This policy explains how Octopus Networks ("we"), the provider of Octopus Seller (https://seller.octopus-networks.com), collects, uses, protects and deletes information. It applies to the web application and to the optional Odoo connector.
1. Information we collect
- Account information: business name, e-mail address and, optionally, a mobile number.
- Amazon Information, only after you authorize Octopus Seller in Seller Central: order identifiers, status, dates, items, quantities and amounts; listings, prices and inventory; settled financial transactions and fees; and marketplace participation.
- Information you enter: product unit costs and product specifications used by the content writer.
- Technical data: sign-in times and IP addresses, used for security (rate limiting and abuse prevention).
2. Information we do not collect
We do not request any restricted role and do not collect or store Amazon buyers' personally identifiable information (names, shipping addresses, e-mail addresses or phone numbers). If an API response contains such fields, they are removed before storage. We never ask for your Amazon password.
3. How we use information
Only to provide the service you requested: profit and inventory reporting, the daily report, review requests through Amazon's Solicitations API when you turn them on, listing content drafts and publishing when you approve each change, and exporting your orders and settlements to your own Odoo when you connect it. We do not sell your data, use it for advertising, or combine it with data from other sellers.
4. Sharing and sub-processors
- Anthropic (Claude API): only when you use the content writer, we send that product's current listing text and the specifications you typed, over HTTPS, to generate a draft. No buyer information and no credentials are sent.
- Paymob: processes subscription payments. It receives your business name, e-mail, phone and the amount, never Amazon Information. Card and wallet details are entered on Paymob's page and never reach our servers.
- Cloudflare: TLS proxy in front of the web application (data in transit only).
- Hosting provider: runs the servers that store the database. Backups are encrypted (AES-256) before they leave the server.
- Your own Odoo: only if you create an API key for it; you can revoke the key at any time.
We disclose information to authorities only when required by law.
5. Security
- All traffic is encrypted in transit (HTTPS/TLS); server administration uses key-only SSH and an encrypted private network.
- Amazon authorization (refresh) tokens are encrypted at rest with AES-256-GCM; API keys are stored only as SHA-256 hashes and passwords as bcrypt hashes.
- Every record is isolated per seller account, and each seller can only access their own data.
- Firewalls, intrusion detection, anti-malware scanning and automatic security updates run on our servers; administrator accounts require multi-factor authentication.
- We keep an incident response plan. If a security incident affects Amazon Information we notify Amazon ([email protected]) and affected sellers within 24 hours of detection.
6. Retention and deletion
We keep your data while your account is active. You can disconnect Octopus Seller at any time in Seller Central (Apps and Services, then Manage Your Apps) and delete your account yourself in Settings (Delete account), which removes your account and all Amazon Information immediately. If you ask us by e-mail instead, we delete it within 30 days of the request, and within 30 days after an account has been closed, unless the law requires us to keep specific records.
7. Your rights
You can ask for a copy of your data, a correction, or deletion. Write to us from the e-mail on your account.
8. Changes
We will post changes on this page and update the date above. Material changes are announced in the dashboard.
9. Contact
Octopus Networks, Egypt · [email protected] · +20 155 055 5525