Privacy and your data
Where your data lives, what the website can see, and what deleting actually deletes.
The one-sentence version
Your sales, royalties and advertising data are read into a database inside your own browser, stay there, and are never uploaded — and MerchPPC never sees, asks for, or has anywhere to put your Amazon password.
What lives where
In your browser. Your listings, sales history, royalties and advertising data — the whole database, including the raw responses Amazon sent. Your Lookout rules, tags, notes and goals. All of it in this browser profile's storage.
On merchppc.com. Your account and the email address you sign in with; which browsers are connected to it, what extension version each runs and when it was last seen; your plan; and any assistant grants you approved, with an audit row per assistant call.
There are smaller records too — security events, billing, where a signup came from, errors the servers hit. The full list, with how long each is kept, is on the privacy policy. That page is the authoritative inventory and it is held to it by a test that reads the database schema, so it cannot quietly fall behind.
None of it is your sales, royalties or advertising data.
How it reads Amazon
The extension signs in as you, in your browser, using the session you already have — the same pages and reports you could open yourself, fetched at a rate-limited pace with backoff.
It changes nothing on Amazon without a row in the Publish queue that you approved.
You will never be asked for your Amazon password. If anything ever asks you for it, that is not us.
When you connect an account
Connecting to merchppc.com authenticates the extension's connection. It does not upload your database.
If you switch on an assistant integration, questions and answers pass through our relay while you use it, and the relay stores neither. Claude and ChatGPT are separate grants, each revocable in one click at Account → Assistants.
What deleting looks like
Uninstall the extension, or clear the browser's storage. The local database is gone. Nothing of it exists anywhere else; a re-install re-syncs from Amazon, slowly.
Revoke an assistant grant. That assistant loses access immediately. The other grant is untouched.
Delete your MerchPPC account. Asking us to erase it starts a seven-day countdown, and nothing is destroyed until it runs out — cancelling in the meantime leaves nothing behind. When it runs, every table that points at your account is emptied. A few records are not attached to your account and survive; the privacy policy names each one and says why, rather than letting you assume otherwise. Your local database — your data — stays yours, in your browser.
The trade, in both directions
Nobody else holds your numbers, and there is no cloud backup either. A second computer starts its own sync from zero. Data health and sync covers what that means day to day.