Privacy Policy

Last updated: 7 June 2026

SellerMind AI (“SellerMind”, “we”, “us”) is operated by Ovlyn Technologies FZCO, a free-zone company registered in Dubai, United Arab Emirates. This policy describes what data we collect when you use SellerMind, why we collect it, where it lives, and your rights over it.

1. What we collect

When you create a workspace we collect your account data: the owner's name and email address, your password (stored only as a salted hash by our authentication provider — we never see or store it in plain text), and your business profile (business name, industry, markets, currency).

When you operate your workspace we store the business data you choose to connect or upload: product catalogues, pricing and cost structures, inventory levels, order and sales data, B2B pipeline records, and the configuration of your connected channels.

When you connect a marketplace or storefront (for example Shopify, and in future Amazon Selling Partner API or Noon), we store the credentials or tokens you authorise and the marketplace data those APIs return — listings, orders, fees, and performance metrics — solely to operate your workspace.

We also keep operational records: agent run logs, agent recommendations and your approve/reject decisions, and an audit trail of actions taken in your workspace.

2. What we do with it

Your data is used to run your AI workforce: computing your metrics, generating agent recommendations, and showing you your own dashboard. We do not sell your data. We do not use your data for advertising. We do not train AI models on your data — see section 4.

3. Where it lives

Your data is stored in a PostgreSQL database hosted by Supabase, encrypted at rest and transmitted over TLS. Our agent pipelines run on Amazon Web Services (EC2). Every row of tenant data carries your workspace's identifier, and access is enforced at the database layer with PostgreSQL row-level security combined with workspace-scoped authentication tokens — your session token can only ever read your own workspace's rows.

4. AI processing — read this part

SellerMind's agents are powered by large language models accessed through OpenRouter, a third-party LLM API gateway. When an agent analyses your business, relevant slices of your business data (for example, your sales numbers or a competitor price movement) are sent to the model to generate the analysis or recommendation, and the response is returned to your workspace. We do not train models on your data; we call third-party models as a processing service. We select API providers whose terms do not permit training on API traffic.

5. Collective intelligence, individual privacy

Your agents make better decisions by drawing on aggregated, anonymized patterns learned across the SellerMind network — for example, regional demand trends or category-level pricing dynamics. These patterns are statistical aggregates: they never contain, and can never be traced back to, any tenant's identifiable products, prices, margins, customers, or business data. Your raw data is never shared with other tenants, never sold, and never used to train AI models. You may opt out of contributing to aggregated patterns at any time without losing access to them.

6. Third-party processors

We share data only with the processors needed to run the service: Supabase (database, authentication, storage), Amazon Web Services (compute), Stripe (billing — Stripe receives your payment details directly; we never store card numbers), and OpenRouter (LLM inference, as described above). Each processes data on our instructions under their own security commitments.

7. Retention & deletion

Your data is retained while your workspace is active. You can request deletion of your workspace and all its data at any time by emailing ops@ovlyntech.com; we will complete deletion within 30 days, except where law requires us to retain billing records.

If we ever confirm a security breach affecting your data, we will notify affected workspaces by email within 72 hours of confirmation.

8. Your rights

You may request a copy of your data, correction of inaccurate data, or deletion (above) at any time via ops@ovlyntech.com. We respond to all requests within 30 days.

9. Changes

We will post any material change to this policy on this page with a new “last updated” date.

Contact: Ovlyn Technologies FZCO, Dubai, United Arab Emirates · ops@ovlyntech.com