Privacy Policy

Last updated 21 October 2026

AtoZ Arbitrage (“AtoZ”, “we”) runs atozarbitrage.online: a book scanner and Amazon arbitrage tool for sellers. This page says what we collect, why, who we share it with, how long we keep it and how you can have it deleted. Questions: info@atozarbitrage.online.

What we collect

  • Your account: email address, name if you give one, and a password stored only as a one-way hash (or your Google sign-in).
  • Devices: browser and device type, IP address and first/last use, so one login can be limited to one device and you can see where your account is used.
  • Subscription: your plan and its status. Payments are handled by Stripe; we never see or store card numbers.
  • What you do in the app: books you scan (ISBN, condition, the prices and fees shown), your batches, buy rules, notes and saved templates.
  • Feedback you send: the message, any pictures, and a name or email if you add them.
  • Your Amazon seller account, only if you connect it: your merchant (seller) ID and the authorisation Amazon gives AtoZ for your account (a refresh token), plus Amazon's answers about whether your account may list a product.

Amazon seller data

Connecting an Amazon seller account is optional. When you connect one, AtoZ uses Amazon's Selling Partner API on your behalf to:

  • ask whether your account may sell a product (listing restrictions, New or Used) — shown on the Scanner, Products and the “Can I sell it?” check;
  • read public product information (catalog details, current offers, Amazon's fee estimate) for the books and products you look up;
  • create a listing on your account only when you press a button to do so (for example “List on Amazon” in Book intake).

We do not access your orders, your customers' names, addresses or other personal information, your payments or your reports. We never sell Amazon data, never use it to advertise, and never share it with other users. Your authorisation is stored encrypted (AES-256-GCM) and is never shown back, not even to you.

You can disconnect at any time on the Plans page. Disconnecting deletes your authorisation and the approval answers we stored for your account immediately. You can also remove AtoZ's access from your side in Seller Central (Apps and Services → Manage Your Apps).

Why we use it

  • to run the service you signed up for: scanning, profit figures, approval checks, listings you ask for;
  • to secure your account (sign-in, device limit, abuse prevention);
  • to bill your subscription and answer your messages.

We do not sell personal data and do not use advertising or tracking cookies.

Who we share it with

Only the services needed to run AtoZ, each for its own part:

  • Amazon (Selling Partner API) — the requests above, for your own account;
  • Keepa — product identifiers (ASIN/ISBN) to read price and sales-rank history; no personal data;
  • Stripe — payments and subscriptions;
  • DigitalOcean (servers and database, United States) and Vercel (web pages) — hosting;
  • our email provider — to send sign-in, password and contact emails.

We may disclose data if the law requires it.

Cookies and storage

We use two essential cookies: one keeps you signed in, one identifies your device for the one-device limit. Your browser also remembers a few display choices (for example the last batch you opened). There are no advertising or analytics cookies.

How long we keep it

  • account, scans and settings: while your account exists;
  • Amazon authorisation and approval answers: until you disconnect, or your account is deleted;
  • device records: the last 30 days are shown; older entries are removed with your account;
  • backups: rotated after 7 days.

Your choices and rights

You can see and change your data in the app, disconnect your Amazon account at any time, and ask us for a copy of your data, a correction, or deletion of your account by writing to info@atozarbitrage.online. We delete an account and its data within 30 days of the request (backups follow within 7 days). Depending on where you live (for example the EU, UK or California) you may have further rights, including complaining to your data protection authority.

Security

All traffic uses HTTPS. Seller authorisations are encrypted at rest. The database and cache are not reachable from the internet, and access to the servers is limited to the operator. If we ever learn of a breach affecting your data we will tell you, and Amazon where Amazon data is involved, without undue delay.

Children

AtoZ is a business tool for adults. It is not meant for anyone under 18.

Changes

We will post changes here and update the date above. Important changes are announced in the app or by email.