Security
Your stores and your buyers, handled with care.
SellerDesk sits between you, your marketplaces and your buyers. Here is how we connect, what we encrypt, who can see what, and how we keep a record of it.
Connecting your store
- You connect through eBay’s own sign-in and approve access there. SellerDesk never sees or stores your eBay password.
- The sign-in link is signed, expires after 15 minutes, and is tied to you and your organisation, so it can’t be replayed by someone else.
- Disconnecting deletes the stored connection; your history stays. You can also withdraw access from your eBay account settings at any time.
Encryption
- Your marketplace connection tokens are encrypted at rest with authenticated encryption. Deployed environments refuse to store them without an encryption key.
- Buyer names, emails, phone numbers and street addresses are encrypted at rest too.
- In production the app is served over HTTPS, with HSTS switched on.
Buyer details
- Buyer names, addresses, emails and phone numbers are never sent off to draft a reply, a case answer or a listing suggestion.
- When buyer questions are used to improve a listing, emails, phone numbers and links are removed first.
- When eBay tells us a buyer has deleted their account, their contact details are deleted.
- Raw notifications from eBay are kept for 7 days, then purged.
- Location data is stripped from every product photo before it’s stored.
Who can do what
- Five built-in roles, each written out in full, with single permissions added or removed per person. A deny always wins.
- Access is checked on every request, scoped to your organisation and to the stores each person may see.
- A store someone can’t access doesn’t exist for them: it isn’t hidden, it’s not found.
- Shipping, cancelling and refunding orders are separate permissions.
Signing in
- Access tokens last 15 minutes. Refresh tokens last 30 days, are stored only as a hash, and are replaced every time they’re used.
- If an old refresh token is ever used again, every session for that person is signed out.
- Session cookies are HTTP-only and secure, and “sign out everywhere” is one click.
- Sign-in, sign-up and password reset are rate limited, per person and per account.
- Team invitations work once, only for the address they were sent to, and expire after 7 days.
A record of what happened
- Key actions are written to an activity log: connecting stores, membership changes, listings, the repricer, product costs, orders, returns, campaigns and promotions.
- Each entry records who acted, their role at the time, or whether it was automatic.
- The log is append-only. Entries can’t be edited after the fact.
Found a problem?
If you think you’ve found a security issue, email support@sellerdeskai.com with “Security” in the subject. Please give us a chance to fix it before telling anyone else.
See where your profit is leaking this week.
Connect your eBay store, add what your products cost, and get a plan of what to fix first.
Nothing changes on eBay until you approve it.