Privacy Policy

1. Information We Collect

Account Information

When you sign up, we collect your name, email address, company name, and phone number. Payment information is collected and processed by Stripe; we do not store credit card numbers.

Amazon Vendor Central Data

With your authorization, we collect financial data from your Amazon Vendor Central account including remittance records, chargebacks, co-op deductions, purchase orders, and dispute information. This data is collected through authorized API access that you grant by inviting our service account to your Vendor Central.

Usage Data

We collect basic usage information such as login times, pages viewed, and features used to improve the Service.

2. How We Use Your Information

• To provide the audit service and generate financial analysis reports
• To create and manage your account
• To process payments through Stripe
• To communicate with you about your account and service updates
• To improve the Service based on usage patterns

We do not sell, rent, or share your personal information or business data with third parties for their marketing purposes.

3. Data Storage & Security

Your data is stored on Google Cloud Platform (GCP) infrastructure in the United States. We use:

• Encryption in transit (TLS 1.2+) and at rest (AES-256)
• Role-based access controls
• Google Cloud's SOC 2 Type II certified infrastructure
• Automated security monitoring

4. Third-Party Services

We use the following third-party services to operate:

• Stripe — payment processing (Stripe Privacy Policy)
• Google Cloud Platform — data storage and computing
• Auth0 — authentication
• SendGrid — transactional email
• Amazon Vendor Central — data source (accessed with your authorization)

5. Data Retention

We retain your data for the duration of your active subscription plus 90 days. After this period, all data is permanently deleted. You may request early deletion at any time by contacting support@workflowlabs.net.

6. Your Rights

You have the right to:

• Access the data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Export your audit data in CSV format
• Revoke our access to your Vendor Central account at any time

7. Cookies

The Service uses session cookies for authentication. We do not use tracking cookies or third-party advertising cookies.

8. Changes to This Policy

We may update this policy from time to time. Material changes will be communicated via email. The "Last updated" date at the top indicates the most recent revision.

9. Contact

For privacy-related questions or data requests, contact us at support@workflowlabs.net.