Six straight answers, before you have to ask.
Your exports hold your revenue, your margins, your costs and your weak spots. We treat them as the most sensitive thing you own.
-
We ask for the least the work needs.
On Amazon, one Seller Central user with exactly four permissions: Business Reports view, Fulfillment reports view, Pricing edit and Campaign Manager edit. On Shopify, one staff account whose role is limited to orders, products, discounts and analytics reports, with no access to Finance or payouts; payout exports come from you, by upload.
Neither can touch banking, tax, payouts or account settings, and either is revocable any day: on Amazon in one click, on Shopify by removing the staff account under Settings → Users. Or grant no seat at all and upload the reports yourself.
-
It lives in one place.
One database and one file store, encrypted in transit and at rest, with every read scoped to your workspace alone. One person, the founder, holds access to production. Upload links do one job and expire after ninety days.
Ask what we hold of yours and where, and you get a straight answer within seven days.
-
What we never do.
Never sold. Never used to advise another client. Your raw reports, uploads and credentials are never sent to an AI provider: the model that drafts the wording of your briefs sees a short table of results our engine already computed, and our code rejects any draft containing a number the table did not supply.
Anything pooled across accounts needs your separate yes, and even then it is an anonymous aggregate, never a figure of yours, your name, a SKU or an ASIN.
-
If something goes wrong, you hear it from us.
If we learn of a breach affecting your data, we tell you within seventy-two hours of confirming it: what happened, and what we are doing about it.
-
It stays yours.
Your data and your whole Profit Record export free, any day, within one working day, including the day you leave.
Ask, and your reports, uploads and model outputs are deleted within thirty days. We keep only what invoicing and the law require, and any result you agreed we may publish in anonymised form.
-
Who else touches it.
A short list of providers, each named with what it does in the privacy policy: database and storage, hosting, email, scheduling, invoicing, the voice and wording of your briefs, video hosting, and the job that runs your weekly monitoring. Nothing is added to that list without the page changing first.
The binding versions are the privacy policy and sections 10 and 11 of the terms. This page says the same thing in fewer words.