Central Seller
PTEN

Privacy Policy

Last updated: September 29, 2026

How Central Seller collects, uses, stores and deletes personal data, in accordance with the Brazilian General Data Protection Law (LGPD, Law 13.709/2018).

1. Who we are

Central Seller is a management system for sellers on online marketplaces (such as Mercado Livre, Shopee and TikTok Shop), operated by Central Seller Gestão e Integração Ltda., CNPJ 64.113.891/0001-75, Rua Tonelero, 33, Vila Ipojuca, São Paulo/SP, 05056-000, Brazil. For the account data of our users we act as controller; for the data of the stores and their buyers that a seller connects to the system we act as processor on behalf of that seller.

2. Data we process

  • Account data: name, e-mail, encrypted password, company name and, optionally, CNPJ; the companies and stores each user belongs to and their role.
  • Store data received from the marketplaces, only after the seller authorizes the connection: listings, prices, stock, promotions, reputation, claims, returns, questions and post-sale messages. Orders may contain buyer data such as name or nickname and shipping information.
  • Data from the seller's ERP, when connected: warehouses, stock and product cost.
  • Technical data: session cookie, access logs kept by our hosting providers and, if the user enables browser notifications, the notification subscription of that device.

We do not sell personal data, we do not use it for advertising and we do not use tracking or advertising cookies.

3. Why we use it and legal basis

  • To provide the service contracted by the seller: consolidate sales, stock, promotions, reputation and customer service in one panel (performance of contract, LGPD art. 7, V).
  • To send, only after approval by the seller (or by an automatic rule the seller turned on), replies to buyer questions, messages and claims (performance of contract).
  • To keep the system secure, prevent fraud and investigate incidents (legitimate interest, art. 7, IX, and art. 10).
  • To comply with legal obligations (art. 7, II).

4. Who we share data with

Only with the providers needed to run the service, bound by confidentiality and security obligations:

  • Supabase (database, authentication and encrypted vault), hosted in São Paulo, Brazil (AWS sa-east-1).
  • Vercel (web panel and API gateway), functions running in São Paulo, Brazil (gru1).
  • n8n Cloud (integration workflows that call the marketplace APIs), hosted in the European Union.
  • The marketplaces and ERP the seller connected, to read data and, when approved, send replies.
  • Browser push services (Google, Apple, Mozilla, Microsoft), which deliver notifications without seeing store data.
  • The AI assistant chosen by the user (for example Claude, ChatGPT or Gemini), if the user connects it to Central Seller through MCP. The assistant receives only the data the user asks for, with the user's own access key, and its use is governed by that provider's terms. Central Seller has no built-in AI.

5. International transfers

Data is stored in Brazil. Integration workflows run in the European Union, a region with an adequate level of protection, and some providers may process data in other countries under standard contractual safeguards (LGPD art. 33).

6. Retention and deletion

  • Store data is kept while the store is connected and the account is active.
  • Disconnecting a store deletes its marketplace access tokens immediately.
  • Deleting a store permanently removes all of its data (orders, listings, messages, claims and the rest).
  • Real-time notification queues and AI summaries are deleted automatically after 30 days.
  • At the end of the contract we delete the data of the seller's stores, except what we must keep by law.

7. Security

Data is encrypted in transit and at rest, marketplace tokens are kept in an encrypted vault and each user can only access the stores of their own company. Details in our Security Policy.

8. Your rights

Under the LGPD, data subjects may request confirmation of processing, access, correction, anonymization or deletion, portability, information about sharing and review of consent. Requests about buyer data are handled together with the seller who controls it. Write to centralseller.adm@gmail.com; we answer within 15 days. You may also file a complaint with the Brazilian Data Protection Authority (ANPD).

9. Data Protection Officer

Our Data Protection Officer (Encarregado) can be reached at centralseller.adm@gmail.com.

10. Changes

We will update this policy whenever our processing changes and show the new date at the top of this page. Relevant changes are also communicated in the panel.