Privacy Policy

Scope & Applicability

• ■Mobile Platforms: Apple App Store (iOS 14+), Google Play Store (Android 9+)
• ■Web Platform: TSeller web application accessible via www.tseller.com and related subdomains
• ■Services Covered: TSeller mobile apps, web platform, backend APIs, and any in-app web views or links

Information We Collect

Information You Provide Directly

Contact Details

• ■Name and surname
• ■Email address
• ■Phone number

Account & Connection Data

• ■Takealot API key (to connect your TSeller app with your Takealot account)

Business Details

• ■VAT number
• ■Business name and address (used for invoice creation)

Takealot Store Details

• ■Store name, seller ID, and order details
• ■Account balances, invoices, sales data, offers, product cost, and reports
• ■Data related to product offer automation, including selling price, RRP, leadtime days, leadtime stock on hand, and product offer status

Automatically Collected Data

When you use TSeller on mobile or web, we may automatically collect information such as:

Mobile Device & Usage

• ■iOS: Device model, OS version, Identifier for Advertisers (IDFA), IP address, timestamps, app usage logs
• ■Android: Device model, OS version, Google Advertising ID (GAID), IP address, timestamps, app usage logs

Web Platform Data

• ■Browser type and version, operating system, and language preferences
• ■IP address, referrer information, and pages visited
• ■Cookies and similar tracking technologies (see Platform-Specific Disclosures)

Analytics & Performance

• ■In-app and website navigation and feature usage metrics
• ■Crash reports (Firebase Crashlytics) and performance metrics

How We Use Your Information

We use the collected information for various purposes, including:

Providing and Enhancing TSeller

• ■Creating and managing your account
• ■Connecting your Takealot account for real-time data integration
• ■Automating product offer updates and pricing strategies through the Seller API

Financial and Business Operations

• ■Generating invoices and financial reports
• ■Tracking sales, inventory, and performance metrics

Communication and Support

• ■Sending updates, notifications, and customer support messages
• ■Informing you about new features, promotions, or changes to our services

Improving Our Services

• ■Conducting research and analysis to enhance TSeller's functionality and user experience
• ■Customizing and personalizing the app based on your usage patterns

Disclosure of Information

We do not sell or rent your personal information. However, we may share your data in the following situations:

Service Providers

With trusted third-party providers who assist us with operations, analytics, customer support, and hosting, under strict confidentiality agreements.

Legal Requirements

When required to comply with legal obligations or protect our rights, including responding to lawful requests from governmental authorities.

Business Transactions

In connection with mergers, acquisitions, or asset sales, subject to ensuring continued protection of your information.

With Your Consent

When you provide explicit consent to share your information with third parties.

TSeller AI

TSeller includes a built-in AI assistant that answers questions about your stores and can prepare changes to your listings, repricing settings, product costs and Takealot ads, including buying ad credit. Answers are generated by AI models run for us by third-party AI service providers, Google for Standard answers and Anthropic for Advanced answers, which process this information on our behalf under their data processing terms.

What Is Sent to Our AI Providers

When you ask a question, we send the AI provider answering it your question, the earlier messages in that conversation, and the store data needed to answer it. That can include your store details, listings, prices, stock, sales, orders, fees, transactions, returns, reviews, product costs, profitability, Buy Box, shipment, promotion and advertising data from your connected Takealot, Makro, Amazon and Shopify stores. Customer names and street addresses are not sent, but a Makro buyer's city, courier tracking numbers, comments customers write on orders and returns, and the names and email addresses of team members who changed your ads can be.

Where It Is Processed

Our AI providers may process your questions and the related store data in any country where they operate their infrastructure, including the United States and the European Union, so using TSeller AI involves a transfer of information outside South Africa. Under section 72 of the Protection of Personal Information Act we rely on that transfer being necessary to provide the service you request, and on our AI providers' binding data protection terms, which require a level of protection comparable to the Act. Your saved conversations are stored in South Africa; files you download from TSeller AI are stored in the United States.

Training and Use

Our AI providers do not use the information we send them to train their AI models, and neither do we. We use your conversations only to provide answers to you and to keep the feature working reliably, which can include our team reviewing an answer that failed or that you rated.

Changes to Your Stores

TSeller AI never changes anything on its own. When you ask for a change, it shows you exactly what will change, and nothing happens until you press Apply. If you schedule a change, it runs at the time you chose and can put the earlier prices back automatically; you can cancel it until it runs. You can also switch to Research mode, in which it can only read your data.

What We Keep

Each team member's conversations are private to them. You can delete a conversation at any time: it is then permanently erased, together with any ratings, downloads and unapplied changes from it (deleted downloads take up to 7 days to clear from storage). Changes you applied or scheduled stay in your account's change log, which your team can see, and a scheduled change still runs unless you cancel it. Conversations you don't delete are erased automatically 12 months after their last message. We also keep a usage record of each answer (when it was asked, which data was checked, and the processing used) for billing, troubleshooting and abuse prevention, retained for about 13 months, and an audit record of the data each answer looked up or changed, retained for 90 days. These records hold no question or answer text, though the audit record includes the search terms and filters used. If you rate an answer, we keep that rating, and any reason or comment you add, with the answer to improve quality, until the conversation is deleted.

Memory

TSeller AI can remember facts and preferences you share with it, such as the return on ad spend you aim for or how you like answers set out, so later answers fit your business. It saves them only when you ask it to or when you state a lasting preference, tells you when it does, and never saves passwords, payment details or your customers' personal details. Your account's memory is shared with your team members who use TSeller AI, and you can see and delete each item under Memory in TSeller AI.

AI Assistant Connector

TSeller offers an optional AI Data Connector that lets you link an external AI assistant — such as Claude (Anthropic) or ChatGPT (OpenAI) — to your TSeller account. The connector is off by default. No data is shared with any AI provider unless you connect an assistant yourself and approve the access request.

What You Authorise

The approval screen lists every category of data an assistant is asking for before you allow access. Depending on what is requested, an assistant may read:

• ■Store & Listing Data: Store details, listings, prices, stock levels, lead times and Buy Box tracking
• ■Sales & Orders: Order history, revenue, order status and shipment records
• ■Financial Data: Transactions, fees, refunds, payouts and profitability calculations
• ■Returns: Return reasons, outcomes and refund amounts
• ■Customer Information: Customer names and delivery areas are redacted by default and are shared only if you approve that permission separately

Changes to Your Listings

If you grant write permission, an assistant can change live Takealot listings on your behalf — selling price, recommended retail price, stock on hand, lead time, and whether a listing is enabled. Those changes are made under your seller account and take effect on Takealot immediately. You remain responsible for them.

Cross-Border Transfer

Anthropic and OpenAI process data on servers located outside South Africa, so connecting an assistant results in your information being transferred across borders. We rely on the consent you give on the approval screen as the basis for that transfer under section 72 of the Protection of Personal Information Act. Once information reaches an AI provider it is governed by that provider's privacy policy and terms rather than ours, and we cannot control, recall or delete it.

What We Record

We keep an audit record of every request an assistant makes on your behalf, covering which tool was used, the parameters supplied, the outcome and how long it took. These records are retained for 90 days and are used for security, troubleshooting and abuse prevention. We do not use your store data to train AI models.

Withdrawing Access

You can disconnect an assistant at any time from Settings → AI Data Connector. Access ends immediately and every access token issued to that connection is revoked. Access also ends if your TSeller subscription lapses. Disconnecting does not delete information already transferred to an AI provider; you must request that from the provider directly.

Shopify App

TSeller is also available as an app in the Shopify App Store. When you install it, Shopify asks you to approve access to your store. We use that access only to show your sales, orders, products and profitability in TSeller, and to make the price and stock changes you save.

What We Access

• ■Store Details: Store name, domain, currency and Shopify plan
• ■Products & Inventory: Products, variants, prices, stock levels and locations
• ■Orders & Returns: Order history, totals, line items, order status and returns
• ■Changes You Make: Product prices, compare-at prices and stock levels, updated in Shopify only when you save an edit or when a stock sync you set up in TSeller runs
• ■Customer Information: We don't request your customers' names, email addresses, phone numbers or addresses, and we don't store any customer personal information

How We Handle It

Order and product data is read from Shopify when you open TSeller and isn't stored on our servers. The access token Shopify issues to us is kept on our servers only. It is never sent to your browser, and it expires and renews automatically. TSeller changes prices, compare-at prices and stock levels only when you save an edit or when a stock sync you set up runs, and never changes your orders. If you connect a stock source such as a Google Sheet or Cin7 Core, TSeller reads its stock levels to update Shopify and keeps any access key encrypted. Anything you add yourself, such as product costs, is saved to your TSeller account.

Uninstalling

When you uninstall the app, we delete its access token immediately. When Shopify asks us to erase your store's data, 48 hours after you uninstall, we delete your store's app connection. If one of your customers asks for their data or asks for it to be deleted, we have nothing to return or delete, because we don't store customer personal information. To close your TSeller account, contact support@blockseven.info.

WhatsApp Notifications

On the Agentic plan you can connect a WhatsApp number to receive TSeller reports and alerts, such as your morning sales briefing, restock suggestions, Buy Box alerts, payouts and your month in review. WhatsApp is off unless you connect a number yourself, verify it with a code we send to it, and allow messages.

What We Keep

• ■Your Numbers: The WhatsApp numbers you connect (up to three), when each was verified and who in your account connected it
• ■Your Settings: Which messages you want, when, and which numbers receive them
• ■Delivery Records: Whether each message was sent, delivered, read or failed, kept for 30 days, and a record of each message we sent so its buttons work, kept for about 35 days
• ■Opt-Out Status: Whether a number has replied STOP, and when it last messaged us, which decides what WhatsApp lets us send
• ■Usage: How many messages your account received this month (the limit is 400)

If TSeller AI is on for your account, it answers questions you type to us from a connected number. Your message and the answer are saved as a TSeller AI conversation, which you can see and delete in TSeller AI. We delete the message from our queue once it has been answered, and anything left unanswered within 30 days. We don't store the text of other messages. Our WhatsApp number is also used by the TSeller support team, so a member of our team may read your messages in order to help you.

Who Delivers the Messages

Messages are sent through the WhatsApp Business Platform run by Meta Platforms, using 360dialog GmbH (Germany) as our WhatsApp business solution provider. The messages contain your store information, such as sales, profit, stock, Buy Box positions, ad results, payouts, orders and shipments, and can include documents such as Takealot statements, tax invoices and shipping labels. Meta and 360dialog process them outside South Africa. We rely on the consent you give when you allow messages as the basis for that transfer under section 72 of the Protection of Personal Information Act. Once a message is delivered it is also governed by WhatsApp's own terms and privacy policy.

Actions You Take in WhatsApp

Some messages have buttons. If you tap Create shipment or Confirm shipment, TSeller creates or confirms replenishment shipments in your Takealot Seller Portal on your behalf, using the TSeller agent you connected. Confirming a shipment is final with Takealot. These changes are made under your seller account, and you remain responsible for them. When TSeller AI prepares a change, nothing happens until you tap Apply.

Stopping Messages

Reply STOP at any time and we stop messaging that number; reply START to resume. You can also turn messages off in Settings → App Notifications, or remove a number in Settings → AI Data Connector. Messages stop automatically if your Agentic plan ends.

Data Usage

How We Use Your Data

TSeller collects and uses your data exclusively to provide, maintain, and improve our services. We are committed to transparency in how your information is utilized and ensure that all data processing serves legitimate business purposes while respecting your privacy rights.

Service Delivery & Operations

• ■Account Management: Your email, name, and authentication credentials are used to create and maintain your TSeller account, enabling secure access across all platforms (web, iOS, and Android).
• ■Takealot Integration: Your Takealot API key is used to securely connect to your seller account, retrieve your sales data, inventory information, orders, offers, and performance metrics in real-time.
• ■Automation Services: Product information, pricing data, and inventory levels are processed to enable automated repricing, stock reconciliation, and offer management features.
• ■Analytics & Reporting: Sales transactions, revenue data, and product performance metrics are analyzed to generate insights, charts, and reports that help you understand your business performance.

Business Intelligence

• ■Buy Box Tracking: Product pricing, competitor data, and market positioning information is used to provide intelligent repricing recommendations and help you win the Buy Box.
• ■Inventory Management: Stock levels, leadtime information, and replenishment data are processed to help prevent stockouts and optimize your inventory operations.
• ■Financial Operations: Transaction data, VAT numbers, and business details are used to generate invoices, track payments, and maintain accurate financial records.

Communication & Support

• ■Notifications: Email and phone contact information is used to send important updates about your account, sales alerts, inventory warnings, and critical system notifications.
• ■Customer Support: Your contact details and account information help our support team provide personalized assistance and resolve technical issues efficiently.
• ■Service Updates: We may use your email to inform you about new features, product improvements, service changes, or important policy updates.

Platform Improvement

• ■Usage Analytics: Device information, app usage patterns, and feature interaction data help us understand how users engage with TSeller and identify areas for improvement.
• ■Error Detection: Crash reports and error logs collected through Firebase Crashlytics enable us to identify and fix technical issues, ensuring platform stability.
• ■Performance Optimization: Technical metrics such as load times, response rates, and system performance data are analyzed to optimize speed and reliability.

Data Processing Principles

• ■Purpose Limitation: We only use your data for the specific purposes outlined in this policy and do not repurpose it for unrelated activities.
• ■Data Minimization: We collect only the information necessary to provide our services and do not gather excessive or irrelevant data.
• ■No Third-Party Marketing: TSeller does not sell, rent, or share your data with third-party marketers or advertisers. Your information remains private and is used solely to deliver our services.
• ■No Cross-Platform Tracking: We do not track your activities across other websites or applications. Data collection is limited to your interactions within TSeller platforms.

Data Retention

We retain your personal data only as long as necessary to fulfill the purposes outlined in this Privacy Policy or as required by applicable laws and regulations. Our retention practices include:

• ■Active Accounts: Data is retained for the duration of your active subscription and as long as you continue using TSeller services.
• ■Closed Accounts: After account closure, personal data is retained for 30 days to allow for account recovery, then securely deleted or anonymized.
• ■Legal Requirements: Certain financial and transactional records may be retained longer to comply with tax laws, accounting regulations, or legal obligations.
• ■Anonymized Data: Aggregated and anonymized analytics data may be retained indefinitely for statistical analysis and service improvement purposes.

Security

Our Commitment to Security

At TSeller, protecting your data is our highest priority. We implement comprehensive security measures across all platforms (web, iOS, and Android) to safeguard your personal information, business data, and API credentials against unauthorized access, disclosure, alteration, or destruction.

Technical Security Measures

• ■Encryption in Transit: All data transmitted between your device and TSeller servers is encrypted using industry-standard TLS/SSL protocols (HTTPS), protecting information from interception during transmission.
• ■Encryption at Rest: Sensitive data, including API keys and authentication tokens, are encrypted using AES-256 encryption standards when stored in our databases, ensuring protection even if physical storage is compromised.
• ■Secure Authentication: We use Firebase Authentication with secure token-based authentication systems, multi-factor authentication options, and session management to verify user identity and prevent unauthorized access.
• ■API Key Protection: Your Takealot API keys are encrypted, never exposed in logs or error messages, and are only used server-side to communicate with Takealot's systems on your behalf.
• ■Secure Infrastructure: TSeller is hosted on Google Cloud Platform (Firebase), which provides enterprise-grade security with multiple redundancy layers, DDoS protection, and continuous security monitoring.

Access Controls

• ■Role-Based Access: Internal access to systems and data is strictly controlled based on job function and necessity, following the principle of least privilege.
• ■Authentication Requirements: All team members with system access must use strong passwords, multi-factor authentication, and secure devices to access TSeller infrastructure.
• ■Audit Logging: All access to sensitive data and system changes are logged and regularly reviewed to detect and investigate any suspicious activity.
• ■Data Isolation: Each user's data is logically separated in our database systems, ensuring that your information cannot be accessed by other TSeller users.

Application Security

• ■Secure Development: Our development team follows secure coding practices, conducts code reviews, and uses automated security scanning tools to identify and fix vulnerabilities.
• ■Regular Updates: We continuously update TSeller applications and dependencies to patch security vulnerabilities and incorporate the latest security enhancements.
• ■Input Validation: All user inputs are validated and sanitized to prevent injection attacks, cross-site scripting (XSS), and other common security threats.
• ■Error Handling: Security-sensitive information is never exposed in error messages or logs, preventing information leakage that could assist attackers.

Network Security

• ■Firewall Protection: Our infrastructure is protected by enterprise-grade firewalls that filter malicious traffic and prevent unauthorized network access.
• ■DDoS Mitigation: Google Cloud Platform provides automatic DDoS protection to ensure service availability even during large-scale attacks.
• ■Intrusion Detection: We employ monitoring systems that detect and alert us to suspicious network activity, enabling rapid response to potential threats.

Data Backup & Recovery

• ■Automated Backups: Critical data is automatically backed up multiple times daily to geographically distributed data centers, ensuring data durability and availability.
• ■Disaster Recovery: We maintain comprehensive disaster recovery plans and regularly test our ability to restore services and data in the event of a catastrophic failure.
• ■Redundancy: Our infrastructure includes redundant systems across multiple availability zones to ensure continuous service even if individual components fail.

Organizational Security

• ■Security Training: All team members receive regular security awareness training and are educated on best practices for data protection and privacy.
• ■Confidentiality Agreements: Every team member with access to user data signs strict confidentiality agreements and understands their legal obligations to protect your information.
• ■Incident Response: We maintain a documented incident response plan that defines procedures for detecting, investigating, and responding to security breaches or data incidents.
• ■Vendor Management: Third-party service providers (such as Firebase) are carefully evaluated for their security practices and must meet our security standards.

Mobile Platform Security

• ■iOS Security: Our iOS application leverages Apple's security features including Keychain for secure credential storage, App Transport Security for network communications, and data protection APIs for file encryption.
• ■Android Security: Our Android application uses the Android Keystore system for cryptographic key storage, enforces TLS/SSL for all network traffic, and implements encrypted SharedPreferences for sensitive data.
• ■App Store Compliance: Both iOS and Android applications undergo security reviews by Apple and Google respectively, ensuring compliance with platform security guidelines.

Your Security Responsibilities

While we implement robust security measures, protecting your account also requires your cooperation:

• ■Strong Passwords: Use unique, complex passwords for your TSeller account and avoid reusing passwords from other services.
• ■Account Security: Never share your login credentials or API keys with others. If you suspect unauthorized access, change your password immediately and contact our support team.
• ■Device Security: Keep your devices updated with the latest security patches, use screen locks, and avoid accessing TSeller from public or untrusted networks without VPN protection.
• ■Phishing Awareness: Be cautious of emails or messages claiming to be from TSeller. We will never ask for your password or API key via email. Always verify communications by contacting us directly.

Security Limitations

While we implement comprehensive security measures, it's important to understand that no system can guarantee absolute security:

• ■Internet Risks: Data transmission over the Internet inherently carries risks. While we use encryption, determined attackers with significant resources might potentially intercept communications.
• ■Evolving Threats: The security landscape constantly evolves with new vulnerabilities and attack methods. We continuously adapt our security measures but cannot prevent all possible future threats.
• ■Third-Party Dependencies: TSeller relies on third-party services like Firebase and Takealot. While these providers maintain high security standards, we cannot control their security practices completely.

Breach Notification

In the unlikely event of a data breach that affects your personal information, we will notify you promptly via email and provide details about the incident, the data affected, steps we're taking to address the breach, and recommendations for protecting your account. We will also notify relevant regulatory authorities as required by applicable data protection laws.

Your Rights

Depending on your jurisdiction, you may have rights regarding your personal data, including:

• ■Accessing and updating your information
• ■Requesting deletion or correction of your data
• ■Objecting to or restricting the processing of your data
• ■Withdrawing consent for data processing

To exercise these rights, please contact us using the details provided below.

Contact Us

If you have any questions or concerns regarding this Privacy Policy or our privacy practices, please contact us at support@blockseven.info or 060 616 2144.