Business data processing terms for Zelluvo customers.
For customer-controlled store, order, buyer, product, supplier, and marketplace data, the customer is generally the controller and Zelluvo acts as processor or service provider. Zelluvo may act as controller for account administration, security, billing, marketing, and platform analytics data.
Zelluvo processes customer data to provide the platform, support authorized workflows, maintain security, operate integrations, generate reports or labels, troubleshoot issues, and comply with documented customer settings.
Processed data may include user account data, product and SKU data, supplier source data, marketplace listings, stock and price data, customer order details, shipping addresses, tracking data, notes, audit logs, and support communications.
Zelluvo personnel and service providers should access customer data only where needed for service delivery, support, security, compliance, or authorized operations.
Zelluvo may use hosting, database, email, backup, monitoring, payment, support, analytics, and integration providers. Zelluvo remains responsible for using providers appropriate for the service.
Zelluvo maintains reasonable technical and organizational measures, including HTTPS, access controls, secret protection, audit logs, backups, and store-level permission boundaries.
Zelluvo will use reasonable efforts to help customers respond to data subject requests, security inquiries, deletion requests, and compliance obligations related to data processed through Zelluvo.
On termination or verified request, Zelluvo may delete or export customer data subject to legal obligations, security logs, backups, dispute records, and technical retention limits.
Where customer data is transferred internationally, Zelluvo will rely on appropriate transfer mechanisms where required.
If a signed customer agreement or custom DPA conflicts with this public page, the signed agreement should control for that customer.