What SellerPilot can and cannot do with your Amazon account
SellerPilot changes real campaigns, listings and prices, so control and security are part of the product: approvals, limits, a full log, encrypted logins and data you can delete.
SellerPilot never sees your Amazon password, encrypts Amazon tokens with AES-256-GCM, stores data in the EU (Germany), never stores buyer names or addresses, and makes changes only on your approval or inside your autopilot limits, each logged and undoable.
How we protect your account
No passwords
You approve SellerPilot on Amazon's pages (OAuth). We receive a revocable token, never your password.
Encrypted logins
Amazon tokens are encrypted at rest with AES-256-GCM, with a key kept apart from the database.
Every seller separated
Each seller's data is isolated to their own account on every request, and checked again where the data is stored. An Amazon Ads profile can only be linked to the store it belongs to.
Encrypted, stored in the EU
Everything travels over TLS and is encrypted at rest. Your SellerPilot data is stored in the European Union (Germany). SellerPilot AI sends the question and the store figures needed to answer it to our AI model provider, which processes them outside the EU and the UK, including in China.
Approvals and limits
Changes need your approval unless you turn on the autopilot, which works inside your caps and limits.
Everything logged
Each change is checked on Amazon after it is made, written to the change log with its reason, and can be undone.
Data you control
Delete all your data and stored logins from your account page. Buyer names and addresses are never stored.
Limited data to AI
Your data runs SellerPilot for you: never sold, never shared for advertising, and SellerPilot never trains AI models on it. SellerPilot AI sends its model provider only the question and the figures needed to answer it, never buyer names or Amazon logins.
Amazon's rules for your data
SellerPilot is listed on the Amazon Selling Partner Appstore and follows Amazon's Data Protection Policy and Acceptable Use Policy for the data you authorize.
- Only the data a feature needs is requested, and only for the seller who authorized it
- Buyer personal information (names, email addresses, phone numbers, street addresses) is never stored
- Amazon tokens are encrypted, and you can revoke them in Seller Central, Vendor Central or Amazon Ads at any time
- Access to production systems is limited to the people who run the service
Data we keep, and for how long
| Data | Kept |
|---|---|
| Daily totals, orders (without buyer names or addresses), search share, ranks, buyer messages sent | 2 years |
| Seller feedback and A-to-z claims and chargebacks | 3 years |
| Payments, refunds, fees and reimbursements from Amazon | 25 months |
| Email and WhatsApp send logs | 13 months |
| Change log and approvals | 2 years |
| Raw advertising report rows (totals are kept per day) | 60 days |
| Alerts and job history in your account | 1 year |
| Closed suggestions and finished schedules | 6 months |
| Technical server logs | 30 days |
| Invoices and billing records | As long as tax law requires |
| Everything, after your plan ends | Kept until you ask us to delete it, so you can come back |
| Everything, after you delete your account data (account page or email) | Deleted at once from the account page; within 30 days of an emailed request |
Who helps us run SellerPilot
Each provider, the job it does and where it processes data.
| Provider | Used for | Where |
|---|---|---|
| Amazon (Selling Partner API, Amazon Ads API) | Your store and advertising data, and the changes you approve | Amazon's regions |
| Supabase (database and hosting) | Stores your SellerPilot data and runs the service, encrypted in transit and at rest | EU (Frankfurt) |
| Stripe | Payments and receipts (card details stay with Stripe) | Stripe's regions |
| Resend (email delivery) | Sign-in links, receipts and the emails you choose to get | Resend's regions |
| AI model provider | Ask SellerPilot and Write with AI when you use them, and the daily note each morning (switch it off in Settings › Notifications): your question and the store figures needed to answer it; no buyer personal data and no Amazon login. Its terms do not rule out using what it receives to improve its models. | Outside the EU and UK, including China |
| Meta (WhatsApp Business Platform) | Only if you switch on WhatsApp alerts: your number and the alerts | May be outside the EU and UK |
| Website hosting provider | Serves this public website and passes AI-assistant connections (mcp.getsellerpilot.com) to the service (encrypted in transit; nothing stored) | Malaysia |
| Claude or ChatGPT, if you connect them | Only when you connect your own assistant; your questions and answers then go through your own account with its provider | Your provider's terms |
Each provider processes data to provide its service to us. Transfers outside the EU and the UK use Standard Contractual Clauses (and the UK addendum) where the provider offers them; our AI model provider does not, which is why SellerPilot AI never receives buyer personal data or Amazon logins. The full list of sub-processors is available on request: write to support@getsellerpilot.com with the subject “Sub-processors”.
Report a problem
Found a security issue? Write to support@getsellerpilot.com with the subject “Security”. We aim to acknowledge it within one business day.