Privacy Policy

1. What this policy covers

This Privacy Policy explains what information National Online Sellers Association ("NOSA," "we," "us") collects when you use nationalonlinesellers.org and nationalonlinesellers.com (the "Site"), how we use it, who we share it with, and the choices you have. It applies to visitors, free profile users, paid members, Founding Members, and supplier partners.

2. Information we collect

Information you provide directly:

• Account information: name, email address, username, password (stored as a salted hash, never in plain text).
• Profile information: company name, phone number, mailing address/city/state, platform usernames and follower counts, category selections, website and social links, and an uploaded logo or photo image.
• Supplier information (for supplier accounts): company description, email, website, phone, location, years in business, revenue range, and minimum order value.
• Payment information: when you make a payment, your card details are entered directly into Stripe's secure payment form and sent to Stripe. NOSA does not receive or store your full card number.
• Communications: messages you send us, including support requests.

Information collected automatically:

• Referral activity: if you share your NOSA referral link, we record click timestamps and resulting verified signups so referral credit can be calculated.
• Aggregate, cookie-free analytics via Plausible Analytics (see Section 5).
• Advertising and conversion measurement via the advertising platforms we use, which records whether a visit that came from one of our ads resulted in a sign-up or membership. This includes reporting a hashed version of your email address to those platforms so a sign-up can be matched to an ad (see Section 5).
• Standard server logs (IP address, user agent, request timestamps) retained by our hosting provider, Cloudflare, for security and operational purposes.

3. How we use your information

• To create and operate your account and public seller or supplier profile;
• To verify storefront ownership and issue or revoke a "Verified by NOSA" badge;
• To process payments, manage subscriptions, and send billing-related communications;
• To calculate referral credit and Founding Member eligibility;
• To send transactional email (verification, password reset, billing, membership confirmations) and, if you opt in, member updates and newsletter email;
• To display your public profile in our seller and supplier directories and category pages;
• To detect, investigate, and prevent fraud, abuse, and violations of our Terms of Service;
• To improve the Site, using aggregate, non-identifying analytics.

4. What we share, and with whom

We do not sell your personal information. We share information only as follows:

• Public profile data. If you create a verified seller or supplier profile, your name or company name, category, platform links, general location (city/state), and profile image are displayed publicly on the Site and may be indexed by search engines.
• Service providers. We use Stripe (payment processing and billing), Resend (transactional email delivery), Cloudflare (hosting, database, file storage, and content delivery), and advertising platforms such as X (conversion measurement) to operate and promote the Site. These providers process your information on our behalf and are contractually restricted from using it for their own purposes.
• Legal requirements. We may disclose information if required by law, subpoena, or other legal process, or to protect the rights, property, or safety of NOSA, our members, or others.
• Business transfers. If NOSA is involved in a merger, acquisition, or asset sale, your information may be transferred as part of that transaction; we will notify you of any change in ownership or use of your information.

5. Cookies and analytics

NOSA uses Plausible Analytics, a privacy-focused analytics service that does not use cookies and does not track individuals across websites or devices. It reports aggregate, anonymized traffic statistics only.

Separately, the Site loads advertising and conversion-measurement tags from the platforms we advertise on, so we can see which ads lead to sign-ups and memberships. Unlike our analytics, these are third-party advertising technologies: they may set cookies or use local storage, can recognise your browser across other sites running the same tag, and record a conversion when an action such as a sign-up completes. We currently use X's advertising pixel, and we may add or remove platforms as our campaigns change. Each is governed by that platform's own privacy policy. See our Cookie Policy for the current list and how to opt out.

In addition, when you create an account we report that sign-up to the advertising platform from our server rather than from your browser, so the ad that brought you to NOSA can be credited. That report contains a hashed (one-way scrambled) version of your email address, the time of the sign-up, and technical details such as IP address and browser user agent. We do not send your email address itself, your name, or any profile content to advertising platforms. Because this reporting happens server-side, a browser content blocker does not prevent it. Our affiliate programme is a separate case and does share your email address and name — see immediately below.

The Site uses your browser's local storage (not a tracking cookie) to remember two preferences: whether you've dismissed the site announcement banner, and, for admin users, whether the admin sidebar is collapsed. This data stays on your device and is never transmitted to us. Signing in uses a strictly necessary session cookie required to keep you logged in; this is not used for tracking or advertising.

Affiliate programme. We run an affiliate programme throughPartnero, in which independent partners earn a commission for referrals. If you arrive through a partner’s referral link, we store that partner’s identifier in a cookie for 7 days. If you then create an account, we share your email address, name, and NOSA account identifier with Partnero so the referral can be credited, and we share the amount, currency, and type of any subsequent purchase. We do not share your card details, which we never hold, or any other profile content. Partnero acts as our service provider for this purpose and is governed by its ownprivacy policy. Because this is handled by our server, a browser content blocker does not prevent it; visiting the Site directly rather than through a referral link does. See our Cookie Policy for details and opt-out options.

6. Data retention

We retain your account and profile information for as long as your account is active. If you deactivate your account, we retain your information for a limited period to comply with legal, tax, and accounting obligations (for example, payment records related to Stripe transactions) and then delete or anonymize it, except where longer retention is required by law.

7. Your choices and rights

• Access and correction. You can review and update most of your profile information directly from your dashboard at any time.
• Marketing email. You can opt out of member update and newsletter emails at any time via the unsubscribe link in those emails; you will still receive transactional email related to your account and payments.
• Deletion. You can request deletion of your account and personal information by emailing support@nationalonlinesellers.org. We will honor deletion requests except where we are required or permitted to retain information (for example, financial records related to a completed payment).
• Regional rights. If you are located in the European Economic Area, United Kingdom, California, or another jurisdiction with statutory data-subject rights, you may have additional rights to access, correct, delete, restrict, or port your data, or to object to certain processing. Contact us to exercise these rights; we will respond consistent with applicable law.

8. Security

We use industry-standard safeguards to protect your information, including encrypted transport (HTTPS/TLS), salted password hashing, and access controls on our database and file storage. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. Children's privacy

The Site is not directed to children under 18, and we do not knowingly collect personal information from anyone under 18. If you believe a child has provided us with personal information, contact us and we will delete it.

10. International users

NOSA is based in the United States and processes and stores information in the United States and other countries where our service providers operate infrastructure (including Cloudflare's global network). If you access the Site from outside the United States, your information will be transferred to and processed in the United States and other countries that may have data protection laws different from those in your jurisdiction.

11. Changes to this policy

We may update this Privacy Policy from time to time. We will update the "Last updated" date above and, for material changes, provide additional notice (such as an email or on-site notice) before the change takes effect.

12. Contact us

Questions about this Privacy Policy or your information can be sent tosupport@nationalonlinesellers.org.