Privacy Policy

Last updated: April 1, 2026

What SellerBeam is

SellerBeam is a browser extension that connects to your Amazon Seller Central account via the Amazon Selling Partner API (SP-API). It pulls product data — like pricing, fees, sales rank, and listing eligibility — and displays it in your browser while you shop on Amazon.

SellerBeam does not access orders, customer names, addresses, or any personally identifiable information (PII). Everything we access is product and market data only.

What data we access

When you use SellerBeam, we access the following through Amazon's SP-API:

  • Product details (title, category, dimensions, weight)
  • Best Sellers Rank (BSR)
  • FBA fee estimates
  • Listing eligibility for your seller account
  • Offers and seller count on a listing

We do not access, store, or process any customer PII such as names, addresses, email addresses, or payment information.

Browser permissions & data sent

The extension requests the following browser permissions:

  • activeTab — to read product information from the Amazon page you are currently viewing
  • storage — to store your authentication token locally so you stay logged in between sessions
  • scripting — to inject the SellerBeam sidebar into Amazon product pages

We do not collect your browsing history or any Amazon pages other than product pages where you actively use the extension.

Data sent to our backend to calculate results:

  • The product ASIN
  • Prices you enter manually (cost price, sale price)
  • Storage duration you enter
  • Your authentication token (to verify your account)

This data is used solely to calculate FBA fees, profit margins, BSR, and eligibility. It is not retained after the response is returned to your browser.

How your Amazon credentials are stored

Your SP-API credentials (Client ID, Client Secret, and Refresh Token) are encrypted at rest using AES-256 and never exposed in plain text or shared with third parties.

All communication between SellerBeam and Amazon's servers uses HTTPS/TLS 1.2 or higher.

Data retention

Data typeRetention
SP-API product dataNot stored — fetched live and displayed only
API credentialsRetained until account deletion
Browser auth token (Supabase JWT)Stored locally until logout
Daily search counts90 days
Hashed network identifier (trial abuse)90 days
Security logs12 months minimum

Amazon API data is not cached or permanently stored beyond display needs.

Plan limits and trial abuse prevention

The Free plan allows a limited number of product searches per day. To enforce that, we store a count of how many searches your account made on a given day. We do not store which products you looked at — no ASINs, no product titles, no URLs, not even in hashed form.

New accounts receive a free trial month. To stop the same person claiming it repeatedly, we record a salted cryptographic hash of the IP address the account was first seen from, together with the account it belongs to. We never store the IP address itself.

We want to be precise rather than reassuring here: because the IPv4 address space is small, a salted hash of an IP address is pseudonymised personal data under the GDPR, not anonymous data. It is treated as personal data accordingly — access is limited to the service backend, it is never shared, and records are deleted after 90 days.

If you were refused a free trial because someone else on your network had already claimed one — which can happen on shared office, university, or mobile carrier connections — email support@sellerbeam.io and we will enable it for you.

Third-party services

Vercel hosts the backend API; Supabase provides authentication. Both are bound by data processing agreements. No data is sold or shared with any other third parties.

Security

SellerBeam implements controls aligned with Amazon's Data Protection Policy:

  • AES-256 encryption at rest for credentials
  • TLS 1.2+ for data in transit
  • Access controls using least-privilege principles
  • Regular vulnerability scanning and patching
  • Incident response with Amazon notification within 24 hours

Your rights

Account deletion and associated data removal may be requested at privacy@sellerbeam.com, processed within 30 days.

Contact