Privacy Policy

1. Introduction

SellerForge ("we", "us", or "our") operates the SellerForge platform at sellerforge.ai — an AI-powered SaaS tool for Amazon sellers. This Privacy Policy explains how we collect, use, store, share, and protect your information when you use our website and services, including when you connect your Amazon account via Login with Amazon (LWA) or the Amazon Selling Partner API (SP-API) and Amazon Advertising API.

By using SellerForge or authorizing our application through Amazon, you agree to the practices described in this policy. If you do not agree, please discontinue use of the service and revoke any Amazon account authorizations you have granted.

2. Information We Collect

2.1 Account information

When you create a SellerForge account, we collect your name, email address, and a hashed password. If you subscribe to a paid plan, billing information is collected by our payment processor, Stripe — we do not store your full payment card details.

2.2 Login with Amazon (LWA) — OAuth authorization

SellerForge uses Amazon's Login with Amazon (LWA) service to authenticate and authorize access to your Amazon seller and advertising accounts. When you connect your Amazon account, we receive:

• An OAuth access token and refresh token used to make API calls on your behalf
• Your Amazon account identifier (used to link your SellerForge account to your Amazon profile)
• Your name and email address as provided by Amazon, if included in the authorized scopes

These tokens are stored securely and used solely to access Amazon APIs on your behalf within SellerForge. We do not use LWA tokens to access any Amazon data beyond what is required to operate the features you use.

2.3 Amazon Advertising API data

If you connect your Amazon Advertising account, we access the following data via the Amazon Advertising API on your behalf to power SellerForge's advertising intelligence features:

• Advertising profiles, campaigns, ad groups, and ad targeting settings
• Keyword bids, match types, and negative keywords
• Advertising performance metrics: impressions, clicks, spend, sales, ACOS, ROAS, and conversion rates
• Sponsored Products, Sponsored Brands, and Sponsored Display campaign data
• Budget settings and pacing data

This data is used to provide AI-powered advertising analysis, bid recommendations, campaign optimization suggestions, and performance reporting within your SellerForge account. It is not shared with other users or sold to third parties.

2.4 Amazon Selling Partner API (SP-API) data

If you connect your Amazon seller account via SP-API, we may access order data, inventory levels, listing details, account health metrics, and feedback data to power SellerForge's seller tools. This data is used only within your account.

2.5 Uploaded files and documents

Files you upload to SellerForge (such as invoices, letters of authorization, or other appeal documents) are stored securely in our cloud storage and used solely to provide AI-powered analysis within your account.

2.6 Usage data

We collect standard usage information such as pages visited, features used, and actions taken within the platform to help us diagnose issues and improve the service.

3. How We Use Your Information

• To authenticate your identity and maintain your SellerForge session
• To connect to Amazon's APIs and retrieve your seller and advertising data on your behalf
• To provide AI-powered advertising analysis, bid recommendations, and campaign optimization
• To power the Plan of Action (POA) builder, listing audit, inventory management, and other SellerForge features
• To generate AI responses using your account data as context (processed via Anthropic's Claude API)
• To process your subscription and send billing receipts
• To send transactional emails related to your account
• To diagnose technical issues and improve platform performance
• To comply with applicable laws and Amazon's API usage policies

We do not sell, rent, or trade your personal data or your Amazon account data to any third party, ever.

4. How to Revoke Amazon Account Access

You may disconnect your Amazon account from SellerForge at any time in two ways:

1. Within SellerForge: Go to your account settings and select "Disconnect Amazon Account." This will delete your stored OAuth tokens and stop all API access immediately.
2. Directly with Amazon: Visit amazon.com/ap/adam (Login with Amazon — Manage Your Apps & Devices), find "SellerForge," and revoke access. Amazon will invalidate all tokens associated with our application.

After revocation, we will delete any cached Amazon access tokens within 24 hours. Historical data already stored in your SellerForge account (such as performance reports) will remain available in your account until you delete your account or request data deletion.

5. Data Storage and Security

Your data is stored using Supabase, a SOC 2-compliant cloud database platform. All data is encrypted at rest (AES-256) and in transit (TLS 1.2+). Amazon OAuth tokens are stored encrypted and accessed only by server-side application code — never exposed client-side.

Access to production data is restricted to authorized personnel only. We conduct regular reviews of access controls and security practices.

No method of transmission over the internet is 100% secure. While we take industry-standard precautions, we cannot guarantee absolute security.

6. Third-Party Services

SellerForge integrates with the following third-party services to operate the platform:

• Amazon (Login with Amazon / Advertising API / SP-API) — to authenticate users and access advertising and seller data on your behalf. Amazon's data is governed by Amazon's Privacy Notice.
• Anthropic (Claude API) — AI-powered features send relevant portions of your data to Anthropic's API for processing. This is governed by Anthropic's Privacy Policy.
• Stripe — payment processing. Stripe's Privacy Policy governs all payment data.
• Supabase — cloud database, authentication, and file storage.

We do not share your data with these providers beyond what is necessary to operate the service.

7. Amazon API Data Usage Restrictions

SellerForge's use of Amazon API data is subject to Amazon's API usage policies. Specifically:

• Amazon Advertising API data is used exclusively to provide advertising management and analytics features to the account holder who authorized access
• We do not use Amazon API data to build competing products, train machine learning models for purposes unrelated to your account, or share aggregated Amazon data with any third party
• We do not cache Amazon API data beyond what is necessary for the platform to function
• We comply with Amazon's data deletion requirements — upon account closure or access revocation, Amazon-sourced data is deleted per Section 8 below

8. Data Retention

We retain your account data for as long as your account is active. If you close your account, we will delete your personal data within 30 days, except where retention is required by applicable law.

Amazon OAuth tokens are deleted immediately upon disconnecting your Amazon account. Cached Amazon API data (such as historical advertising reports) is retained for the duration of your subscription and deleted within 30 days of account closure or access revocation.

To request deletion of your data, email info@sellerforge.ai with the subject line "Data Deletion Request." We will process your request within 30 days.

9. Your Rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data ("right to be forgotten")
• Object to or restrict certain processing activities
• Receive a portable copy of your data
• Withdraw consent at any time (including revoking Amazon account access)

To exercise any of these rights, contact us at info@sellerforge.ai.

10. Cookies

We use essential session cookies to maintain your authenticated login state. We do not use third-party advertising cookies, cross-site tracking cookies, or behavioral profiling cookies.

11. Children's Privacy

SellerForge is not intended for use by anyone under the age of 18. We do not knowingly collect personal data from minors. If we become aware that we have collected data from a minor, we will delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or via a notice within the platform at least 14 days before the change takes effect. Continued use of SellerForge after the effective date of changes constitutes acceptance of the updated policy.

13. Contact

For privacy-related questions, data requests, or concerns about our use of Amazon account data, contact us at:

SellerForge
info@sellerforge.ai

SellerForge is not affiliated with, endorsed by, or sponsored by Amazon.com, Inc. Amazon, Sponsored Products, and related marks are trademarks of Amazon.com, Inc.