Privacy & Data Use Policy

Last updated: August 30, 2026

This policy explains what information SourceTrove (“we,” “us”) collects, how we use and protect it, and how we handle information from your connected Amazon account. It applies to our website and member application.

Summary: We only access the information needed to check your Amazon listing eligibility. We do not collect any Personally Identifiable Information (PII) about Amazon buyers, we do not sell or share your data with other organizations, and we encrypt your Amazon authorization token at rest. You can disconnect and delete your data at any time.

1. Information we collect

Account information

Your email address and a securely hashed password (we never store your password in plain text).
Subscription and billing status. Payments are processed by our payment provider (Stripe); we do not store your full card number.

Amazon account information

If you choose to connect your Amazon Seller account, we collect and store:

Your Amazon Seller ID and marketplace.
A secure authorization token you grant us when you connect your Amazon account. This token is encrypted at rest and is used only to make requests on your behalf.
Listing-eligibility results for products you check (eligible, needs approval, or restricted, and the reason).

We do not collect Amazon buyer PII. Our application only checks your own listing eligibility. We do not request, access, receive, store, or process any personal information about Amazon buyers (names, addresses, contact details, or order information).

Usage & analytics information

Like most websites, we collect technical and usage data to understand how the service is used and to improve it. Through our analytics provider (PostHog), we collect:

Pages you view and the actions you take in the app (clicks and interactions), along with device, browser, and approximate location derived from your IP address.
Session recordings (replay). We use session replay to reconstruct how pages are used so we can debug problems and improve the experience. Text you type into form fields is masked and not captured — recordings reflect navigation and interactions, not the contents of your inputs, passwords, or payment details.
A device/session identifier stored in your browser (via cookies and local storage) so analytics can recognize a session.

We use this data only to operate and improve SourceTrove. You can opt out — see “Your choices” below.

2. How we use information

To authenticate you and provide access to your subscription.
To check, on your behalf, whether your account can list a given product.
To operate, secure, and improve the service.

We use Amazon information solely to provide the eligibility feature to you, the authorizing seller. We do not use it for advertising, and we do not combine one seller’s data with another’s.

3. Information sharing & service providers

We do not sell, rent, or share your individual account data or Amazon information with other customers, partner companies, or outside organizations. We share information only with the service providers (subprocessors) that operate the product on our behalf, strictly to run the service and only as needed. These currently include:

Stripe — payment processing and subscription billing.
PostHog — product analytics and session replay.
Supabase — database hosting.
Render and Cloudflare — application hosting and content delivery.
Keepa — Amazon catalog and pricing data used to match products. We send product identifiers such as UPCs and ASINs, not your personal information.
Google — optional “Sign in with Google” authentication, only if you choose to use it.

Each subprocessor processes data only under our instructions and its own privacy and security commitments. This list may change as the service evolves; we will keep it current here.

4. Data retention & deletion

You can disconnect your Amazon account at any time from within the application. When you disconnect, we delete the stored authorization token.
You may request deletion of your account and associated data by contacting us at the address below. Upon a verified request, we delete your personal data except where we must retain limited records to meet legal or accounting obligations.
We retain data only as long as needed to provide the service or as required by law.

5. How we protect information

Amazon authorization tokens are encrypted at rest using AES-256-GCM.
All traffic is served over HTTPS/TLS. Session cookies are HTTP-only and marked Secure over HTTPS.
Access to production data is limited to authorized personnel on a need-to-know basis.
Passwords are stored using a strong one-way hashing algorithm.

6. Security incident response

We maintain a risk assessment process and an incident response plan covering monitoring, detection, and response for potential threats and security incidents. In the event of a security incident involving Amazon Information, we will notify Amazon at security@amazon.com and take steps to investigate, contain, and remediate the incident. Our plan covers response to unauthorized access, database compromise, and data leaks. We will notify affected users as required by applicable law.

7. Your choices

Connecting an Amazon account is optional; the eligibility feature simply won’t be available until you do.
You can disconnect your Amazon account or cancel your subscription at any time.
You can contact us to access or delete your personal data.
Analytics & session recording: we honor your browser’s “Do Not Track” setting — enabling it stops analytics and session recording. You can also block or clear cookies in your browser settings, or contact us to opt out.

8. Not affiliated with Amazon

SourceTrove is an independent service and is not affiliated with, endorsed by, or sponsored by Amazon.com, Inc. or its affiliates. “Amazon” and related marks are trademarks of Amazon.com, Inc. or its affiliates.

9. Changes to this policy

We may update this policy from time to time. Material changes will be reflected by updating the “Last updated” date above.

10. Contact

Questions about this policy or requests regarding your data: Contact us or email support@sourcetrove.com.