That begs the question, does admin has access all of our data?

Yes, of course… The data is on his server, he has access to his own server and everything that’s on it. This is true for any online service whatsoever, the only exception would be encrypted data.

If he wants, can he sell the data to some big corporation?

Not legally, unless the privacy policy is changed.