# Data we never see (https://sellersheetai.com/docs/start/privacy)

> SellerSheet holds no Amazon role for buyers' personal data — no names, no e-mail addresses, no street addresses, ever.



Amazon keeps buyers' personal information behind a separate, restricted role. **SellerSheet does not hold that role and does not ask for it.** So no tool — over MCP, the Tool API or the sidebar — can return a buyer's name, e-mail address, phone number or street address, and none of it is stored in your synced tables.

## What an order shows [#what-an-order-shows]

* Orders, items, quantities, prices, fees, taxes, promotions, fulfillment, packages and tracking — everything you need to run the order.
* Where it went, **at most**: the delivery **city, country and postal code** (the `RECIPIENT` selector of `orders_getOrder` and `orders_searchOrders`).
* **`BUYER` is not offered.** Amazon's selector for buyer details is left out of SellerSheet's order tools, so no agent can ask for it.

## What else SellerSheet never sees [#what-else-sellersheet-never-sees]

* **Your Seller Central password.** You connect a store through Amazon's own consent page; SellerSheet receives only the API authorization for the permissions you approve, and you can revoke it in Seller Central → Manage Your Apps.
* **Files outside your workspace.** Drive tools list and search only inside your SellerSheet workspace folders, and a file named by its id must be yours or shared with you.

## What your agent sees [#what-your-agent-sees]

Your AI client sees whatever its tools return to it — the data above, never more. What it does with that is between you and your AI provider: SellerSheet provides the MCP server, the AI is your own. See [Stay in control](/docs/mcp-api/control).