Plain-language summary
- We handle only the data needed to provide the service: your account, your connection with Mercado Libre, your products, your sales and your payments.
- We do not sell your data. We share it only with Mercado Libre, to operate your account, and with the providers that help us deliver the service.
- Your data is stored securely on servers located in the United States.
- You can access, correct or delete your data whenever you want by writing to hello@cbtlabs.co; we'll be glad to help.
1. Controller and scope
CBT Labs, LLC, a company organized in the State of Delaware, United States, is the controller of the personal data described here. You can contact us at hello@cbtlabs.co. This policy covers the cbtlabs.co site, its waitlist and the application at app.cbtlabs.co.
It does not cover Mercado Libre, Amazon, Google or other platforms you connect: each handles data under its own policy.
About your buyers' data: you are the controller of that data toward them; CBT Labs processes it on your behalf and only to show you your sales and help you manage them.
2. Data we handle
We handle only what the Service needs to work:
- Waitlist: the name, email and WhatsApp number you leave on cbtlabs.co.
- Account data: name, email, company, profile photo if you sign in with Google, and the method you used to sign in.
- Authentication data: encrypted password, sign-in history and active sessions with their approximate date, browser and operating system.
- Mercado Libre connection: your seller ID, the connection's access permissions and, if you use your own application, its DevCenter credentials. Permissions and credentials are stored encrypted.
- Catalog data: products, ASINs, titles, descriptions, images, source prices, stock and your lists of blocked brands, words and categories.
- Settings: margins by country, taxes, logistics costs, publishing rules and notification preferences.
- Sales data: orders, amounts, currencies, fees, shipping costs, withholdings and the costs you record; when Mercado Libre provides them, buyer data needed for shipping.
- Billing data: plan, invoices and payment status. Your card is processed by Stripe; we do not receive or store the full number.
- Technical data: IP address, browser, device, timestamps and error logs.
3. What we use your data for
We use the data to:
- Let you know when your beta spot is ready, if you joined the waitlist.
- Create and maintain your account and protect your session.
- Publish, update, pause and sync your listings on Mercado Libre.
- Generate titles, descriptions and translations adapted to each country.
- Calculate prices, margins and the profitability of your sales.
- Process payments and subscriptions.
- Send you service notices and, with your consent, news and promotions by email or WhatsApp, which you can unsubscribe from at any time.
- Detect abuse, diagnose failures and improve the Service with statistics that do not identify you.
- Comply with the legal obligations that apply to us.
4. Legal bases
We handle data on these bases: performance of the contract, to provide the Service you subscribed to; legitimate interest, for security, fraud prevention and product improvement; consent, for the waitlist and marketing communications, which you can withdraw at any time; and legal obligation, for accounting and tax records.
5. Mercado Libre data
We use the permissions Mercado Libre grants us only to operate the features you use: publishing, updating, reading orders and reading shipping costs.
We do not use your marketplace data to sell to your buyers, we do not share it with other sellers and we do not use it to build contact lists or audiences.
If you revoke the connection, the permissions stop working and we delete them.
6. Artificial intelligence
To generate titles, descriptions and translations we send product data β title, description, attributes and category β to artificial intelligence providers acting on our behalf. We do not send them account data, passwords, payment data or your buyers' data.
8. International transfers
The Service runs on infrastructure located in the United States. If you use it from another country, your data is transferred to and processed there, with the contractual and technical safeguards required by applicable rules.
10. How long we keep data
Waitlist data is kept until you sign up or ask us to delete it. Account, catalog and settings data is kept while your account is active; accounts inactive for 5 years are deleted.
Sales records are kept for 5 years from the sale, and your buyers' personal data for 2 years; after that it is deleted or anonymized. Billing records are kept for the period required by accounting and tax rules.
When you delete your account, we delete your personal data within 30 days and revoke your Mercado Libre permissions, except what we must keep by law.
11. Security
Traffic is encrypted, passwords are stored hashed, Mercado Libre permissions and credentials are stored encrypted, and access to production is limited to those who need it.
No system is infallible. If an incident affects your data, we will notify you and the authorities within the time required by law.
12. Your rights
Depending on where you live, you can access your data, correct it, delete it, request a copy, object to certain processing or withdraw a consent.
You can do much of this yourself from your profile: edit your data, close sessions, disconnect Mercado Libre and delete your account. For anything else, write to hello@cbtlabs.co and we will reply within 30 days.
You can also file a complaint with the data protection authority in your country.
13. Minors
The Service is intended for businesses and professionals aged 18 or older. We do not knowingly collect data from minors; if we find we did, we delete it.
14. Changes to this policy
We will update this page when the Service changes. If a change substantially affects how we handle your data, we will notify you by email or in the application at least 15 days before it takes effect.
15. Contact
CBT Labs, LLC β Delaware, United States.
Privacy questions or requests about your data: hello@cbtlabs.co.