Privacy policy

Last updated: 12 October 2026

Sellnaut is operated by ADAK Fintech Ltd, a company licensed in the Dubai International Financial Centre (DIFC), Office 407, Al Khor Building, Baniyas Rd, Deira, Dubai, U.A.E. ("we", "us"). This policy explains what we collect, why, and the choices you have. We follow the DIFC Data Protection Law (DIFC Law No. 5 of 2020) and, where it applies, the EU/UK GDPR.

What we collect

  • Account data: your name, e-mail address and a scrambled (hashed) form of your password. We never store your password itself.
  • Amazon and noon data you connect: listings, orders, fees, refunds, inventory, advertising and payout data, read through the official Amazon Selling Partner API, Amazon Ads API and noon's API with the permission you grant. We do not receive your Seller Central password.
  • Data you enter: product costs, expenses, settings and messages to the agent.
  • Technical data: IP address, browser type, sign-in times and security events, kept to protect your account.
  • Payment data: handled by our payment provider (Stripe). We receive the payment status, never your full card number.

Why we use it

  • To run the service: dashboards, profit calculations, the AI agent's recommendations and the changes you authorise.
  • To keep your account secure and prevent abuse.
  • To send service e-mails (alerts you choose, password resets, receipts). Marketing e-mails only if you subscribed; every one has an unsubscribe link.
  • To meet legal, tax and accounting obligations.

AI processing

To analyse your store, relevant excerpts of your store data are sent to our AI provider (OpenAI or Anthropic) under contracts that do not allow them to train their models on your data. Only what a task needs is sent.

Sharing

We do not sell your data. We share it only with providers that help us run Sellnaut (hosting, backups, e-mail, payments, AI), under confidentiality and data-protection terms, or when the law requires it.

Security

Data travels encrypted (HTTPS). Amazon/noon access tokens and other secrets are encrypted at rest (AES-256-GCM). Backups are encrypted. Accounts can use two-step verification. Access by our staff is limited and logged.

How long we keep data

While your account is open. If you delete your account, sign-in and Amazon access stop at once and your data is erased after 30 days; encrypted backups roll off within 12 months.

Your rights

You can access, correct, export (Settings → Security and your data → Export) and delete your data, object to processing, and complain to the DIFC Commissioner of Data Protection. Contact us at [email protected].

Cookies

We use only the cookies needed to keep you signed in and remember your selected store. See the cookie policy.

Changes

We will tell you by e-mail or in the app before material changes take effect.