Privacy Policy

This policy explains what data InSell collects, why, where it lives, how long we keep it and how you can have it removed. We wrote it to be read, not skimmed: if anything here is unclear, write to us at [email protected].

1. Who we are

InSell is a product of Brain Project Labs LLC, a Florida limited liability company. Brain Project Labs LLC is responsible for the personal data described in this policy. The business data you put into a workspace is yours: you decide what goes in, and we process it on your behalf. If your business needs a data processing agreement, write to us. Registered address: 12024 Tuscany Bay Dr, Tampa, FL 33626, United States. Contact: [email protected].

2. What this policy covers

This policy covers two things:

the website at insell.ai, including the early access and contact forms;
the product at app.insell.ai — the InSell application you sign in to, connect your marketplace accounts to and use with your team.

It does not cover the marketplaces themselves (Amazon, Walmart, eBay, Shopify) or any other service you use alongside InSell; each has its own policy.

3. Data we collect on the website

Forms. When you request early access or contact us, we collect what you type: your name, work email, brand or company, the marketplaces you sell on, a rough number of SKUs, and your message. We use it to reply to you, to set up early access and to send you occasional news about InSell; every such email has an unsubscribe link. Form submissions are delivered to our mailbox at [email protected].

Analytics. The website runs no analytics or tracking scripts: we do not count visits, page views or referrers. If we add analytics later, we will update this policy first and use only a service that sets no cookies and stores no personal data.

Server logs. Our hosting provider keeps standard web server logs (request time, URL, status, user agent, IP address) for security and troubleshooting. These are kept for no longer than 90 days and are not used to identify visitors.

4. Data we collect in the product

Your account. Name, work email, the name of your brand and workspace, your time zone, and the members you invite with their roles.

Marketplace data. When you connect a channel, you authorize InSell in that channel’s own console (for Amazon — in Seller Central). We never see your password. Through that authorization we receive, depending on the channel:

orders and their fees, refunds and returns;
payouts and settlement reports;
inventory held by the marketplace (for Amazon — FBA inventory and inbound shipments);
listings, so we can match them to your products;
sales and traffic statistics for your listings (sessions, conversion rate) and account health indicators;
storage fees and advertising spend.

Every one of these feeds ends up as a number you see on screen: profit, cash, stock, fees. We do not pull data we don’t show.

Data you enter. Unit costs, suppliers, purchase orders, warehouse counts, expenses, bank account balances, tasks and comments — everything you and your team type into InSell.

Bank data (planned). A bank feed through Plaid is on our roadmap. When it is available, connecting a bank account will be optional and governed by Plaid’s own terms and policy; we will update this section before it launches.

Usage data. We record what the application does in response to your actions (for example, which pages were opened and which API calls were made) to keep the service reliable and secure.

5. What we never collect

We do not collect or store buyer personal information: no buyer names, shipping or billing addresses, phone numbers or email addresses. We do not request the Amazon roles that give access to it, so Amazon never sends it to us. Some other marketplaces include buyer details in the order data they send; InSell discards those details as soon as the data arrives. An order in InSell keeps only the city, state and ZIP code needed for shipping statistics and returns.

We do not collect payment card numbers on the website. Early access requires no card.

6. How we use data

We use your data to do one thing: show you your own numbers and let your team act on them. Specifically, to:

calculate sales, fees, profit, cash, stock and days of stock;
reconcile payouts with orders and show what a marketplace owes you;
run tasks and playbooks for your team;
answer your questions and support you;
send you emails about your account and the service;
keep the service secure and reliable.

We do not sell your data, share it for advertising, or use it to build profiles of you or your customers. We do not use your business data to train machine-learning models.

AI assistants. If you connect an assistant (for example Claude or ChatGPT) to InSell through our MCP server, the assistant reads your data on your behalf, under your own permissions, only when you ask it to. We do not send your data to third-party AI services ourselves. You can revoke a connected assistant at any time.

7. Amazon Information

Data we receive from Amazon through the Selling Partner API and the Amazon Ads API (“Amazon Information”) is handled under the Amazon Services API Developer Agreement and the Amazon Data Protection Policy. In practice this means:

we use Amazon Information only to provide the InSell functionality described on this website, and for nothing else;
we store it encrypted at rest and transmit it only over encrypted connections;
access inside our company is limited to the people and systems that need it to run the service;
we keep audit logs of access to Amazon Information;
we do not share Amazon Information with anyone except Amazon Web Services, which hosts InSell on our behalf; it is not sent to our email provider, and an AI assistant you connect reads it only on your behalf (section 6);
disconnecting your Amazon account revokes our authorization and stops all further retrieval at once;
we permanently delete Amazon Information — from live systems and backups — within 30 days after you disconnect Amazon, delete your workspace or ask us to, or after Amazon requires it;
if we become aware of a security incident affecting Amazon Information, we notify Amazon within 24 hours and notify you without undue delay.

We do not request Amazon roles that give access to buyer personally identifiable information.

We share data only with service providers that host or deliver the service for us, under contracts that restrict them to processing on our instructions:

Provider	Purpose	Location
Amazon Web Services	Hosting, storage, application logs and error reports, email delivery for form submissions	United States
Brevo	Transactional email (sign-in, invitations)	European Union
Plaid (when the bank feed launches)	Bank account connection	United States

We process data in the United States; our email provider processes what it needs to send emails in the European Union.

We may also disclose data if required by law, or to protect the rights and safety of our users and our company. We will tell you about such a request unless we are legally prevented from doing so.

If Brain Project Labs LLC is merged or acquired, or sells the InSell business, your data may pass to the new owner, who must keep protecting it under this policy; Amazon Information passes only as Amazon’s policies allow. We will tell you before that happens.

9. Retention and deletion

Website forms: we keep your request until we have replied and set up early access, and then as part of our customer records for as long as you have an account or a pending request. If you don’t become a customer, we delete your request 24 months after our last exchange.
Product data: we keep it for as long as your workspace exists.
Disconnecting a channel: syncing stops and the authorization is revoked at once. Amazon Information from a disconnected Amazon account is deleted within 30 days, as Amazon’s policy requires. Data from other channels stays available to you until you delete it or the workspace.
Deleting the workspace: all its data, including Amazon Information and encrypted access tokens, is permanently deleted from our live systems and backups within 30 days.
Access logs: kept for 90 days, then deleted.

You can request deletion of your data at any time by writing to [email protected]; we will confirm when it is done.

10. Security

All traffic between you, the marketplaces and InSell is encrypted in transit; data at rest is encrypted.
Access tokens and secrets are stored encrypted and are never written to logs or URLs.
Access to production systems is limited to named people, protected by multi-factor authentication, and reviewed regularly.
Each member of your workspace sees only what their role allows; costs and margins are a separate permission that you grant.
We keep an incident response plan. If a security incident affects your data, we will notify you without undue delay, and notify Amazon within 24 hours where Amazon Information is involved.

No system is perfectly secure; if you believe you have found a vulnerability, please write to [email protected].

11. Cookies

The website sets no cookies and runs no analytics or tracking scripts.

The product uses a strictly necessary session cookie to keep you signed in; it expires after 30 days. It does not track you across other sites, and no advertising or third-party cookies are used.

Do Not Track. Neither the website nor the product tracks you across other sites, and we don’t let third parties do so. Since there is no such tracking to switch off, we treat browsers the same whether or not they send a Do Not Track signal.

12. Your rights

Wherever you are, you can ask us to:

tell you what data we hold about you and your workspace;
correct it;
export it — your accountant package and CSV exports are available in the product at any time;
delete it (see section 9);
stop processing it for a particular purpose.

Write to [email protected]. We answer every request within 30 days and may ask you to confirm that you control the account. We do not sell or share personal information as California law defines those terms. If you are in a jurisdiction with specific privacy rights (for example the EU/EEA, the UK or California), those rights apply to you as the law provides, and you may also contact your local data protection authority.

13. Children

InSell is a business tool for brand owners and their teams. It is not intended for anyone under 18, and we do not knowingly collect data from them.

14. Changes to this policy

When we change this policy we update the date at the top and, for material changes, notify account owners by email before the change takes effect. Earlier versions are available on request.

15. Contact

Brain Project Labs LLC · 12024 Tuscany Bay Dr, Tampa, FL 33626 · United States [email protected]

See also our Terms of Service and the Security & your data overview.