Privacy Policy

SellerScale (sellerscale.ai). Version 1.1. Effective date: October 2, 2026.

English translation provided for convenience. Only the French version is legally binding.

This privacy policy is published by Axiom Systems Lab LLC, a limited liability company incorporated under the law of Wyoming, whose registered office is located at 30 N Gould St, Ste R, Sheridan, WY 82801, United States, registered with the Wyoming Secretary of State under number 2026-002039014 (hereinafter "the Publisher"). The publication director is Christophe Halin.

It explains what personal data the Publisher collects when you use SellerScale, why it collects that data, how long it keeps it, who it shares it with and what your rights are. It is written to be understood without legal knowledge.

Article 1. Data controller

The Publisher is the controller of your personal data within the meaning of the General Data Protection Regulation (GDPR, RGPD in French) and of the UK GDPR.

The Publisher is established in the United States. Because it offers its services to persons located in the European Union and in the United Kingdom, it applies the GDPR and the UK GDPR under Article 3(2) of each of them, which makes them applicable to a controller established outside those territories.

For any question relating to your personal data, you may use the contact form on the Site: sellerscale.ai/contact.

Article 2. Scope

This policy applies to all processing of personal data carried out in connection with:

• the sellerscale.ai site and the waiting list (waitlist);
• the SellerScale application (Free plan, free trial and paid Subscriptions);
• email communications (transactional and marketing);
• customer support.

It covers the GDPR (users in the European Union), the UK GDPR (United Kingdom), as well as specific local regimes detailed in Articles 9 to 11 (Quebec, Switzerland, Morocco).

Article 3. Data collected, purposes, legal bases and retention periods

The Publisher collects only the data necessary for the operation of the Service. The table below sets out each category of data, the purpose pursued, the legal basis and the retention period.

Important clarifications regarding Amazon data:

• access is strictly read-only: the Publisher cannot carry out any action on your seller account;
• this data is never resold or shared with third parties;
• the connection can be revoked at any time from the settings of your Account, without justification;
• the availability of this feature depends on Amazon's services.

At the end of the periods indicated, the data is deleted or irreversibly anonymized. Certain data may be kept longer in intermediate archiving where a legal obligation requires it or for the handling of an ongoing dispute, for the duration of the applicable limitation period.

Article 4. Recipients and processors

Your data is accessible only to the persons who need it in order to perform the Service. The Publisher uses the following processors, each bound by a data processing agreement compliant with Article 28 of the GDPR (DPA):

The Publisher does not sell your personal data to anyone. Your data may also be disclosed to the competent authorities where the law so requires.

Article 5. Data transfers outside the European Union

To the United States, by the Publisher itself. As the Publisher is established in the United States, the data of users in the European Union and in the United Kingdom is transferred there. The United States is not covered by a general adequacy decision: these transfers are governed by the standard contractual clauses of the European Commission, supplemented where necessary by additional measures, and, for transfers from the United Kingdom, by the UK Addendum or the International Data Transfer Agreement of the ICO.

To the United States, by the processors. Some processors (in particular Clerk, Stripe, Vercel, Neon, Microsoft, Resend) may process data in the United States. Depending on the provider, these transfers rely:

• on the Data Privacy Framework (DPF) where the provider is certified under it; or
• on the standard contractual clauses of the European Commission, supplemented where necessary by additional measures.

For persons located in the United Kingdom, these same transfers rely on the UK extension of the Data Privacy Framework or on the International Data Transfer Agreement / UK Addendum of the ICO.

You may obtain a copy of the applicable safeguards through the contact form on the Site.

Article 6. Your rights

In accordance with the GDPR and the UK GDPR, you have the following rights over your personal data:

• right of access: to obtain a copy of the data the Publisher holds about you;
• right to rectification: to have inaccurate or incomplete data corrected;
• right to erasure: to request the deletion of your data, within the limits of legal retention obligations;
• right to restriction: to request the temporary freezing of the use of your data;
• right to portability: to receive your data in a structured and commonly used format;
• right to object: to object to processing based on legitimate interest, and at any time and without reason to direct marketing;
• right to withdraw your consent at any time, without calling into question the processing already carried out;
• post-mortem directives: to set directives on what becomes of your data after your death (for users governed by French law).

How to exercise your rights. Use the contact form on the Site (sellerscale.ai/contact), stating the right you wish to exercise. The Publisher will reply within 1 month, which may be extended by two months for complex requests (you would then be informed of this). Proof of identity may be requested where there is reasonable doubt as to the identity of the person making the request. The exercise of your rights is free of charge.

Unsubscribing from marketing emails. Every marketing email contains a 1-click unsubscribe link. Unsubscribing does not concern the transactional emails necessary for the operation of your Account (invoices, security notifications).

Article 7. Complaint to a supervisory authority

If you consider that your rights are not respected, you may lodge a complaint with the supervisory authority of your country of residence. In France: the CNIL (Commission nationale de l'informatique et des libertés, the French data protection authority), 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, www.cnil.fr. In the United Kingdom: the ICO (Information Commissioner's Office), www.ico.org.uk. We nevertheless invite you to use the contact form on the Site first: most requests are settled directly.

Article 8. Minors

SellerScale is reserved for persons of full age. The Service is not intended for persons under 18 and the Publisher does not knowingly collect data concerning them. If you believe that a minor has created an Account, report it through the contact form on the Site: the Account and the associated data will be deleted.

Article 9. Users located in Quebec (Law 25)

For users residing in Quebec, the Publisher applies the Act to modernize legislative provisions as regards the protection of personal information (Loi 25, Law 25) and the Act respecting the protection of personal information in the private sector.

• Person in charge of the protection of personal information: the officer of the Publisher (a function exercised by default in accordance with Law 25), who can be reached through the contact form on the Site.
• You have the rights of access, rectification and withdrawal of consent and, under the conditions provided for by law, the right to the cessation of dissemination, to de-indexing and to the portability of your personal information.
• Your personal information is communicated outside Quebec (United States, European Union) under the conditions described in Articles 4 and 5, after assessment of the protections offered.
• In the event of a persisting disagreement, you may refer the matter to the Commission d'accès à l'information du Québec (CAI), www.cai.gouv.qc.ca.

Article 10. Users located in Switzerland (nLPD)

For users residing in Switzerland, the Publisher applies the new Federal Act on Data Protection (nLPD), in force since September 1, 2023.

• You have rights equivalent to those described in Article 6: access, rectification, erasure, delivery or transfer of your data, objection.
• Transfers of data abroad are made to countries offering an adequate level of protection within the meaning of Swiss law or are governed by appropriate safeguards (standard contractual clauses).
• You may exercise your rights through the contact form on the Site and, in the event of difficulty, contact the Préposé fédéral à la protection des données et à la transparence (PFPDT, the Swiss federal data protection and information commissioner), www.edoeb.admin.ch.

Article 11. Users located in Morocco (law 09-08)

For users residing in Morocco, the Publisher takes into account law no. 09-08 on the protection of individuals with regard to the processing of personal data.

• You have the rights of access, rectification and objection over your data, which you may exercise through the contact form on the Site.
• You may also contact the Commission nationale de contrôle de la protection des données à caractère personnel (CNDP, the Moroccan data protection authority), www.cndp.ma.

Article 12. Data security

The Publisher implements appropriate technical and organizational measures to protect your data against loss, unauthorized access, alteration and disclosure, in particular:

• encryption of data in transit (TLS) and at rest;
• strict access control: only authorized persons access the data, according to the principle of least privilege;
• secure authentication delegated to a specialized provider (Clerk); no bank card data is stored by the Publisher (payments processed by Stripe);
• logging of accesses and regular backups;
• security reviews are carried out regularly on the application.

In the event of a data breach presenting a risk to your rights and freedoms, the Publisher will notify the competent supervisory authority and, where the law requires it, the persons concerned, within the legal time limits.

Article 13. Cookies and trackers

The site and the application use cookies and similar technologies, in particular cookies strictly necessary for the operation of the Service and audience measurement tools. The measurement tools are configured in compliance with the applicable consent rules: non-essential trackers are placed only with your agreement. A dedicated cookie policy, detailing each tracker, its purpose and its duration, is accessible at the address sellerscale.ai/cookies as soon as it is published. You may at any time set your choices from your browser or from the cookie management module.

Article 14. Change of data controller

As part of the development of its group, the Publisher may be led to transfer the responsibility for the processing to an entity of the same group or to an entity that succeeds it. In that case:

• you will be informed in advance by email of the identity of the new data controller and of the effective date;
• your data will remain protected by commitments at least equivalent to those of this policy;
• any international transfers will remain governed by the safeguards described in Article 5;
• your rights described in Article 6 will remain unchanged.

Article 15. Amendments to this policy

The Publisher may amend this policy to take account of legal, technical or service developments. Any substantial amendment will be notified to you by email or by a notice visible in the application before it comes into force. The version in force, with its date, is permanently accessible on sellerscale.ai.

Article 16. Contact

For any question relating to this policy or to your personal data:

• Contact form: sellerscale.ai/contact
• Post: Axiom Systems Lab LLC, 30 N Gould St, Ste R, Sheridan, WY 82801, United States
• Person in charge of the protection of personal information (Quebec): the officer of the Publisher

Version 1.1. Effective date: October 2, 2026.