Privacy Policy

SellerSocket (“we,” “us”) is a hosted analytics service that lets Amazon sellers view their own business data through the Claude AI assistant. This policy explains what we collect, why, and how it is protected.

What we collect

• Account information: your email address and login credentials for your SellerSocket account.
• Amazon authorization tokens: when you connect your Amazon Seller account through Amazon's Login with Amazon flow, we store the resulting authorization token so we can retrieve your data when you ask for it. Tokens are encrypted at rest with AES-256-GCM.
• Your Amazon business metrics: sales figures, advertising performance, fees and financial events, inventory quantities, and shipment records retrieved from Amazon's Selling Partner API and Amazon Ads API — solely at your request and solely under your authorization. Some results are cached temporarily to keep the service fast.
• Billing information: payments are processed by Stripe. We store your Stripe customer and subscription identifiers; we never see or store your full card number.

What we do NOT collect

• No buyer or customer personal information — no names, shipping addresses, phone numbers, or emails of your customers. Our Amazon API access uses no restricted (PII) data roles.
• No tax identity data.
• No data from your Amazon account beyond what the features you use require.

How we use your data

For exactly one purpose: rendering your own reports and dashboards to you. We do not sell your data, share it with other sellers or third parties for their own use, use it for advertising, or aggregate it into products for anyone other than you.

Service providers

• IONOS — server hosting where the service and its database run.
• Stripe — payment processing. Stripe sees your payment details; it never sees your Amazon data.
• Anthropic (Claude) — when you ask Claude a question, SellerSocket returns your summarized business metrics to your Claude session under your authenticated connection. This happens only at your request and is governed by your own agreement with Anthropic.

Security

All traffic is encrypted in transit (TLS). Amazon authorization tokens and application secrets are encrypted at rest with AES-256-GCM using keys held separately from the database. Access to production systems is restricted to authorized personnel over authenticated, non-public channels. Each seller's data is isolated per account. We commit to notifying Amazon and affected users promptly — within 24 hours for any incident involving Amazon data — if a security incident occurs.

Retention and deletion

• Disconnecting your Amazon account in SellerSocket deletes your stored authorization token immediately.
• If your subscription ends, your stored data (tokens, cached reports, account records) is deleted within 30 days.
• You may request deletion of your account and data at any time at support@sellersocket.com.

Changes

We will post any changes to this policy on this page with an updated effective date. Material changes will be announced to subscribers by email.

Contact

support@sellersocket.com