraud prevention, reliability and support. The static marketing-site package published with this policy does not itself set advertising or analytics cookies. The hosting provider may maintain ordinary server logs under its own operational practices.
3. How we use information
We use information only as reasonably necessary to:
- Create and administer an OmniSeller organization and user accounts.
- Complete seller-requested authorization and retrieve permitted marketplace information.
- Synchronize and display the seller's listing information.
- Run listing checks and user-requested profitability scenarios.
- Authenticate users, isolate organizations, detect misuse and investigate incidents.
- Provide onboarding, support, service notices and beta communications.
- Administer plans, payments, cancellation and account closure.
- Comply with law, enforce agreements and meet applicable Amazon API policies.
- Improve reliability and usability using aggregated or de-identified information where practical.
We do not use seller-authorized data to advertise to buyers, build advertising profiles, sell data, or create an unrelated data brokerage product.
4. Amazon authorization and data
Connecting an Amazon selling account is voluntary. The seller is shown Amazon's authorization experience and chooses whether to grant access. OmniSeller does not request the Seller Central password. Permissions are used for the functions described on the Features page and are subject to Amazon's applicable agreements and policies.
Disconnecting in OmniSeller stops future use of the stored authorization credential after the request is processed. A seller may also revoke authorization through the controls Amazon makes available. Revocation may prevent synchronization and other connected features from operating.
5. When information is shared
We do not sell personal information or seller data. We may disclose limited information to:
- Infrastructure and service vendors that host the website, application, database, email or payment workflow under contractual and access restrictions appropriate to their role.
- Amazon when you direct the connection or when communication is necessary to operate, secure or support the API integration.
- Professional advisers such as legal, security, accounting or insurance providers who require access for their services and are subject to confidentiality duties.
- Authorities or affected parties when reasonably necessary to comply with law, protect rights and safety, investigate fraud or respond to a valid legal process.
- A successor organization in a merger, acquisition, financing or asset transaction, subject to appropriate confidentiality and notice obligations.
Vendors may process information only for the service they provide to Nexa and not for their own unrelated advertising or data-sale purposes.
6. Retention, disconnection and deletion
We retain information only for the period needed to provide and secure OmniSeller, meet contractual or platform obligations, resolve disputes and comply with law. The operating targets for the beta are:
| Category | Retention approach |
|---|---|
| Account and plan records | While the account is active, then up to 30 days after verified closure except for records that law requires us to keep longer. |
| Amazon authorization credential | Until disconnection, revocation, account closure or loss of the valid business need, then deleted from active systems as part of processing the request. |
| Synced listing data and profitability records | While needed for the active service; targeted for deletion from active systems within 30 days after a verified deletion or closure request. |
| Security and audit records | Generally up to 12 months, with seller content minimized, unless a longer period is required for an investigation or legal obligation. |
| Support correspondence | Generally up to 24 months after resolution, unless a shorter deletion request applies or a longer period is legally necessary. |
| Backups | If production backups contain deleted information, they are isolated from normal use and expire through the backup cycle, targeted not to exceed 90 additional days. |
Deletion may be delayed for narrowly retained records required to prevent fraud, demonstrate compliance, establish legal claims or meet tax and accounting obligations. Such records remain restricted to that purpose. If Amazon sends a valid deletion instruction, we will act within the period required by the applicable Amazon policy.
7. How information is protected
OmniSeller uses administrative, technical and organizational safeguards designed for the sensitivity and scope of the information, including password hashing, encrypted storage for Amazon refresh credentials, tenant-scoped queries, role checks, transport encryption in production, security headers, rate controls, input validation, audit events and restricted access to secrets.
No system can guarantee absolute security. The private beta still has open production gates, which are disclosed on the Security page. If we identify a breach that requires notice, we will investigate, contain and notify affected parties and authorities as required.
8. Your choices and privacy rights
Subject to applicable law and identity verification, you may request:
- Access to personal information associated with your OmniSeller account.
- Correction of inaccurate account or contact information.
- Export of information that you provided or that is available through the service.
- Disconnection of an Amazon selling account.
- Deletion or closure of an OmniSeller account.
- Restriction of, or objection to, certain processing where applicable.
- Withdrawal of consent for optional communications.
We may ask for information needed to verify identity and authority over the organization before fulfilling a request. Authorized agents may be required to provide written authority. You may also have a right to complain to a local data-protection authority.
9. International use
OmniSeller may use service providers or systems in the United States or other countries. When information crosses borders, we use measures required by applicable law and limit access according to the service purpose.
10. Children
OmniSeller is a business service and is not directed to children under 18. We do not knowingly create accounts for children or collect their personal information through the service.
11. Policy changes
We may update this policy when the service, vendors, permissions or legal requirements change. We will change the effective date and provide additional notice through the application or email when a change materially affects account holders.
12. Contact
Nexa Ecommerce Solutions — OmniSeller Privacy
info@nexastore.com
https://nexaimport.com/
Include “OmniSeller Privacy Request” in the subject and identify the organization associated with the account. Do not email passwords, access tokens or raw marketplace exports.