Privacy Policy

Scope & Applicability

• ■Mobile Platforms: Apple App Store (iOS 14+), Google Play Store (Android 9+)
• ■Web Platform: TSeller web application accessible via www.tseller.com and related subdomains
• ■Services Covered: TSeller mobile apps, web platform, backend APIs, and any in-app web views or links

Information We Collect

Information You Provide Directly

Contact Details

• ■Name and surname
• ■Email address
• ■Phone number

Account & Connection Data

• ■Takealot API key (to connect your TSeller app with your Takealot account)

Business Details

• ■VAT number
• ■Business name and address (used for invoice creation)

Takealot Store Details

• ■Store name, seller ID, and order details
• ■Account balances, invoices, sales data, offers, product cost, and reports
• ■Data related to product offer automation, including selling price, RRP, leadtime days, leadtime stock on hand, and product offer status

Automatically Collected Data

When you use TSeller on mobile or web, we may automatically collect information such as:

Mobile Device & Usage

• ■iOS: Device model, OS version, Identifier for Advertisers (IDFA), IP address, timestamps, app usage logs
• ■Android: Device model, OS version, Google Advertising ID (GAID), IP address, timestamps, app usage logs

Web Platform Data

• ■Browser type and version, operating system, and language preferences
• ■IP address, referrer information, and pages visited
• ■Cookies and similar tracking technologies (see Platform-Specific Disclosures)

Analytics & Performance

• ■In-app and website navigation and feature usage metrics
• ■Crash reports (Firebase Crashlytics) and performance metrics

How We Use Your Information

We use the collected information for various purposes, including:

Providing and Enhancing TSeller

• ■Creating and managing your account
• ■Connecting your Takealot account for real-time data integration
• ■Automating product offer updates and pricing strategies through the Seller API

Financial and Business Operations

• ■Generating invoices and financial reports
• ■Tracking sales, inventory, and performance metrics

Communication and Support

• ■Sending updates, notifications, and customer support messages
• ■Informing you about new features, promotions, or changes to our services

Improving Our Services

• ■Conducting research and analysis to enhance TSeller's functionality and user experience
• ■Customizing and personalizing the app based on your usage patterns

Disclosure of Information

We do not sell or rent your personal information. However, we may share your data in the following situations:

Service Providers

With trusted third-party providers who assist us with operations, analytics, customer support, and hosting, under strict confidentiality agreements.

Legal Requirements

When required to comply with legal obligations or protect our rights, including responding to lawful requests from governmental authorities.

Business Transactions

In connection with mergers, acquisitions, or asset sales, subject to ensuring continued protection of your information.

With Your Consent

When you provide explicit consent to share your information with third parties.

Data Usage

How We Use Your Data

TSeller collects and uses your data exclusively to provide, maintain, and improve our services. We are committed to transparency in how your information is utilized and ensure that all data processing serves legitimate business purposes while respecting your privacy rights.

Service Delivery & Operations

• ■Account Management: Your email, name, and authentication credentials are used to create and maintain your TSeller account, enabling secure access across all platforms (web, iOS, and Android).
• ■Takealot Integration: Your Takealot API key is used to securely connect to your seller account, retrieve your sales data, inventory information, orders, offers, and performance metrics in real-time.
• ■Automation Services: Product information, pricing data, and inventory levels are processed to enable automated repricing, stock reconciliation, and offer management features.
• ■Analytics & Reporting: Sales transactions, revenue data, and product performance metrics are analyzed to generate insights, charts, and reports that help you understand your business performance.

Business Intelligence

• ■Buy Box Tracking: Product pricing, competitor data, and market positioning information is used to provide intelligent repricing recommendations and help you win the Buy Box.
• ■Inventory Management: Stock levels, leadtime information, and replenishment data are processed to help prevent stockouts and optimize your inventory operations.
• ■Financial Operations: Transaction data, VAT numbers, and business details are used to generate invoices, track payments, and maintain accurate financial records.

Communication & Support

• ■Notifications: Email and phone contact information is used to send important updates about your account, sales alerts, inventory warnings, and critical system notifications.
• ■Customer Support: Your contact details and account information help our support team provide personalized assistance and resolve technical issues efficiently.
• ■Service Updates: We may use your email to inform you about new features, product improvements, service changes, or important policy updates.

Platform Improvement

• ■Usage Analytics: Device information, app usage patterns, and feature interaction data help us understand how users engage with TSeller and identify areas for improvement.
• ■Error Detection: Crash reports and error logs collected through Firebase Crashlytics enable us to identify and fix technical issues, ensuring platform stability.
• ■Performance Optimization: Technical metrics such as load times, response rates, and system performance data are analyzed to optimize speed and reliability.

Data Processing Principles

• ■Purpose Limitation: We only use your data for the specific purposes outlined in this policy and do not repurpose it for unrelated activities.
• ■Data Minimization: We collect only the information necessary to provide our services and do not gather excessive or irrelevant data.
• ■No Third-Party Marketing: TSeller does not sell, rent, or share your data with third-party marketers or advertisers. Your information remains private and is used solely to deliver our services.
• ■No Cross-Platform Tracking: We do not track your activities across other websites or applications. Data collection is limited to your interactions within TSeller platforms.

Data Retention

We retain your personal data only as long as necessary to fulfill the purposes outlined in this Privacy Policy or as required by applicable laws and regulations. Our retention practices include:

• ■Active Accounts: Data is retained for the duration of your active subscription and as long as you continue using TSeller services.
• ■Closed Accounts: After account closure, personal data is retained for 30 days to allow for account recovery, then securely deleted or anonymized.
• ■Legal Requirements: Certain financial and transactional records may be retained longer to comply with tax laws, accounting regulations, or legal obligations.
• ■Anonymized Data: Aggregated and anonymized analytics data may be retained indefinitely for statistical analysis and service improvement purposes.

Security

Our Commitment to Security

At TSeller, protecting your data is our highest priority. We implement comprehensive security measures across all platforms (web, iOS, and Android) to safeguard your personal information, business data, and API credentials against unauthorized access, disclosure, alteration, or destruction.

Technical Security Measures

• ■Encryption in Transit: All data transmitted between your device and TSeller servers is encrypted using industry-standard TLS/SSL protocols (HTTPS), protecting information from interception during transmission.
• ■Encryption at Rest: Sensitive data, including API keys and authentication tokens, are encrypted using AES-256 encryption standards when stored in our databases, ensuring protection even if physical storage is compromised.
• ■Secure Authentication: We use Firebase Authentication with secure token-based authentication systems, multi-factor authentication options, and session management to verify user identity and prevent unauthorized access.
• ■API Key Protection: Your Takealot API keys are encrypted, never exposed in logs or error messages, and are only used server-side to communicate with Takealot's systems on your behalf.
• ■Secure Infrastructure: TSeller is hosted on Google Cloud Platform (Firebase), which provides enterprise-grade security with multiple redundancy layers, DDoS protection, and continuous security monitoring.

Access Controls

• ■Role-Based Access: Internal access to systems and data is strictly controlled based on job function and necessity, following the principle of least privilege.
• ■Authentication Requirements: All team members with system access must use strong passwords, multi-factor authentication, and secure devices to access TSeller infrastructure.
• ■Audit Logging: All access to sensitive data and system changes are logged and regularly reviewed to detect and investigate any suspicious activity.
• ■Data Isolation: Each user's data is logically separated in our database systems, ensuring that your information cannot be accessed by other TSeller users.

Application Security

• ■Secure Development: Our development team follows secure coding practices, conducts code reviews, and uses automated security scanning tools to identify and fix vulnerabilities.
• ■Regular Updates: We continuously update TSeller applications and dependencies to patch security vulnerabilities and incorporate the latest security enhancements.
• ■Input Validation: All user inputs are validated and sanitized to prevent injection attacks, cross-site scripting (XSS), and other common security threats.
• ■Error Handling: Security-sensitive information is never exposed in error messages or logs, preventing information leakage that could assist attackers.

Network Security

• ■Firewall Protection: Our infrastructure is protected by enterprise-grade firewalls that filter malicious traffic and prevent unauthorized network access.
• ■DDoS Mitigation: Google Cloud Platform provides automatic DDoS protection to ensure service availability even during large-scale attacks.
• ■Intrusion Detection: We employ monitoring systems that detect and alert us to suspicious network activity, enabling rapid response to potential threats.

Data Backup & Recovery

• ■Automated Backups: Critical data is automatically backed up multiple times daily to geographically distributed data centers, ensuring data durability and availability.
• ■Disaster Recovery: We maintain comprehensive disaster recovery plans and regularly test our ability to restore services and data in the event of a catastrophic failure.
• ■Redundancy: Our infrastructure includes redundant systems across multiple availability zones to ensure continuous service even if individual components fail.

Organizational Security

• ■Security Training: All team members receive regular security awareness training and are educated on best practices for data protection and privacy.
• ■Confidentiality Agreements: Every team member with access to user data signs strict confidentiality agreements and understands their legal obligations to protect your information.
• ■Incident Response: We maintain a documented incident response plan that defines procedures for detecting, investigating, and responding to security breaches or data incidents.
• ■Vendor Management: Third-party service providers (such as Firebase) are carefully evaluated for their security practices and must meet our security standards.

Mobile Platform Security

• ■iOS Security: Our iOS application leverages Apple's security features including Keychain for secure credential storage, App Transport Security for network communications, and data protection APIs for file encryption.
• ■Android Security: Our Android application uses the Android Keystore system for cryptographic key storage, enforces TLS/SSL for all network traffic, and implements encrypted SharedPreferences for sensitive data.
• ■App Store Compliance: Both iOS and Android applications undergo security reviews by Apple and Google respectively, ensuring compliance with platform security guidelines.

Your Security Responsibilities

While we implement robust security measures, protecting your account also requires your cooperation:

• ■Strong Passwords: Use unique, complex passwords for your TSeller account and avoid reusing passwords from other services.
• ■Account Security: Never share your login credentials or API keys with others. If you suspect unauthorized access, change your password immediately and contact our support team.
• ■Device Security: Keep your devices updated with the latest security patches, use screen locks, and avoid accessing TSeller from public or untrusted networks without VPN protection.
• ■Phishing Awareness: Be cautious of emails or messages claiming to be from TSeller. We will never ask for your password or API key via email. Always verify communications by contacting us directly.

Security Limitations

While we implement comprehensive security measures, it's important to understand that no system can guarantee absolute security:

• ■Internet Risks: Data transmission over the Internet inherently carries risks. While we use encryption, determined attackers with significant resources might potentially intercept communications.
• ■Evolving Threats: The security landscape constantly evolves with new vulnerabilities and attack methods. We continuously adapt our security measures but cannot prevent all possible future threats.
• ■Third-Party Dependencies: TSeller relies on third-party services like Firebase and Takealot. While these providers maintain high security standards, we cannot control their security practices completely.

Breach Notification

In the unlikely event of a data breach that affects your personal information, we will notify you promptly via email and provide details about the incident, the data affected, steps we're taking to address the breach, and recommendations for protecting your account. We will also notify relevant regulatory authorities as required by applicable data protection laws.

Your Rights

Depending on your jurisdiction, you may have rights regarding your personal data, including:

• ■Accessing and updating your information
• ■Requesting deletion or correction of your data
• ■Objecting to or restricting the processing of your data
• ■Withdrawing consent for data processing

To exercise these rights, please contact us using the details provided below.

Contact Us

If you have any questions or concerns regarding this Privacy Policy or our privacy practices, please contact us at support@tseller.co.za or 071 200 7133.