Privacy Policy
Last updated: October 8, 2026
TyTred Services LLC ("Company," "we," "us," or "our") operates the Sellmetrics platform ("Service"). This Privacy Policy describes what we collect, why, who else touches it, and the limits we hold ourselves to.
The short version
Your sales data is the most commercially sensitive thing you own. Here is what we will never do with it:
- We do not sell it. Not to data brokers, not to advertisers, not to anyone, in any form.
- We do not trade on it. We do not use your product, supplier, pricing or margin data to source or sell products ourselves, and we do not share it with anyone who competes with you.
- We do not show it to other sellers. Your numbers live in a database of your own.
- We do not read it for curiosity. Human access is limited to the narrow cases in Section 4, and it is logged.
- We do not act in your seller account beyond the specific, opt-in features listed in Section 3 — all of which are off until you switch them on.
- We only read in your buying accounts. The Sellmetrics Sync app and browser extension read order history in the buying accounts you connect. They never place orders, change account details or send messages.
If we ever want to do something outside this, we will ask you first — not quietly widen this page.
1. Information We Collect
1.1 Account information
- Email address — login and account identification.
- Display name — shown in the dashboard.
- Password — hashed with Argon2id (a memory-hard algorithm chosen to resist GPU cracking), with PBKDF2-SHA256 as a fallback. Stored hashed and salted; we cannot read or recover it.
- Last login timestamp, and a record of sessions, for account security.
1.2 Marketplace and tool credentials
To connect your accounts, you provide credentials for the platforms you choose to link:
- Amazon SP-API — LWA Client ID, Client Secret, Refresh Token, Seller ID, Marketplace ID.
- Walmart Marketplace — Client ID and Client Secret.
- eBay and Veeqo — where you connect them, via OAuth (we receive a token, never your password).
All credentials are encrypted at rest with Fernet (AES-128-CBC + HMAC-SHA256) before storage. The key lives in the server environment, never in source control. Credentials are decrypted only in memory, only for the duration of an API call, and are never logged, displayed back to you in full, or sent to any third party.
1.3 Business data we retrieve on your behalf
- Orders — order IDs, SKUs/ASINs, quantities, sale prices, dates, fulfilment channel and status.
- Fees and settlements — referral, fulfilment, storage and account-level fees; settlement and adjustment detail.
- Returns and reimbursements — return dates, dispositions, reimbursement amounts and reasons.
- Inventory — FBA and WFS quantities, locations, inbound shipments and shortfalls.
- Product catalogue — titles, identifiers, dimensions and listing status for your listings.
- Competitive pricing snapshots — publicly visible offers on ASINs you sell, including other sellers' listed prices. This is public marketplace data, collected so the dashboard can show how competition on your listings moves. It is stored in your database and is not shared with the sellers concerned.
- Buying-account registry — if you use the purchase-tracking tools, the identity (email or username), label and session state of the buying accounts you connect, so the app can tell them apart and warn you when one needs signing in again.
1.4 Data you enter yourself
- Cost of goods — purchase costs per product.
- Overheads — recurring costs and their frequency.
- Settings — preferences, alert thresholds, and which features you have enabled.
1.5 Operational records
To run the Service securely we keep an audit log of API-key usage (which key, which endpoint, when, from what IP), a record of scheduled data pulls, and application error reports. These exist for security and reliability, not analysis of your business.
1.6 Purchases from your buying accounts
If you use Sellmetrics Sync or the browser extension, they read the order-history pages of the buying accounts you sign in to (Amazon, Walmart, eBay and Woot) and send us, for each purchase:
- The order — order number, dates, status, totals, subtotal, tax, shipping and discounts, and the seller you bought from.
- The items — titles, quantities, prices, condition, brand, UPC and item identifiers, and product images.
- Delivery — carrier, tracking number and tracking events, delivery dates, and the store's proof-of-delivery link where it shows one.
- The card used — for Walmart orders, the card type and last four digits the order page shows, so you can tell which card paid. Never a full card number, expiry date or security code.
- Which account it came from — the buying account's email or username, a label you choose, and the account name the store shows (for example your Amazon Business account name).
This is used to fill in your purchase costs and inventory in Sellmetrics. We do not collect delivery addresses, and the tools only open the stores' order pages and the item and tracking pages those orders link to — they do not read your browsing, other tabs, or anything else on your computer.
1.7 Sellmetrics Sync (Windows app)
What stays on your computer. Sellmetrics Sync opens its own browser windows for your buying-account sign-ins and keeps those signed-in sessions, a copy of your synced orders, and its settings and activity log in a folder on your computer (%APPDATA%\sellmetrics-sync). Its key for your Sellmetrics account is encrypted by Windows. Your store passwords are never stored — you type them into the store's own sign-in page.
What it sends us. Your purchases (Section 1.6); each buying account's email and label, and whether it needs signing in again; the name of your computer, which you can change when you connect it; the app's version when it checks for updates; and periodic health checks — the app version, a checksum of the app's own files so we can spot a damaged or modified copy, and whether it was started with debugging tools. Health checks contain no business data.
Human-verification checks. When a store shows a "press and hold" check before your order history, the app may complete it for you with simulated mouse input, in the session you signed in to. See Section 3A of the Terms for what that can mean for your accounts.
1.8 What we do not collect
- Your buyers' personal information. We do not store buyer names, shipping addresses, email addresses, phone numbers or payment details. The marketplace APIs can expose some of this; our database has no columns for it and we do not request it.
- Your passwords. Marketplace seller access uses API keys and OAuth tokens. Buying-account sign-ins stay as browser sessions on your own computer and never reach our servers.
- Card or bank details. Payments are handled by Stripe; we never see your card number. Purchase tracking keeps at most a card's type and last four digits (Section 1.6).
- Tracking cookies, advertising pixels or third-party analytics. The only device detail we receive is the computer name and app checks described in Section 1.7, used to run and protect the app — never to track you.
2. How We Use It
We use your information to:
- Run the Service — pull your data, calculate profitability, and render your dashboards and reports.
- Authenticate you and keep your account secure.
- Operate and repair the Service — investigate faults, answer your support requests, and keep the platform reliable. See Section 4 for the limits on this.
- Bill you, where you are on a paid plan.
- Improve the Service using aggregated statistics that do not identify you or your business — for example how long a data pull takes, or how often an endpoint errors.
We do not sell, rent, or trade your data; share it with advertisers, data brokers or marketing platforms; use it to source or sell products in competition with you; or share your figures with other sellers.
3. Actions We Take in Your Marketplace Accounts
By default, Sellmetrics only reads from your marketplace accounts. Some optional features do write, and we list them here rather than burying them:
- Review requests (off by default). When you switch this on, we ask Amazon to send its own standard review request on eligible delivered orders — the same action as pressing "Request a Review" in Seller Central. Amazon writes and sends the message; we never see your buyer's identity. You choose whether it applies to FBA orders, FBM orders, or both, and you can turn it off at any time.
- Settings you change through us — where the dashboard offers a control that updates something on a marketplace or connected tool, using it writes that change on your behalf.
We will not add a feature that writes to your seller account without it being clearly labelled and off until you enable it.
Buying accounts. In the buying accounts you connect to Sellmetrics Sync or the browser extension, we only read order history. We never place orders, change account details or send messages. Sellmetrics Sync may complete a store's "press and hold" human check to reach that history (Section 1.7).
4. Who Can See Your Data
4.1 Other customers cannot
Each customer's business data is stored in a separate database identified by a unique tenant ID. Your orders, costs, fees and margins are not visible to any other customer of the Service.
4.2 One shared reference table, and what is in it
We maintain a shared product-reference catalogue keyed on public identifiers (UPC, ASIN, Walmart item ID) holding product titles, brands, weights and images. This is manufacturer and marketplace catalogue information, not your business data: it contains no prices you pay, no costs, no quantities, no sales, and nothing that identifies which customer contributed an entry. It exists so that a product already identified once does not have to be looked up again. No customer's commercial data is pooled.
4.3 Our own access — the honest version
People at Sellmetrics can technically reach production data, because someone has to be able to fix it. We hold ourselves to these limits:
- We access customer business data only to operate the Service, diagnose a fault, or answer a support request you raised.
- We do not browse customer data out of interest, and we do not review it to inform our own buying, selling or pricing.
- Access to production systems is restricted to authorised personnel, and administrative and API activity is logged.
- Where a fault can be diagnosed from aggregates or a redacted sample rather than your records, we do that instead.
If you would rather we did not open your account while investigating something, say so in your support request and we will tell you what we can and cannot resolve without it.
4.4 Other Sellmetrics apps you have enabled
Sellmetrics is a suite. If you enable another app in it under the same account, that app can read the data it needs to do its job — for example, pricing tools need your costs to avoid pricing below them. This happens only for apps you have enabled on your account, and never moves data between customers.
5. Service Providers
We use a small number of providers to run the Service. They process data on our instructions and are not permitted to use it for their own purposes:
- Railway — hosting and encrypted storage volumes.
- Backblaze B2 — encrypted, compressed off-site backups of the databases, so an infrastructure failure does not lose your history; it also stores the Sellmetrics Sync installer and updates.
- Sentry — application error reporting. Reports are scrubbed of credentials and secrets before they leave the server.
- Stripe — subscription billing. Stripe handles card details directly; we receive only subscription status.
- Email delivery — for account email such as password resets and the alerts you opt into.
- Amazon, Walmart, eBay and Veeqo — we authenticate to their APIs with your credentials to retrieve your data. Nothing about your business is sent to them beyond what a request requires.
We may also disclose information where required by law, subpoena, court order, or a valid government request.
6. Security
- Credentials — Fernet (AES-128-CBC + HMAC-SHA256) encrypted at rest; the key is held in the server environment only.
- Passwords — Argon2id, salted per user; unrecoverable by us.
- API keys — hashed with Argon2id, scoped to specific permissions, optionally IP-restricted, and revocable at any time.
- In transit — HTTPS/TLS throughout.
- Monitoring — automated detection of unusual API-key activity, with the ability to suspend a key automatically.
No system is perfectly secure, and we will not claim otherwise. Section 9 describes what happens if we get it wrong.
7. Retention and Deletion
- Business data — kept while your account is active, so your history and trends remain available.
- Marketplace credentials — deleted permanently as soon as you disconnect the platform in Settings.
- Operational logs — audit and error records are kept on a rolling window for security and diagnosis, then removed.
- Data on your computer — Sellmetrics Sync keeps your saved sign-ins and synced orders on your computer until you delete them. Uninstalling the app does not remove them; delete the
%APPDATA%\sellmetrics-syncfolder to do that. Disconnecting the app revokes its key on our side straight away. - On account closure — your account information, credentials and business data are permanently deleted within 30 days, including from backups as those backups age out.
8. Your Rights
- See it — your dashboard shows the data we hold; you can request a full export.
- Correct it — account details are editable in Settings.
- Disconnect — remove any marketplace connection at any time; the stored credentials are deleted immediately.
- Delete it — request account deletion and we will remove everything within 30 days.
- Take it with you — request an export in a standard format.
California (CCPA) — you have the right to know what we collect, use and disclose; to request deletion; to opt out of the sale of personal information (we do not sell it); and not to be discriminated against for exercising these rights.
EEA / UK (GDPR) — we process your data to perform our contract with you, on legitimate interest for security and service improvement using aggregate data, and on consent where required. You may access, rectify, erase, restrict, port, or object to processing, withdraw consent, and complain to your local supervisory authority.
9. If There Is a Breach
If a breach affects your personal information or marketplace credentials, we will notify affected users by email within 72 hours of becoming aware of it, describe what happened and what data was involved, explain what we have done about it, and tell you what to do on your side — such as rotating API keys.
10. Children
The Service is for business use and is not intended for anyone under 18. We do not knowingly collect information from children, and will delete it promptly if we learn we have.
11. Changes
We may update this policy. We will update the date above and, for any change that materially affects what we do with your data, tell you directly rather than relying on you to re-read this page.
12. Contact
TyTred Services LLC (Sellmetrics)
Email: [email protected]