Privacy Policy

• Your account: your email address and login, handled by our authentication provider. We never see or store your password.
• Your preferences: the marketplaces and product categories you tell us you sell in, and your alert settings.
• Billing: if you subscribe, our payment provider stores your card details — we do not. We keep only a customer reference and your plan.
• Operational records: which alerts we sent you, so we do not send duplicates.
• Amazon order data — only if you connect it: connecting your Amazon seller account is optional and something you choose to do from your Settings page. It does not happen automatically when you sign up. Full detail below.

We do not collect your Amazon password. Connecting Amazon uses Amazon's own sign-in system (OAuth) — you authorize Kamiflavr on Amazon's site, and Amazon hands us a revocable access token, never your credentials.

Connecting Amazon is a feature you turn on yourself, from your Settings page. It is not automatic, and you can use Kamiflavr fully without ever connecting Amazon.

When connected, we read your order history from the last 90 days — product ASIN, product title, and order count — to compute a risk score for each of your products. We do not receive your full sales figures, revenue totals, or buyer names or addresses, and we never see your Amazon password: the connection is authorized through Amazon's own OAuth sign-in (Login with Amazon), which hands us a token, not your credentials.

That token is encrypted at rest (AES-256-GCM, an industry-standard encryption method) and kept until you disconnect. If you use the personalization or risk-scoring features, your real product titles are sent to our AI provider, Anthropic, to generate that analysis — see "Who we share it with" below.

To disconnect: click Disconnect on your Settings page — this deletes our copy of your order data and token immediately. That removes our access, but it does not, by itself, revoke Amazon's authorization on Amazon's side. To fully revoke it, also remove Kamiflavr from Amazon Seller Central under Manage Your Apps.

To send you the alerts you asked for, to match changes to what you sell, to bill you if you are on a paid plan, and to keep the Service secure and working. We do not sell your personal data, and we do not use it for advertising.

Only the service providers that make Kamiflavr run: our authentication, database, email, payment, and hosting providers, and the AI provider that writes change summaries and — if you connect Amazon — computes your per-product risk scores. That AI provider always receives marketplace policy text; it receives your real product titles only if you connect Amazon. It never receives your password, payment details, or full sales data. Each processes data on our behalf under their own terms — see Subprocessors for exactly who they are.

You can download everything we hold about you, and permanently delete your account and data, at any time from your account page. Deletion removes your profile and preferences from our database and closes your login; it also cancels any active subscription. Some records may be retained where the law requires (for example, tax records of payments).

We keep your account data while your account is open. When you delete your account, we remove your personal data promptly, except anything we are legally required to keep. If you've connected Amazon, your order data and access token are kept until you disconnect Amazon specifically (see above) — deleting your Kamiflavr account also removes them.

Questions, or want us to act on your data: seshukamini@gmail.com. If you are in a region with data-protection laws (such as the UK/EU GDPR or California CCPA), you have rights to access, correct, and delete your data, which the account page lets you exercise directly.