Privacy Policy

1. Who we are

SwissHelvetia operates this website and the applications hosted on it. For any privacy question, contact us using the details in the footer of the homepage.

2. Information we handle

• Sign-in identity. When you sign in with Google we receive your name, email address and profile picture. Google identifies you; it does not give us access to Amazon.
• Amazon seller data. If you connect an Amazon seller account, we read your financial events, settlement reports, inventory and advertising reporting through Amazon's Selling Partner API. Access is read-only: the application cannot create, change or delete anything in your Amazon account.
• Credentials. Amazon refresh tokens are encrypted at rest with AES-GCM. They are stored server-side only and are never sent to your browser, written to logs, or placed in a URL.
• Account data you provide. Cost of goods, accounting-period settings, VA compensation settings and any reported P&L figures you enter.
• Security records. Sign-in time and IP address are recorded in an internal audit log for security review. This is our own record and is never sent to Amazon or attached to Amazon API requests.

3. Image conversion

The image converter runs in your browser. Images are not uploaded unless you explicitly opt in to the Worker-assisted transcode for TIFF/HEIC files, which is stateless and stores nothing.

4. What we do not do

• We do not sell or rent your information.
• We do not use your Amazon data for advertising.
• We do not request Amazon buyer personally identifiable information. We do not request restricted Amazon roles that would give access to it.
• We do not forward your IP address or browser information to Amazon.

5. Sharing

We share information only with the providers needed to run the service: Cloudflare (hosting) and Amazon (to read your seller data at your request). Team members you invite see the seller data you grant them access to, according to the role you assign.

6. Retention and deletion

Synced data remains until you delete it or disconnect the store. Disconnecting a store removes the stored Amazon authorization from our side immediately. You can request deletion of your account data at any time.

7. Your choices

You can sign out at any time, disconnect an Amazon store, or revoke SwissHelvetia's access from your Amazon account. Revoking access in Amazon stops all future data retrieval.

8. Security

All traffic is served over HTTPS. Credentials are encrypted at rest, sessions are server-side with hashed tokens, and access to seller data is enforced server-side per user.

9. Changes

We may update this policy; the date above reflects the current version.