Personal data

Privacy policy

How Elevate Seller collects, uses, retains and protects your personal data.

Last updated: October 15, 2026

This English version is provided for convenience. In the event of any discrepancy, the French version prevails.

1. Who we are

Elevate Seller is a SaaS application for Amazon sellers. It provides product analysis, offer and market price tracking, and recommendations designed to support business decisions.

The service is published by:

Company name: DOVEAIA
Legal form: Société par actions simplifiée (SAS, French simplified joint-stock company) with a share capital of €1,000
Registered office: Parc Lorans — Bâtiment 1G, Rue Jean-Marie Huchet, 35000 Rennes, France
SIREN number: 101 035 582 (Rennes Trade and Companies Register)
Contact: [email protected]
Personal data contact: [email protected]

In this policy, “Elevate Seller”, “we” or “our service” refers to the publisher of the application.

2. Purpose of this policy

This policy explains how we collect, use, retain and protect personal data when you visit our website, create an account or use Elevate Seller.

We are committed to limiting the data we collect to what is necessary for the operation of the service, its security and the improvement of its features.

3. Data we collect

Depending on the features you use, we may process the following categories of data.

3.1. Account data

When you create and use an account, we may collect:

First and last name, where applicable.
Business email address.
Internal account identifiers.
Information about your organization or company.
Application preferences and settings.
Information required to manage your subscription, where applicable.

Passwords, where used, must be protected using secure storage practices.

3.2. Data from Amazon SP-API

When you connect your Amazon seller account to Elevate Seller, we may process the data permitted by the permissions you grant and required by the features you enable, including:

Technical identifiers of the seller account and marketplace.
Catalog information and product identifiers, including ASINs.
Prices, offers, availability and competitive data accessible through the authorized APIs.
Information required to calculate margins, estimated fees, return on investment and recommendations.
Performance or sales data, only if the enabled features and granted permissions require it.

We only request the permissions needed for the features we offer. We do not access data that the granted permissions do not give us access to.

The data actually collected depends on the available features and the permissions granted by the user.

3.3. Market data from Keepa

To enrich product analysis, Elevate Seller queries the Keepa API (Keepa GmbH, Germany), a provider of Amazon market data: price history, sales rank, offers, Buy Box and catalog information.

Only product identifiers (ASINs) and marketplace identifiers are sent to Keepa. No personal data, and no data obtained from your seller account through Amazon SP-API, is shared with Keepa.

3.4. Technical data and logs

To operate and secure the service, we may collect:

IP address and technical connection information.
Date and time of connections.
Browser type and device information.
Error logs and technical events.
History of operations required for diagnostics and security.

3.5. Communications and support

When you contact us, we process the information you provide in order to answer your requests, provide support and track incidents.

When you join the waitlist on elevateseller.com, we collect your name and email address in order to inform you when access opens and when the service launches.

To protect this form against abuse, each request is checked by Cloudflare Turnstile, an anti-bot service, then automatically analyzed by an artificial intelligence model hosted by Cloudflare (Workers AI) to discard obviously abusive sign-ups. This analysis has no legal effect on you: it is used solely to filter spam.

Accepted sign-ups are recorded in our customer relationship management tool (HubSpot) and notified to us by email (Resend). You can unsubscribe at any time by writing to [email protected].

3.7. Cookies and similar technologies

The website may use cookies or similar technologies that are strictly necessary for its operation and security.

Any non-essential cookie, in particular for audience measurement or advertising where used, is subject to the applicable consent rules. User choices are respected in accordance with the regulations.

At present, elevateseller.com does not set any audience measurement or advertising cookies. Only the Cloudflare Turnstile anti-bot service, which is strictly necessary to secure the sign-up form, may use similar technologies.

4. Purposes and legal bases

We use data for the following purposes:

Purpose	Legal basis
Waitlist sign-up and launch information	Consent
Automated filtering of abusive sign-ups	Legitimate interest (form security)
Account creation and management	Performance of the contract
Provision of analysis and tracking features	Performance of the contract
Connection to and exchanges with Amazon SP-API	Performance of the contract and granted permissions, depending on the processing
Subscription management and billing	Performance of the contract and legal obligations
Service security and abuse prevention	Legitimate interest, subject to a balancing test
Support and handling of requests	Performance of the contract or legitimate interest, as applicable
Accounting and legal obligations	Legal obligation
Non-essential cookies	Consent, where required

Each processing activity is associated with an appropriate legal basis. Where consent is required, it can be withdrawn at any time.

5. Use of Amazon data

Data obtained through Amazon SP-API is used solely within the authorized features of Elevate Seller and in accordance with Amazon’s applicable terms.

It may be used in particular to track prices and offers, analyze products and calculate decision-support indicators.

We do not use Amazon data for purposes incompatible with those authorized by Amazon. We do not sell data obtained through these APIs.

The data is not used to train general-purpose artificial intelligence models, unless such use is expressly permitted by the applicable rules and clearly disclosed to users.

Data may be accessed, to the extent necessary, by the following categories of recipients:

Authorized staff responsible for development, operations and support.
Hosting and infrastructure providers.
Technical providers required for the operation of the application.
Payment providers, if a payment system is used.
Monitoring and technical logging providers, where applicable.
Competent authorities where required by law.

Providers that process personal data on our behalf are bound by contract and must comply with the applicable confidentiality and data protection obligations.

We do not sell users’ personal data.

7. Hosting and international transfers

Application data is hosted in the European Union by the following hosting providers:

Microsoft Azure — Microsoft Ireland Operations Limited, France Central region (France).
netcup — netcup GmbH, Daimlerstraße 25, 76185 Karlsruhe (Germany), Nuremberg data center (Germany).

Some technical providers may process data from other countries. Where personal data is transferred outside the European Economic Area, we put in place the safeguards required by the applicable regulations.

Our other technical providers and their processing locations are:

Cloudflare, Inc. (United States) — hosting of elevateseller.com, anti-bot protection (Turnstile) and automated filtering of abusive sign-ups (Workers AI).
Keepa GmbH (Germany, European Union) — provision of market data on Amazon products (price history, sales rank, offers). No personal data is sent to Keepa.
HubSpot Ireland Limited (Ireland, European Union) — customer relationship and sign-up management.
Resend (United States) — sending of notification emails.

Our US-based providers, Cloudflare, Inc. and Resend, are certified under the EU-U.S. Data Privacy Framework, on which these transfers rely. Their data processing agreements also incorporate the European Commission’s Standard Contractual Clauses.

8. Retention periods

We retain data for as long as necessary for the purposes pursued, then delete or anonymize it, unless a legal retention obligation applies.

Retention periods are as follows:

Account data: for as long as you use the service, then deleted or anonymized within 30 days of account closure.
Amazon authorizations and access tokens: deleted as soon as access is revoked or the Amazon account is disconnected.
Data from Amazon SP-API (products, offers, prices): 18 months maximum, and deleted within 30 days of access revocation, account closure or a deletion request, unless the law requires otherwise.
Technical and security logs: 12 months.
Billing data: 10 years, in accordance with accounting obligations (Article L123-22 of the French Commercial Code).
Support requests: 3 years from the last request.
Waitlist sign-ups: until the service launches and no more than 24 months after sign-up, unless you unsubscribe earlier.
Backups: deleted data is purged from backups within 90 days.

Amazon data is deleted or returned in accordance with Amazon’s contractual obligations and the applicable data protection rules.

9. Data security

We implement technical and organizational measures appropriate to the risks in order to protect data against unauthorized access, loss, alteration, disclosure or destruction.

Depending on the components deployed, these measures may include:

Encryption of communications.
Access control and permission management.
Protection of credentials and technical secrets.
Logging of security events.
Updating of software components.
Backup and restoration procedures.
Monitoring and incident handling.

The measures actually deployed are described on our Data protection and security page.

10. Your rights

In accordance with the applicable regulations, and depending on the situation, you may:

Request access to your personal data.
Request its rectification.
Request its erasure.
Request the restriction of its processing.
Object to certain processing.
Request data portability where this right applies.
Withdraw your consent where processing is based on it.
Lodge a complaint with the CNIL (the French data protection authority).

To exercise your rights, contact: [email protected].

We may ask for reasonable information to verify your identity where necessary to protect your data. We will respond within the time limits set by the regulations.

You can also contact the CNIL: https://www.cnil.fr/.

11. Amazon connection and access revocation

You can manage the permissions granted to Elevate Seller from the Amazon interfaces provided for this purpose.

Revoking the authorization prevents any future access that requires it. It does not necessarily result in the immediate deletion of all data already stored: such data is handled in accordance with the applicable retention and deletion rules.

You can also contact us to request the deletion of the data associated with your account, subject to the applicable legal and contractual obligations.

12. Changes to this policy

We may amend this policy to reflect changes to the service, to our processing or to the regulations.

The date of the last update appears at the top of this page. Where required by the regulations, users are informed of significant changes.

13. Contact

For any question about privacy or data protection:

Elevate Seller — DOVEAIA SAS

Email: [email protected]

Address: Parc Lorans — Bâtiment 1G, Rue Jean-Marie Huchet, 35000 Rennes, France