DRAFT: must be reviewed by a lawyer before launch. Every [PLACEHOLDER] must be filled in. The facts below describe the Service as built in October 2026.

Privacy Policy

This policy explains what personal data Leviathan Sellers (the "Service") collects, why, who receives it and how long it is kept. The Service is provided by [LEGAL ENTITY NAME], [REGISTERED ADDRESS] ("we", "us"). [DATA PROTECTION CONTACT OR GRIEVANCE OFFICER, IF REQUIRED] [EU OR UK REPRESENTATIVE, IF REQUIRED]

Questions and requests: [email protected].

1. What we collect

When you sign up: your name, your company's name, your work email address, and a password, of which we keep only a one-way hash. We also record when you accepted the terms, your IP address, the page that referred you, and the utm_source of the link you came from.

When you confirm your email or reset a password: a code or link that we keep only in hashed form, deleted once used, replaced or expired.

Business details (asked once, after your workspace is ready): the Amazon marketplaces you sell on, how you fulfil orders, and optionally your number of products, a phone or WhatsApp number, how you heard of us, and your Amazon Seller ID. The Seller ID is optional and helps our support team identify your Amazon account.

Your team: the details your administrator enters for other users (name, email, and optionally designation, mobile, date joined, address, department and employee ID).

What you upload and enter: the rows of the Amazon reports you upload (not the files themselves), notes, cases and bank statement lines you enter, and the files you attach (PDFs and images, and spreadsheet or text files on removal receipts).

Information about your own customers: Amazon reports can include your buyers' order IDs, delivery city, state and postal code, and the comments they write when returning an item. We store these as part of your reports. We never store buyers' names, email addresses, phone numbers or street addresses. [LAWYER: OUR ROLE FOR THIS DATA]

Technical data: your IP address, used for rate limits, the bot check, and the sign-in history your administrator can see. We do not record your browser's user agent. Section 5 lists the cookies.

2. Why we use it

• To provide the Service: your account, your workspace and its calculations.
• To keep it secure: sign-in, ending other sessions when a password changes, rate limits, bot checks, and audit logs of sign-ins and changes.
• To send you the emails the Service needs (section 4).
• To support you, including identifying your Amazon account when you ask for help.

We do not sell personal data, and we do not use advertising or analytics trackers.

[LEGAL BASIS FOR EACH PURPOSE]

3. Who receives it

• Resend, which delivers our emails, receives each email's address and content.
• Cloudflare, which runs the bot check on the signup and password-reset pages, receives the check's result token and your IP address, and runs its own check in your browser.
• DigitalOcean hosts the Service and its databases, in Bangalore, India, and stores the files you attach (DigitalOcean Spaces) in Singapore, privately, in a folder for your company that only your signed-in users can download from.
• Within our company, the people who operate the Service can see each company's account details (owner, business details, dates, signup IP and referrer) in our admin console, and have technical access to all data in order to run the Service.
• Within your company, your administrators can see your team's details and the audit log, including the IP addresses of sign-ins.

[INTERNATIONAL TRANSFERS AND SAFEGUARDS]

4. Emails we send

A verification code when you sign up; a note when your workspace is ready; a password-reset link when you ask for one; and a notice whenever your password is changed. We send no marketing email.

5. Cookies and local storage

• Sign-in cookies (authjs.session-token, authjs.csrf-token, authjs.callback-url): keep you signed in. The session ends after an hour without activity, after 10 idle minutes in an open tab, when you sign out, or when your password changes.
• A preference cookie (unverified-mp-dismissed-…, one year): remembers that you dismissed the marketplace notice.
• Local storage in your browser remembers the sidebar's state and your table column choices, and coordinates the idle sign-out between tabs.

Our fonts are served from our own domain. Apart from the Cloudflare bot check, the Service loads no third-party scripts. [COOKIE CONSENT POSITION]

6. How long we keep it

• Signups that are never confirmed: deleted after 7 days.
• Rate-limit records: deleted after 24 hours.
• Email codes: deleted 24 hours after use or expiry. Password-reset links: deleted when used, replaced or expired.
• Your account and workspace data: kept while your account exists. When a trial ends, the workspace becomes read-only and nothing is deleted.
• After cancellation: your data is kept for 30 days and can be restored during that time. After that, our staff delete it [HOW SOON AFTER THE 30 DAYS]: your workspace's database with everything you uploaded and entered, every file you attached, your users' accounts, and your company's details. We keep only a record with no personal data in it: that your company existed, and when it was cancelled and its data deleted. Copies can remain for a limited time in our hosting provider's backups [BACKUP RETENTION PERIOD], and emails we have already sent stay with their recipients and our email provider [EMAIL PROVIDER RETENTION].
• Audit logs and sign-in records: [RETENTION PERIOD]. Today they are not deleted automatically.

7. Security

Passwords are stored only as bcrypt hashes. Verification codes and reset links are stored only as keyed hashes. Each customer company's business data lives in its own database. [ENCRYPTION AND OTHER MEASURES TO CONFIRM AT DEPLOYMENT]

8. Your rights

[RIGHTS UNDER EACH APPLICABLE LAW: INDIA DPDP ACT 2023, GDPR AND UK GDPR, US STATE LAWS]

To make a request, write to [email protected]. [RESPONSE TIME] There is no self-service export or account deletion yet; we handle these requests by hand.

9. Children

The Service is for businesses and is not meant for anyone under [MINIMUM AGE].

10. Changes to this policy

We will post changes here and update the "Last updated" date. [HOW WE NOTIFY SIGNIFICANT CHANGES]