Privacy Policy

This Privacy Policy explains how [COMPANY NAME] (“we”, “us”, “our”) collects, uses, shares, and protects your information when you use SellerTrack (the “Service”), a tool that helps Amazon resellers track sourcing, inventory, and finances. By using the Service, you agree to this Policy.

Information we collect

• Account data: your email address and authentication details (managed by our authentication provider).
• Business data you enter: products, leads, orders, invoices, inventory, expenses, cards, brands, and related records you choose to store.
• Uploaded files: documents such as invoices and receipts, stored privately and accessible only through time-limited signed links.
• Payment data: processed by our payment processor. We receive limited billing details (e.g. plan, status, last four digits) but never your full card number.
• Google-connected data (optional): if you connect Google, the specific Drive files and Sheets you select — see “Google user data” below.
• Usage & technical data: limited logs (e.g. request metadata, IP, user agent, error diagnostics) needed to operate, secure, and debug the Service.

How we use it

We use your information solely to provide, maintain, secure, and improve the Service, process payments, respond to support requests, and communicate with you about your account. We do not sell your personal data or use your business data for advertising.

Google user data

SellerTrack’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. When you connect Google, we request only the access needed for the import feature: the specific files you pick (Drivedrive.file) and read-only access to the spreadsheets you select (spreadsheets.readonly). That data is used only to import your product information into your account. We do not use it for advertising, do not sell it, do not use it to train generalized AI/ML models, and allow humans to read it only with your consent, for security, to comply with law, or as required to operate the feature. You can disconnect Google at any time.

Service providers (subprocessors)

We rely on trusted third parties to run the Service, each processing data only as needed:

• Hosting/CDN: [HOSTING PROVIDER] — application hosting.
• Database & auth: Supabase — stores your account and business data.
• Payments: Stripe — subscription billing and card processing.
• Google: Drive/Sheets access for the optional import feature.
• Rate limiting: Upstash — abuse protection (processes request metadata).
• Email: Resend — transactional email such as support replies.
• Error monitoring: Sentry — diagnostic error reports (if enabled).
• AI features (if enabled): when you use an AI feature, the specific prompt you submit is sent to our AI provider to generate a response.

Data isolation & security

Each account’s data is isolated at the database level (row-level security), traffic is encrypted in transit, and access is rate-limited. We apply reasonable technical and organizational measures to protect your data, but no system is perfectly secure.

Data retention

We keep your data for as long as your account is active. When you delete your account, we remove your data from our systems; limited records may persist briefly in backups or where retention is required by law (e.g. tax or payment records).

International transfers

Your data may be processed in countries other than your own, including the United States. Where required, we rely on appropriate safeguards for such transfers.

Cookies

We use only the cookies necessary to keep you signed in and to operate the Service. We do not use advertising or third-party tracking cookies.

Your rights

You can export all of your data or permanently delete your account at any time from Settings. Depending on where you live, you may have additional rights under laws such as the GDPR or CCPA — including access, correction, deletion, and portability. To exercise these rights, contact us at [SUPPORT EMAIL]. We do not sell personal information.

Children

The Service is not directed to anyone under 18, and we do not knowingly collect their data.

Changes

We may update this Policy from time to time. We’ll revise the “Last updated” date and, for material changes, take reasonable steps to notify you.

Contact

For privacy questions or requests, contact us at [SUPPORT EMAIL]. See also our Terms of Service and Refund Policy.