Messaging Data Policy

1. Why this policy exists

SellerTray is designed for businesses that sell through conversations. This policy explains, in plain language, what may happen to messaging information when a merchant connects a supported messaging channel.

This review copy must be aligned with the final production integration before it becomes effective.

2. Information a connected service may make available

• Message content sent to or from the merchant through the connected service.
• Customer or participant identifiers and profile information made available by that service.
• Message timestamps, delivery state, message identifiers and related metadata.
• Attachments or media where the connected service and SellerTray feature support them.
• Conversation events needed to support merchant workflows.

3. What SellerTray may do with messaging information

• Display or organise conversations for an authorised merchant user.
• Connect relevant conversation activity with a customer, order or merchant workflow.
• Identify activity that may require merchant attention.
• Support merchant-approved customer communication and order progress workflows.
• Protect the service, troubleshoot integrations and prevent abuse.

4. Merchant review and control

The website and product documentation must accurately state which actions happen automatically and which require merchant review. SellerTray should not describe a conversation-to-order workflow as fully automatic if the production system requires merchant confirmation.

5. Merchant responsibility

The merchant is responsible for its customer relationship, required privacy notices, lawful messaging practices and compliance with the connected provider's rules.

Connecting a channel does not give a merchant permission to send unlawful spam, misleading messages or communications that violate a customer's rights.

6. Third-party messaging providers

SellerTray is a separate product from the messaging providers it may integrate with. A customer's or merchant's use of a connected service remains subject to that provider's terms, privacy practices and technical rules.

7. Retention and deletion

The final policy will state how long messaging content and related records are kept in SellerTray, how disconnection affects new data, and how account deletion affects stored records and backups.

8. Security and access

Messaging information should be accessible only to authorised users and systems that need it for the approved SellerTray purpose. Detailed implementation claims will be added only after the production security review.

9. Disconnecting a channel

Merchants should be able to understand how to disconnect a supported messaging channel and what happens after disconnection. The final instructions will match the production onboarding and integration controls.