Privacy Policy

The short version

• We collect your Amazon sales, fee, refund, settlement, and inventory data, plus the costs you enter, to calculate your true profit.
• We do not collect your Amazon customers' personal information (no buyer names, addresses, or emails).
• Your Amazon connection tokens are encrypted, and each seller's data is isolated from every other seller.
• We never sell your data or use it for advertising.
• You can delete everything yourself, any time, from Settings → Data & privacy.

Who we are

Black Hills Pro ("we", "us") is a profit-tracking tool for Amazon FBA sellers, operated by Cerplas Thai Co. Ltd., located at 9/78 Sakae Ngam Road, Soi Sakae Ngam 35, Bang Khun Thian, Bangkok 10150, Thailand. This policy explains how we handle the information you and your Amazon account provide when you use the service.

What we collect

Amazon data (read-only)

When you connect your Amazon account, we read the following through Amazon's official Selling Partner API and, if you connect it, the Advertising API:

• Orders, order IDs, dates, SKUs/ASINs, product names, quantities, item prices, and order status. Not buyer names, addresses, or contact details.
• Financials, Amazon fees (referral, fulfillment, storage, and other named fees), refunds and their components, reimbursements, and settlement/payout records.
• Inventory & catalog, SKUs, product titles, stock levels (fulfillable, inbound, reserved), and listing status, per marketplace.
• Advertising (only if you connect Amazon Ads), ad spend and campaign performance by SKU and day.
• Your Amazon identifiers, your seller ID and marketplace IDs.
• Connection tokens, the encrypted refresh tokens that let us fetch the above on your behalf.

Data you enter

• Product costs (and their effective-dated history), shipping and import cost rules, and warehouse stock counts.
• Suppliers you add, including any contact details you choose to type in (name, email, phone, messaging handles). These are your business contacts, entered by you.
• Purchase orders, expenses, alert thresholds, packing records, label sizes, and your app preferences.

Account data

Your email address and a securely hashed password (handled by our authentication provider), and an optional display name.

What we do NOT collect

• Amazon customers' personal information, no buyer names, shipping addresses, phone numbers, or emails.
• Payment card details, these are entered directly with our payment processor (Stripe) and are never stored on our servers.
• We do not track you across other websites.

Why we collect it

Only to provide the service to you: to calculate your true net profit, show your fees, refunds, payouts and inventory, alert you to changes (like fee increases or low stock), and keep your account secure. We do not use your data for any unrelated purpose.

How we protect it

• Encrypted tokens. Your Amazon refresh tokens are encrypted at rest with AES-256-GCM. The encryption key is stored separately from the database, so a database copy alone cannot reveal them.
• Data isolation. Every seller's data is walled off at the database layer (row-level security), not just in application code.
• Hardened sessions. Login sessions use httpOnly, secure, same-site cookies; passwords are hashed by our authentication provider and never stored by us; changing your password requires your current one.
• Encryption in transit. All traffic runs over HTTPS. Our APIs are rate-limited and served with strict security headers.
• At-rest storage. Our database provider encrypts stored data at rest as part of its platform.

No system is perfectly secure, but we design to protect the most sensitive item, your Amazon tokens, even against a database compromise.

Who we share it with

We do not sell or rent your data, and we don't share it for advertising. We use a small number of service providers to run the app, each handling only what's needed:

• Amazon, the source of your selling data, accessed through its official APIs with your authorization.
• Supabase, our database, authentication, and account emails (such as password resets).
• Vercel, our hosting provider, which serves the application and processes requests.
• Stripe, our payment processor, which handles subscription billing and your payment details. We never see or store your full card number.

We may also disclose data if required by law, or to protect the rights and safety of our users and the service.

How long we keep it

We keep your data while your account is active. When you delete your account, your data is removed immediately (see below). If you cancel but do not delete your account, we keep your data for up to 30 days, after which data from inactive accounts is deleted.

Your choices & deletion

• Disconnect Amazon at any time from Settings, this deletes your stored Amazon tokens and stops all syncing.
• Delete everything, yourself. Go to Settings → Data & privacy → Delete account. This permanently removes your login, your Amazon connection and tokens, and all of your synced and entered data. It cannot be undone.
• Prefer we do it? Email us (below) and we will delete your account and data for you.
• You can also revoke Black Hills Pro's access from your own Amazon Seller Central account at any time.

Cookies

We use only essential cookies: to keep you signed in, and to secure the Amazon connection process. We do not use advertising, analytics, or cross-site tracking cookies. Your browser also stores a few app preferences (like your theme choice) locally on your device.

Children

Black Hills Pro is a business tool for Amazon sellers and is not directed at children. We do not knowingly collect information from anyone under 18.

Changes to this policy

If we change this policy, we'll update the date at the top and, for material changes, let you know in the app or by email. Continuing to use the service after a change means you accept the updated policy.

Contact

Questions about your privacy or a data request? Email support@blackhillspro.com. We read and respond to every message.