How we protect your account and data

Access to your Seller Central account

• Each team member has their own named user, added by you in User Permissions. We never share logins.
• Every user signs in with two step verification.
• We request the smallest set of permissions the agreed tasks need, and we tell you in writing which ones and why.
• We never request access to payments, disbursements, bank details, tax settings or user management.
• When a team member leaves Xcelerate or changes role, we ask you to remove their access the same day.
• You can remove our access at any time from User Permissions.

Amazon customer information

We do not download, copy or keep the personal information of your customers, such as names, addresses, phone numbers or email addresses. If a task needs us to look at an order, we view it inside Seller Central only. We never use customer information to contact shoppers outside Amazon's own messaging tools, for marketing, or for any purpose other than the task you asked for.

Your business data

• We use your data only to deliver the services in our agreement with you.
• Working files such as reports and listing drafts are stored in our company Google Workspace, with access limited to the people working on your account.
• Data is encrypted in transit and at rest by our storage provider.
• We never sell or share your data with third parties, except where the law requires it.

Retention and deletion

We keep working files for as long as we work together. Within 30 days of the end of our engagement we delete files that contain your account data and confirm this to you in writing, unless the law requires us to keep a record for longer.

Our team and devices

• Team members agree in writing to keep client information confidential.
• Work devices use screen locks, disk encryption and up to date security software.
• Passwords are stored in a password manager, never in documents or chats.
• Access to client accounts is reviewed every three months.

If something goes wrong

If we detect or suspect a security incident affecting your account or data, we contain it, notify you, and report it to Amazon at security@amazon.com within 24 hours of detection. We then investigate the cause and tell you what we changed to prevent it happening again.

Policies we follow

We follow Amazon's Acceptable Use Policy and Data Protection Policy for service providers, and applicable data protection law, including India's Digital Personal Data Protection Act 2023 and, for clients in Europe and the UK, the GDPR. Read our privacy policy for how we handle information from this website.

Questions

Email support@xcelerate.in with any question about how we handle your data.