Security

Official Amazon access only

We connect through the Amazon Selling Partner API with the seller's own authorization, and never scrape Seller Central or automate a browser.

We never request restricted roles that expose buyer personal information. Columns with names, addresses, emails or phone numbers are dropped when a report is read, and order IDs are stored only as keyed hashes.

Sync stops the moment you disconnect, and every connection can be paused.

Encryption

All traffic uses HTTPS. Amazon and Google authorizations are encrypted with keys held in AWS KMS and bound to the organization and connection they belong to, so a token cannot be decrypted for anyone else.

Databases and file storage are encrypted at rest.

Isolation between customers

Every table that holds customer data carries the organization it belongs to, and the database itself enforces that one organization can never read another's rows (row-level security), with automated tests on every change.

Accounts and access

Two-step verification is available to every user and required before anyone connects an Amazon account or deletes an organization.

Roles (owner, admin, member, viewer) limit who can connect accounts, invite people and change settings. Agencies can limit members to specific workspaces.

Sessions expire after 7 days of inactivity, and sign-in attempts are rate limited.

AI with a narrow boundary

The monthly action plan is written from aggregated findings only: product identifiers, titles and the numbers behind each finding. Raw reports, order data and buyer data never go to the AI provider, and every number in its output is checked against the input. Your data is not used to train models.

Audit trail and monitoring

Sensitive actions such as connecting or disconnecting an account, role changes, exports and deletions are recorded in an audit log. Errors are monitored with personal data and secrets removed.

Secure development

Every change is reviewed, tested and scanned before release: dependency audits, secret scanning and static analysis run on every pull request.

Your control over your data

Disconnecting an Amazon account stops sync at once and wipes its authorization. Its data is deleted 30 days later, or immediately if you choose. Owners can export all of an organization's data and delete the organization, and every user can delete their account.