In short
- HTTPS only, and Amazon access tokens encrypted with AES-256-GCM.
- Every account sees only its own data; roles inside it get only the rights they need.
- No restricted Amazon roles and no buyer personal information.
- Disconnect Amazon and your tokens are gone at once, your Amazon data within 30 days.
- We tell Amazon within 24 hours of detecting an incident involving its data.
Encryption
Everything travels over HTTPS only, with TLS 1.2 or newer and HSTS. The Login with Amazon refresh tokens that let us read your Amazon data are encrypted at rest with AES-256-GCM.
Who can see what
Each account sees only its own data. Inside an account there are three roles, owner, admin and member, and each gets only the rights it needs.
The admin accounts we use to run the service, at Cloudflare, Amazon and Google, are protected with multi-factor authentication.
Amazon data
We ask Amazon only for the data the Ledger needs, request none of Amazon's restricted roles and store no buyers' personal information. Your Amazon data is used only for your own Ledger. It is never sold, never shared with other customers, never combined with another seller's data and never used to compete with you.
Logging in
Logins use Sign in with Google or a 6-digit code sent by e-mail. With Google, your password and any second factor stay with Google; we never see them. An e-mailed code is valid for 10 minutes and stored only as a keyed hash. A session uses one HttpOnly cookie that lasts up to 30 days. Until launch, both asinledger.com and app.asinledger.com also sit behind Cloudflare Access.
Audit log
We keep an audit log of logins, Amazon connections and disconnections, the use of Amazon tokens and admin actions, for up to 12 months.
Deletion
Disconnect Amazon in the app and we delete your tokens at once and your Amazon data within 30 days. The same happens when Amazon tells us that an authorization was revoked or an account was deleted.
Deleting your account (owner only) has a 7-day undo window. After that everything is deleted, within 30 days at the latest.
Incidents
If we detect a security incident involving Amazon data, we notify Amazon at security@amazon.com within 24 hours, and we tell affected customers without undue delay.
Where it runs
The app runs on Cloudflare Workers with a D1 database kept in Cloudflare's EU jurisdiction, and later R2 storage for each account's Ledger files. Pages are served over Cloudflare's global network. Our privacy policy lists every provider we use.
Report a problem
Found a security problem? E-mail hello@asinledger.com with "Security" in the subject. Please give us time to fix it before you share it publicly.
The ASIN Ledger is operated by Prime AI, obrt za digitalni marketing, vl. Tin Rudnički, Augusta Šenoe 2, 32221 Nuštar, Croatia.