Privacy Policy

Privacy Policy for SellerJar

AMZJOY Inc. (“we”, “us”, “our”), a company based in Ontario, Canada, operates SellerJar: the web application at app.sellerjar.com and the SellerJar mobile apps for iOS and Android (together, the “Services”). This Privacy Policy explains what personal information we collect, how we use and share it, how long we keep it, and the choices you have. It follows the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable Canadian privacy laws.

Privacy Officer

Our Privacy Officer is responsible for our compliance with this policy and PIPEDA. For privacy inquiries, contact: privacy@sellerjar.com

Information We Collect

• Account information: your name, email address, and password (stored only in hashed form), or your Google account identity if you sign in with Google, plus your team and account memberships.

• Billing information: payments are processed by Stripe. We do not store full card numbers.

• Amazon data you connect: with your authorization, data from Amazon Advertising (campaigns, keywords, targets, bids, budgets, spend and performance) and from Amazon Selling Partner services (orders, sales, inventory, fees, settlements and product listings), plus keyword ranking data we gather for your products.

• Support communications: messages you send us through in-app chat or email.

• Technical and security information: IP address, browser and device type, sign-in and security records, feature usage, and error reports.

• Mobile app information: a push notification token (issued through Firebase Cloud Messaging and, on iPhone, Apple Push Notification service), device model, operating system version, language and app version. Your sign-in credential is kept in your device’s secure storage (iOS Keychain or Android Keystore) and stays on your device.

Our mobile apps do not collect your location, contacts, photos or advertising identifier, do not show ads, and do not track you across other companies’ apps or websites.

How We Use Your Information

We use your information to provide and improve the Services; sync and analyze your Amazon data and produce reports, alerts and recommendations; send account and security emails, including one-time sign-in codes; send push notifications you have allowed; process payments; provide support; and detect errors, fraud and abuse.

AI features: some features send relevant account and advertising data to Anthropic’s Claude models, which run on Amazon Web Services (Amazon Bedrock), to generate answers and recommendations. Anthropic does not have access to these requests or responses. We do not use your data to train AI or machine-learning models.

Push Notifications

Push notifications are optional. The app asks for permission after you sign in, and you can turn them off at any time in your device settings or in the app. Notifications contain account summaries such as sales or alert counts, never payment details or passwords.

Service Providers We Share Data With

We do not sell your personal information. We share it only with service providers that help us run the Services, only for that purpose, and under agreements that require them to protect it at least as well as this policy does:

• Amazon Web Services: hosting, databases, transactional email (Amazon SES) and AI processing (Amazon Bedrock).

• Stripe: payments.

• Postmark and Loops: email delivery.

• Google: Sign in with Google, Firebase Cloud Messaging (mobile push notifications) and Google Fonts.

• Crisp: support chat.

• Sentry: error monitoring, including a limited replay of a session in which an error occurs.

• DataForSEO: keyword and product search data (receives keywords and product identifiers, not your personal information).

• Slack: internal alerts to our team (email addresses are masked).

• Amazon: the Amazon Advertising and Selling Partner APIs you authorize.

We may also disclose information when required by law.

Data Storage and Cross-Border Transfer

Your data is stored on Amazon Web Services (AWS) infrastructure in the United States (primarily us-east-2, Ohio). Our service providers may process data in other countries, including other United States regions and the European Union. By using the Services, you consent to these transfers, which we protect with contractual safeguards.

Security

We use encryption in transit (HTTPS), hashed passwords, access controls, and secure device storage for mobile sign-in credentials. No method of transmission or storage is completely secure, but we work to protect your information.

Data Retention

We retain your personal information for as long as your account is active and for a reasonable period afterward for legal and business purposes. Agreement records are retained for the duration of your account plus two years. One-time sign-in codes expire after 10 minutes. Push notification tokens are deleted when you sign out, when they stop being used, or when you delete your account; Firebase removes deleted identifiers from its systems within 180 days.

Deleting Your Account

You can delete your account at any time:

• In the SellerJar app or on the web at app.sellerjar.com: Settings, then Account, then Delete Account.

• By email: write to privacy@sellerjar.com from your account’s email address with the subject “Delete my account”. We process requests within 30 days.

Deleting your account removes your personal information. Advertising data and reports that belong to a shared team account are kept for the remaining team members, and we keep billing records as required by law.

Your Rights

Under PIPEDA, you have the right to access your personal information, request correction of inaccurate data, withdraw consent (subject to legal and contractual limits), and file a complaint with the Office of the Privacy Commissioner of Canada. To exercise these rights, contact privacy@sellerjar.com.

Children

The Services are intended for businesses and are not directed to anyone under 18.

Data Breach Notification

In the event of a data breach posing a real risk of significant harm, we will notify affected individuals and the Office of the Privacy Commissioner of Canada as soon as feasible.

Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or in-app notification.

For questions about this Privacy Policy, contact us at privacy@sellerjar.com.