Privacy Policy

OneSeller — operated by Raven AGI (UEN 53530733X) Effective 21 September 2026 · Version 1.1

1. Who we are

OneSeller is an operations tool for individual sellers, run by Raven AGI, registered in Singapore (UEN 53530733X), registered address as reflected in the Singapore ACRA portal under that UEN ("we", "us", "our").

This policy explains what personal data we handle, why, and what you can do about it. It is written to meet our obligations under the Personal Data Protection Act 2012 (PDPA) of Singapore.

Data Protection Officer: boss@r4v3nteam.com

2. There are two different kinds of data here, and they are treated differently

This is the most important section of this policy, because OneSeller sits between two groups of people.

Your data — you are our customer

When you sign in and use OneSeller, we handle your personal data. For this, we are the organisation under the PDPA, and this policy governs what we do with it.

Your customers' data — you are their organisation, we are your intermediary

OneSeller stores the buyer records you create: recipient names, phone numbers and delivery addresses. That data belongs to your customers and their relationship is with you, not us.

• You decide what to collect, what to do with it, and how long to keep it. Under the PDPA you are the organisation responsible for it, and you are responsible for having a lawful basis to collect it and for telling your customers what you do with it.
• We store and process it to run the service for you, on your instruction. Under the PDPA we act as a data intermediary. We also use data stored in OneSeller to develop and improve our products, including training artificial intelligence models — see section 4A, and the warranty this places on you in the Terms.

Our obligations to you over that data are set out in the Data Processing Addendum, which forms part of your agreement with us.

3. What we collect about you

We never see your password, because there isn't one. Sign-in is handled entirely by Google or Apple, and we receive only the identifiers listed above. If you use Apple's "Hide My Email", we receive a relay address and never your real one.

4. What we do with it

We use your personal data only to:

• create your account, sign you in and keep you signed in;
• provide the service and the features of your plan;
• enforce plan limits and prevent abuse;
• detect, investigate and fix errors and security incidents;
• respond to your questions;
• send you service messages you cannot opt out of because they are necessary — security alerts, material changes to these documents, billing notices if you are ever a paying customer;
• comply with the law.

We do not: sell your personal data, sell or share your customers' data, use your customers' contact details for our own marketing, or send you marketing you did not ask for.

4A. Artificial intelligence and model training

Raven AGI builds artificial intelligence systems. Data stored in OneSeller may be used to develop, train, test, evaluate and improve machine learning and artificial intelligence models, including models that are not part of OneSeller itself.

This covers your account data, how you use the service, and the business content you store — purchase orders, inventory, sales, delivery records and the buyer records you create.

Before data is used for this purpose we remove direct identifiers wherever practicable — names, phone numbers, addresses, email addresses and file attachments — so that what is used for training is the shape of the data and the patterns in it, not the people in it. Where identifiers cannot be removed without destroying the usefulness of the data, we do not use that data for training.

We do not publish your data, make it available to other users, sell it, or design models to reproduce your business information.

What this asks of you. Because you decide what customer data goes into OneSeller, the Terms of Service require you to confirm you have the consents needed for it to be used this way. If you cannot give that confirmation for your customers, do not enter their personal data into OneSeller.

Opting out. If you would rather your data was not used for model development, write to boss@r4v3nteam.com and we will exclude your account. Your use of OneSeller is not affected, and no feature is withheld.

5. Who else touches it

We rely on a small number of service providers ("sub-processors"). Each is bound by its own data protection terms, and each is used only for the purpose listed.

We publish changes to this list here before a new sub-processor starts handling data.

We may also disclose personal data where the law requires it — a court order, a lawful request from a regulator or law enforcement — and where necessary to establish or defend a legal claim. If we are legally permitted to tell you first, we will.

6. Where it is stored

Your account data and your business data are stored in Singapore. Some sub-processors above operate globally; where personal data is transferred out of Singapore we take steps to ensure it receives a standard of protection comparable to the PDPA, as required by section 26 of the Act.

7. How we protect it

• Encrypted in transit (TLS) and at rest.
• Tenant isolation enforced by the database itself, not only by application code, so one account cannot read another's data.
• Files are stored in private buckets and served only through short-lived signed links. Nothing is reachable by guessing a URL.
• No passwords exist to be leaked, because sign-in is delegated to Google or Apple.
• Our staff cannot silently browse your business data. Support access is explicit, requires a stated reason, expires automatically, is recorded in an audit log, and is visible to you in your own account activity.
• Access to production systems is limited to those who need it.

No system is perfectly secure, and we do not claim otherwise. If a data breach occurs that is likely to result in significant harm, or that affects a significant number of people, we will notify the PDPC and affected individuals in accordance with the PDPA's mandatory breach notification requirements.

8. How long we keep it

You can close your account at any time from Settings. Closing starts a 365-day grace period during which it can be recovered; after that, deletion is permanent and we cannot undo it.

A full year rather than a few months is a deliberate choice, because this business runs on a year. Somebody who trades hard through one festive season, stops, and comes back for the next one is away for ten or eleven months — and a shorter period would delete their records while they were gone, at exactly the point last year's figures are the most useful thing they could have.

The trade-off is that we hold your data for longer, and we would rather say so than bury it. The year is a ceiling, not a target. If you want to be gone sooner, ask us and we will delete everything straight away — you should not have to wait a year to be forgotten.

9. Your rights

Under the PDPA you may:

• Access the personal data we hold about you, and information about how it has been used;
• Correct anything inaccurate;
• Withdraw consent to our processing — noting that we cannot operate your account without the data listed in section 3, so withdrawing consent means closing your account;
• Export your data. You can download everything in your account yourself, at any time, without asking us;
• Complain to us at boss@r4v3nteam.com, and to the Personal Data Protection Commission if we have not resolved it.

Write to boss@r4v3nteam.com. We respond within 30 days, and if we need longer we will tell you why.

Requests about your customers' data should go to the seller who holds it, not to us — they are the organisation responsible. If such a request reaches us, we will pass it on to them.

10. Children

OneSeller is a business tool and is not intended for anyone under 18. We do not knowingly collect data from children. If you believe a child has created an account, contact boss@r4v3nteam.com and we will remove it.

11. Changes

We may update this policy. If a change materially affects your rights, we will tell you before it takes effect and ask you to accept the new version when you next sign in. The version and date at the top of this document always reflect what is currently in force.

12. Contact

Raven AGI · UEN 53530733X Registered address as reflected in the Singapore ACRA portal under the UEN above General: boss@r4v3nteam.com · Data protection: boss@r4v3nteam.com