Privacy Policy

We collect account information, organization membership information, subscription status, supplier uploads, product analysis activity, watchlist items, purchase orders, inbound shipment records, and authorized Amazon SP-API data needed to provide the service.

Supplier price lists are retained after they are processed, not only while they are being matched. Keeping past uploads is what lets the service show how a supplier's prices moved over time and what you actually paid; a list you upload today remains associated with your workspace until you delete it or your account.

Payment information is processed by Stripe. Scoutly Pro does not store full card numbers.

We use information to operate Scoutly Pro, authenticate users, process subscriptions, analyze products, match supplier catalog rows to Amazon identifiers, calculate profitability, monitor alerts, and support authorized Amazon seller workflows.

When a seller authorizes Scoutly Pro, we use Amazon SP-API only for authorized seller and marketplace functions. In practice this means we read and store, for your workspace: catalog and product data; pricing and featured-offer data; referral and fulfilment fee estimates; listing restrictions and eligibility; orders and order items; financial events and settlement reports; FBA inventory, inventory ledger, and reimbursement reports; inbound shipment plans, receipts, and shortages; and the review-request status of recent orders.

We keep this data so the service can show your profit, costs, and reconciliations over time. Financial events and settlement reports are stored rather than fetched on demand because Amazon publishes them for a limited window, and an accounting figure that disappears when Amazon stops serving it is not an accounting figure.

Amazon refresh tokens are encrypted before storage and are never returned to the browser.

Amazon orders carry limited buyer information. Scoutly Pro stores only the city, state or region, and country of an order's shipping address, and uses them for one purpose: the map that shows where your sales come from. We do not collect or store buyer names, email addresses, phone numbers, or street addresses.

Amazon redacts shipping addresses on older orders, in which case no location is stored at all.

We do not sell seller data, and we do not share it for cross-context behavioural advertising. We use trusted providers only as needed to provide the service: Clerk (authentication), Supabase (database), Stripe (payments), Vercel (hosting, plus Vercel Analytics and Speed Insights, which record anonymous page views and performance timings and set no cross-site cookies), Upstash Redis (rate limiting, which stores request counters keyed to your workspace and no content), Resend (transactional email such as your welcome, trial, billing and price-alert messages), Sentry (error monitoring, which receives the technical details of a failure together with your user and workspace identifiers so we can trace it, never your supplier files or Amazon data), and Amazon SP-API (the seller data you authorize).

Each provider processes data only on our instructions and only for the purpose listed beside it. If your business needs a data processing agreement, write to support@scoutlypro.com and we will sign one.

Scoutly Pro is operated from the United States and your data is processed there, including when you sell on Amazon.ca, Amazon.com.mx or Amazon.com.br. Our providers may process data in other countries under their own terms. If you are in a country whose law restricts transfers abroad, using Scoutly Pro means your data will be processed in the United States.

Scoutly Pro uses HTTPS, tenant-scoped access controls, server-side authorization checks, encrypted token storage, private supplier upload handling, webhook signature verification, and least-privilege secret handling. No system can guarantee zero risk, but security is a baseline design requirement.

No provider can promise that a breach will never happen, so here is what we do if one does. We investigate as soon as we learn of it and work to contain it. Where an incident affects your account or your data, we notify you by email without undue delay and in any event within seventy-two hours of confirming it, and we tell you what happened, which data was involved, what we have done, and what you should do.

Where authorized Amazon data is involved, we also notify Amazon within twenty-four hours of confirming the incident, as the Amazon Selling Partner API Data Protection Policy requires, and we maintain a written incident response plan for that purpose. Where the law requires us to notify a regulator or an affected individual, we do that as well and within the deadline that applies.

We retain account and workspace data while your account is active, and some records for longer where law, tax, security, or fraud prevention require it. The periods below are the ones the service actually applies.

Price history is kept for 400 days, so that a year-over-year comparison always has the year before it to compare against. Competing sellers' listing prices are kept for 90 days. Catalog and eligibility cache rows expire on their own schedule and are purged daily. Error reports held by Sentry follow Sentry's retention window. Rate-limiting counters at Upstash expire within hours and never contain content. Invoices and payment records are kept for seven years because United States tax law requires it.

Everything else — supplier lists, product analysis, purchase orders, watchlists, inbound shipments, orders and financial events — is kept for as long as the workspace exists, because it is your accounting history and it has to stay auditable.

If a free trial ends without a payment method, the workspace is paused, not deleted. Nothing is deleted when the trial ends: we do not delete the workspace for at least 30 days after that date (the routine clean-ups described above keep running), so that subscribing lets you carry on where you left off. After those 30 days we may delete the paused workspace and everything in it — the same data that deleting your account removes — except the invoices and payment records described above. You can also delete it yourself at any time from Settings.

Deletion is self-service: from Settings you can clear your workspace data (products, purchase orders, batches, expenses) or delete your account entirely, which removes the workspace and everything in it. Deleted data goes from the live database immediately and from our provider's encrypted backups as those backups age out, within 35 days. You do not need to write to support to delete anything, although support@scoutlypro.com will help if something goes wrong.

Wherever you live, you can see the data in your workspace, export it, correct it, and delete it — the first three from the app, the fourth from Settings. If you would rather we did it, or you want to know what we hold outside the app, write to support@scoutlypro.com and we will answer within 30 days.

Depending on where you live you may also have the right to object to or restrict processing, to receive your data in a portable format, and to complain to your data protection authority — in Brazil the ANPD, in Mexico the INAI, in Canada the OPC. We do not charge for any of this and we will not treat you differently for asking.

Scoutly Pro is a business tool and is not directed at children. We do not knowingly collect data from anyone under 18. If you believe a minor has created an account, write to support@scoutlypro.com and we will delete it.

We may update this policy as the service changes. When a change materially affects what we collect or how we use it, we will tell account holders by email before it takes effect. The date at the top of this page always reflects the version in force.

This policy is published in English, Spanish and Portuguese. The English version is the one that governs; if a translation and the English text differ, the English text applies.

Questions can be sent to support@scoutlypro.com. Scoutly Pro is operated from Florida, United States.