Privacy Policy

1. Introduction

Ingenious Bidding ("we," "us," or "our") is committed to protecting your privacy and the security of your personal and business information. This Privacy Policy explains how we collect, use, store, protect, and share information when you use LedgerCore (the "Application"). By using our Application, you consent to the practices described in this policy.

2. Information We Collect

We collect the following types of information:

2.1 Account Information

• Email address
• Name and contact information
• Authentication credentials (securely hashed)
• Account preferences and settings

2.2 Amazon Seller Information (via SP-API)

With your explicit authorization, we access the following data through the Amazon Selling Partner API:

• Orders, sales, and transaction data at the SKU/ASIN level
• Inventory summaries, FBA inbound/outbound information
• Financial events, fees, refunds, and settlements
• Traffic and conversion metrics (sessions, page views)
• Brand analytics and selling partner insights

2.3 User-Provided Business Data

• Cost of Goods Sold (COGS)
• Inbound shipping costs
• Prep and storage cost assumptions
• Other custom cost inputs for ROI calculations

3. How We Use Your Information

We use the collected information exclusively for the following purposes:

• Service Delivery: To provide analytics, metrics, and profitability calculations
• Dashboard Features: To display sales trends, inventory status, and financial metrics
• ROI Calculations: To combine Amazon data with your cost inputs for accurate profit analysis
• Account Management: To authenticate users and manage account access
• Product Improvement: To enhance and develop new features based on aggregate usage patterns
• Support: To respond to inquiries and provide customer assistance

4. Data Storage & Protection

We implement enterprise-grade security measures to protect your data:

• Encryption in Transit: All data transmitted between your browser and our servers is encrypted using TLS/SSL protocols
• Encryption at Rest: Stored data is encrypted using industry-standard encryption algorithms
• Network Security: Firewalls, IDS/IPS, anti-virus/anti-malware, and network segmentation
• Access Control: Role-based access restricts data access to authorized personnel based on job duties
• Authentication: Multi-Factor Authentication (MFA) enforcement with 12-character minimum passwords with special characters
• Credential Security: No credentials are stored in public repositories, shared, or hard-coded into applications
• Password Policy: 365-day password expiration and annual rotation requirements

5. Data Sharing Policy

All data processing is performed in-house, and Amazon data is encrypted and restricted to authorized personnel only. We may only disclose information in the following limited circumstances:

• Legal Requirements: When required by law, court order, or governmental authority
• Safety: To protect rights, property, or safety of users or the public
• With Your Consent: When you explicitly authorize disclosure

6. Data Sources

We exclusively retrieve Amazon Information from the official Amazon Selling Partner API (SP-API). We do NOT use:

• Legacy Amazon MWS (Marketplace Web Service) connections
• Web scraping or screen scraping tools
• Unauthorized third-party data sources
• Any other unofficial Amazon data access methods

7. Data Retention & Deletion

We retain your data only as long as necessary to provide our services:

• Active Accounts: Data is retained while your account remains active
• Account Deletion: Upon account deletion request, we will delete your personal data and Amazon Information within 30 days
• Authorization Revocation: If you revoke SP-API authorization, we will stop accessing new data and delete existing Amazon data within 30 days
• Legal Obligations: Some data may be retained longer if required by law or for legitimate business purposes (e.g., fraud prevention)

8. Your Rights

You have the following rights regarding your personal data:

• Access: Request a copy of the data we hold about you
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your data
• Portability: Request your data in a machine-readable format
• Withdraw Consent: Revoke SP-API authorization at any time through Amazon Seller Central
• Objection: Object to processing of your data in certain circumstances

To exercise these rights, contact us at accounts@ingeniousbidding.com.

9. Security Incident Response

We maintain a comprehensive incident response plan:

• Defined roles and responsibilities for incident response
• 6-month review cycles of security procedures
• 24-hour incident notification procedures
• Security incidents involving Amazon Information are reported to security@amazon.com within 24 hours of detection

10. Amazon SP-API Compliance

As an authorized Amazon Selling Partner API solution provider, we comply with:

• Amazon Services API Solution Provider Agreement
• Amazon Acceptable Use Policy
• Amazon Data Protection Policy (DPP)

Our application only accesses the data necessary for the features we provide, and we do not create, modify, or manage listings, pricing, fulfillment, or buyer communications.

11. Cookies & Tracking Technologies

We use essential cookies to maintain your session and authentication state. We do not use third-party advertising or tracking cookies. You can control cookie settings through your browser preferences.

12. Children's Privacy

LedgerCore is designed for business use and is not intended for children under 18. We do not knowingly collect information from children.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated effective date. We encourage you to review this policy periodically. Continued use of the Application after changes constitutes acceptance of the updated policy.