Last updated: [DATE — fill in before launch]
When you connect your seller account, we access only two things from your orders: the order ID and the order's delivery date. That is the minimum information needed to determine when an order becomes eligible for a review request under Amazon's own rules.
We also collect the account information you provide directly when you sign up: your email address, and if you choose to authenticate with Google, the basic profile information Google shares with us (name, email, profile photo).
We never access, store, or see any buyer personal information — no names, email addresses, shipping addresses, or payment details of your customers. Our access is scoped strictly to order IDs and delivery dates.
Your Amazon account authorization token is encrypted before it is stored, both at rest in our database and in transit over HTTPS. No one on our team can read this token directly — it is only ever decrypted programmatically, at the moment it is needed to make an API call on your behalf.
If you disconnect your Amazon account or delete your AutoPlusLab account, your stored authorization token and associated order data are permanently deleted within 30 days.
Only AutoPlusLab's own systems access your data to perform the service you signed up for. We do not sell, rent, or share your data with third parties for marketing or any other purpose.
In the event of a data security incident affecting your information, we commit to notifying both you and Amazon within 24 hours of confirming the incident.
You can disconnect your Amazon account at any time from your Account Settings page. You can request full deletion of your account and all associated data at any time, either from Account Settings or by contacting us directly.
Questions about this policy or your data can be sent to privacy@autopluslab.com.
