In short
- We collect only what we need to run your Ledger.
- We read your Amazon data only after you authorize us, and only to build your own Ledger.
- We never sell your data, never share it with other customers and never use it to compete with you.
- No analytics, advertising or tracking cookies.
- Disconnect Amazon at any time: your tokens are deleted at once, your Amazon data within 30 days.
Who we are
The ASIN Ledger ("we", "us") is operated by Prime AI, obrt za digitalni marketing, vl. Tin Rudnički, Augusta Šenoe 2, 32221 Nuštar, Croatia, OIB 35459757027, registration number (MBO) 99284332. This policy covers our website asinledger.com and our app app.asinledger.com.
We decide how the personal data described here is used. For anything about privacy, security, support or deletion, write to hello@asinledger.com.
What we collect
Your account
Your e-mail address, your name if you add it, your company or brand name, the brands, product categories and tiers you set up, the e-mail addresses and roles of the people you invite, and your plan, trial and billing status.
Logging in
You log in with your Google account or with a 6-digit code we e-mail to you. If you choose Google, Google tells us your name and e-mail address; we never see your Google password. We store e-mailed codes only as a keyed hash, and they stop working after 10 minutes. Once you are in, one session cookie keeps you logged in for up to 30 days.
The founding sign-up on asinledger.com
If you join the founding list, we keep your e-mail address, the plan you picked and your rough ASIN count in a Google Sheet that we control, and use them to contact you about the founding offer.
Billing
You can sign up and explore the demo without a card; Stripe asks for one when you start the 14-day trial. Payments run through Stripe. Your card details go to Stripe and never reach us. We keep your plan and billing status, and the billing records tax law requires.
Security log
We log logins, Amazon connections and disconnections, the use of Amazon access tokens and admin actions, so we can keep accounts safe and investigate problems.
Public product data
For the ASINs in your catalog we fetch public product data from Keepa: Best Sellers Rank, prices, ratings and reviews.
Your Amazon data
We see Amazon data only after you authorize us: in Seller Central (Selling Partner API website authorization) and in Amazon Ads (Login with Amazon). We then read:
- Sales & Traffic reports;
- order reports without buyers' personal information;
- FBA inventory and the FBA inventory ledger;
- listings and catalog data;
- Amazon Ads campaigns, reports and profiles.
We do not request Amazon's restricted roles, and we do not store buyers' personal information.
We use this data only to build your own Ledger (dashboards, the weekly report, and stock and PPC suggestions) for you and the team you invite. We never sell it, never share it with other customers, never combine it with another seller's data and never use it to compete with you.
The Login with Amazon refresh tokens that let us read your data are encrypted with AES-256-GCM. You can disconnect Amazon at any time in the app: we delete the tokens at once and your Amazon data within 30 days. We do the same when Amazon tells us that an authorization was revoked or an account was deleted.
How we use it
- to create your account, log you in and keep the service secure;
- to build your Ledger and send the e-mails the service needs, such as login codes and team invitations;
- to bill you, once billing opens;
- to answer your founding sign-up and your questions.
We do not use your data for advertising, and we do not sell it.
Under the GDPR we rely on these legal bases: providing the service you signed up for, or the steps you asked for before signing up (contract); keeping the service secure (our legitimate interests); and keeping billing records (legal obligation).
Cookies
The app sets one cookie: an HttpOnly session cookie that keeps you logged in for up to 30 days. We use no analytics, advertising or tracking cookies.
Until launch, asinledger.com and app.asinledger.com sit behind Cloudflare Access, which sets its own login cookie when you sign in there.
Our pages load their fonts from Google Fonts, and the website loads one script from the jsDelivr CDN. Your browser connects to those services to fetch them, so they see your IP address.
Who helps us
We share data only with the providers that run the service for us, and only what each of them needs:
- Cloudflare: hosting, DNS, e-mail routing and Access;
- Stripe: payments;
- Resend: delivery of login e-mails, once it is live;
- Keepa: public product data (we send it ASINs, not personal data);
- Google: Sign in with Google (if you choose it), the founding sign-up sheet and our support mailbox;
- Amazon: the Selling Partner and Amazon Ads APIs you authorize;
- Google Fonts and jsDelivr: fonts and one script on our pages.
Some of these providers are based in the United States. We also disclose data when the law requires it.
Where it is kept
Everything runs on Cloudflare: Workers for the app, a D1 database kept in Cloudflare's EU jurisdiction, and later R2 storage for each account's Ledger files. Pages are served over Cloudflare's global network, over HTTPS only (TLS 1.2 or newer, with HSTS). Our security page has the details.
How long we keep it
- Account data: as long as your account exists.
- Deleting your account: the owner can delete the account in the app. You have 7 days to undo it; after that everything is deleted, within 30 days at the latest.
- Amazon data: when you disconnect, or when Amazon tells us an authorization was revoked or an account was deleted, the tokens are deleted at once and the Amazon data within 30 days.
- Security log: up to 12 months.
- Billing records: as long as tax law requires.
- Founding sign-ups: you can ask us to remove yours at any time.
Your rights
Under the GDPR you can ask to access your data, get a copy of it (the app has a data export), correct it, delete it, or object to how we use it. Write to hello@asinledger.com.
You can also complain to a data protection supervisory authority, for example the one where you live or work.
Changes
When we change this policy in a way that matters, we tell account owners by e-mail 30 days before the change takes effect. The date at the top of this page shows the current version.
Contact
Prime AI, obrt za digitalni marketing, vl. Tin Rudnički
Augusta Šenoe 2, 32221 Nuštar, Croatia
hello@asinledger.com