Privacy Policy

Last updated: August 4, 2026

1. Who is responsible for your data

SelleRank is the independent Amazon Seller Central consulting practice of Mahdi Farroud, and is the controller of the personal data described here. Contact for any privacy question or request: mahdif25@gmail.com.

2. What we collect, by source

a. Site analytics (first party only)

• An anonymous session ID stored in a first-party cookie (sr_sid, 12 months).
• Page views, section views, clicks, and time on page.
• Referrer, UTM parameters, fbclid, coarse device type, and country derived from your IP at the edge. The IP address itself is not stored.

This is a first-party setup. We do not run third-party advertising or behavioural profiling trackers on the marketing pages.

b. Forms on this site

If you submit a contact or booking form, we store the name, email, brand or storefront URL, and revenue range you provide, together with the anonymous session ID so we can see which page the enquiry came from.

c. Calendly bookings

When you book a call, Calendly processes your name, email, and the meeting details, and sends us the booking and cancellation events so we can prepare for and manage the call.

d. Facebook and Instagram Lead Ads

If you submit one of our lead forms on Facebook or Instagram, Meta transmits your submission to us through the Meta Lead Ads webhook. We receive the fields you filled in, typically name, email, phone number, and company, along with the identifiers of the campaign, ad set, ad, and form that produced the lead.

We use that data only to:

• contact you about the enquiry you submitted and arrange a call, and
• measure which campaigns and audiences produce relevant enquiries.

We do not sell it, we do not share it with third parties for their own marketing, we do not add it to newsletters you did not ask for, and we do not use data received from Meta for any purpose other than the two above. We handle it in line with the Meta Platform Terms and Developer Policies.

3. Why we may process it, and on what basis

• Analytics cookie and site tracking: your consent, given through the notice at the bottom of the site.
• Enquiries, bookings, and lead form submissions: to take steps at your request before entering a contract, and our legitimate interest in responding to business enquiries.
• Records of engagements and invoices: compliance with legal and accounting obligations.

4. How long we keep it

• Analytics sessions and events: 12 months.
• Leads and enquiry records: 24 months after our last contact, unless you become a client.
• Client engagement and billing records: as long as tax and accounting law requires.

5. Who processes data on our behalf

• Lovable Cloud, for site hosting and the database that stores sessions, events, and leads.
• Calendly, for scheduling.
• Meta Platforms, for lead ads delivery and lead transmission.
• Upwork, for contracting and payment when you become a client.
• Impact.com, for domain verification and outbound partner link handling.

Some of these providers are based outside your country, so your data may be transferred internationally, under the safeguards those providers offer.

6. Your rights

You can ask us to give you a copy of your data, correct it, delete it, restrict or object to its use, or withdraw your analytics consent at any time. Declining or withdrawing consent in the on-site notice disables all site tracking. To exercise any right, email mahdif25@gmail.com. You may also complain to your local data protection authority.

7. How to request deletion of your data

These instructions cover data we hold, including anything received through Facebook or Instagram Lead Ads.

1. Email mahdif25@gmail.com with the subject line Data deletion request.
2. Include the email address or phone number you used when you contacted us or submitted the lead form, so we can find your record.
3. If your enquiry came from a Facebook or Instagram ad, say so, so we can also remove the associated lead record and its ad identifiers.
4. We confirm receipt and complete the deletion within 30 days, then reply to confirm. Records we must keep for legal or accounting reasons are retained only for that purpose and nothing else.

Facebook users can also trigger deletion without emailing us: in Facebook, open Settings and privacy · Settings · Apps and Websites, find SelleRank and choose Remove. Facebook sends us an automated deletion request, we erase the associated lead, visitor and analytics records, and you receive a confirmation code you can check at sellerank.com/data-deletion.

Consent works differently by region. If you visit from the EU, EEA, the UK, Switzerland, Brazil or South Korea, no analytics cookie, device signal or advertising pixel is set until you press Accept in the notice. Elsewhere, measurement starts on arrival and the notice offers an immediate opt-out. If your country cannot be determined, we default to asking for consent first.

To stop tracking from any country, choose "Don't track me" or "Decline" in the notice, or delete the sr_sid cookie in your browser settings.

8. Security

Data is stored in an access-controlled database, the admin dashboard is restricted to an approved account list, and all traffic is served over HTTPS. No system is perfectly secure, so we cannot guarantee absolute security.

9. Children

This service is aimed at business owners and is not directed at anyone under 18. We do not knowingly collect data from children. If you believe we have, email us and we will delete it.

10. Changes to this policy

We may update this policy. The version published here with the "last updated" date above is the current one.

11. Contact

mahdif25@gmail.com. See also our Terms of Service.