Privacy Policy

Account information

When you sign up for FBAgent, we collect your name, email address, and password (stored in hashed form). We may also collect billing information if you subscribe to a paid plan.

Amazon Selling Partner data

When you connect your Amazon Seller Central account to FBAgent through Amazon's Selling Partner API, we access the following categories of data from your Amazon account, on your behalf and with your authorization:

• Product listings, catalog data, and A+ content
• Inventory levels and FBA fulfillment data
• Order data (excluding buyer Personally Identifiable Information)
• Pricing and product fee data
• Account health and Selling Partner Insights
• Financial and reporting data

We do not request or receive Amazon buyer Personally Identifiable Information (PII). We do not request Restricted Data Token (RDT) roles from Amazon.

Usage information

We collect information about how you use FBAgent, including the pages you view, the features you use, and the actions you take. This is used to operate and improve the service.

Log and device information

We collect standard server logs when you access FBAgent, including IP address, browser type, and timestamps. This is used for security and diagnostics.

We use the information we collect to:

• Provide, maintain, and improve the FBAgent service
• Monitor your Amazon Seller Central account for issues and generate alerts and recommendations
• Communicate with you about the service, including security notices and product updates
• Detect, prevent, and address fraud, abuse, and security incidents
• Comply with legal obligations

We do not use your Amazon Selling Partner data to compete with you, to train third-party machine learning models, or to build derivative products sold to other sellers.

We do not sell your data. We do not share your Amazon Selling Partner data with other FBAgent customers or with third parties for marketing purposes.

We share information only with sub-processors who help us operate the service, Amazon when required to fulfill an authorized API request on your behalf, law enforcement or regulators when required by valid legal process, or a successor entity in the event of a merger, acquisition, or sale of substantially all of our assets.

Sub-processors

• Vercel Inc. - web application hosting - global edge, US primary
• Railway Corp. - backend services and job processing - US
• Supabase Inc. - database, authentication, and file storage - US (configurable)

Each sub-processor operates under its own security controls and data processing agreements. We review sub-processor security posture before onboarding and periodically thereafter.

We retain your Amazon Selling Partner data for as long as your FBAgent account is active. If you disconnect your Amazon account or close your FBAgent account, we delete your Amazon Selling Partner data within 90 days of the disconnection or account closure, except where a longer retention period is required by law.

You can request deletion of your data at any time by emailing robert@fbagent.ai. We will complete the deletion within 30 days of a verified request.

We take security seriously. Details of our security controls are on our Security page. Key measures include:

• All data in transit is protected with TLS 1.2 or higher
• All data at rest is encrypted using industry-standard encryption
• Access to production systems is restricted to authorized personnel on a least-privilege basis and requires multi-factor authentication
• Credentials, API keys, and tokens are stored in dedicated secret management systems, never in source code
• We maintain an incident response plan and will notify Amazon at security@amazon.com within 24 hours of any confirmed security incident involving Amazon Selling Partner data, and will notify affected sellers as required

Depending on your jurisdiction, you may have rights regarding your personal information, including the right to access, correct, delete, or export your data, and the right to object to certain processing. To exercise these rights, contact us at robert@fbagent.ai.

FBAgent is operated from Canada. If you access FBAgent from outside Canada, your information may be transferred to, stored, and processed in Canada, the United States, or other jurisdictions where our sub-processors operate. By using FBAgent, you consent to these transfers.

We may update this policy from time to time. If we make material changes, we will notify you by email or through the service before the changes take effect. The Effective date at the top of this policy will always show when it was last updated.

FBAgent (a service operated by 14518110 Canada Inc.)

11 Greengable Way, Kitchener, Ontario N2N 3A7, Canada

Email: robert@fbagent.ai