Privacy policy

Effective October 14, 2026

MyProfit is a web application that shows Amazon sellers the profit on their Amazon business. This policy explains what information MyProfit collects, why, who it is shared with, how long it is kept, and the choices you have.

Who we are

MyProfit is operated by My Profit Inc., New Jersey, United States, which is responsible for the information described here. Contact: info@myprofit.co.

The short version

• We use your information only to run MyProfit for you. We don't sell it, we don't show ads, and we don't use tracking or advertising cookies.
• We never store your Amazon customers' names, email addresses or phone numbers, and we never contact them.
• Every account connected to Amazon is protected by two-factor sign-in. Card details are handled by Stripe and never reach us.
• You can disconnect Amazon at any time and ask us to delete your data.

Information about you

• Your account: your name, email address, company name, password (stored only as a one-way hash) and your two-factor sign-in secret and recovery codes (recovery codes are stored hashed). If you sign in with Google, also your Google account ID; we receive nothing else from Google beyond your name and email.
• Billing: Stripe processes payments. We keep your Stripe customer ID and the status of your subscription, never your card number.
• Your Amazon seller data, which you authorize us to read through Amazon's official Selling Partner API and Amazon Ads API: your seller ID and store names, orders and order items, Amazon's fees, settlements and payouts, returns, reimbursements, FBA inventory and shipments, product catalog details, Sponsored Products campaigns and their performance, and reports you choose to import.
• What you enter or upload: product costs, ship-from address and shipping settings, review request settings, sales files from other channels (for these we keep only monthly totals per state, not the orders in the file), and the supplier invoices and delivery documents you upload for MyProfit to file shipment claims for you (used only for those cases, deleted after 12 months).
• Accounting connections: if you connect Xero or QuickBooks Online, their access tokens (stored encrypted), used only to create the accounts and settlement entries you send.
• How you found us: when you sign up, we keep the country you signed up from (as Cloudflare reports it; not your IP address), the first page of this site you visited and when, the website that sent you (its name only, such as google.com) and any campaign tags in that link. We use it only to learn which pages and sites bring sellers to MyProfit. If you follow a link in an email from MyProfit, we note that it was used, when, and the page it opened, to see whether our emails help (no tracking image). When you connect Amazon, we note when you went to Amazon's approval page and whether it sent you back, with the kind of device you used (phone, tablet or computer), to find where connecting gets stuck, and when you first looked around the sample store.
• Usage and logs: your IP address, browser and the pages requested, recorded in server logs for security and troubleshooting, together with the requests our firewall (Cloudflare) blocked or challenged. Secret codes that can appear in a web address, such as password reset links, are removed before a log line is stored. We also count visits ourselves: once a day per browser that opens a second page, a tally of the first page opened, the site that sent you (its name only) and your country, with no IP address and nothing tied to you.

Information about your Amazon customers

Amazon shares some of your customers' personal information with apps like MyProfit under its Data Protection Policy. MyProfit keeps as little as it can:

• Never stored: customers' names, email addresses and phone numbers.
• Ship-to city, state, postal code and country of each order, used for sales tax and sales-by-state reports.
• Ship-to recipient name and street address, only for merchant-fulfilled orders awaiting shipment and only if you use the Ship orders page, so you can print packing slips and labels and buy shipping. Deleted 30 days after the order ships.
• Amazon's Sales Tax Report, only if you turn its import on: order identifiers and dates, the taxing jurisdictions, the amounts, and the ship-to city, state and postal code. Deleted after 36 months, or as soon as you turn the import off.

We don't contact your customers: review requests use Amazon's own Request a Review, which Amazon sends. We never sell or share customer information, never use it for marketing, and use it only for the purposes above.

How we use information

To provide MyProfit (work out your profit, fees, taxes and advertising results, and show and export them), to keep accounts secure, to bill you, to answer your questions, and to meet legal obligations. We send account emails (confirming your address, resetting your password) and, if your Amazon store isn't connected in your first weeks, at most two setup emails on how to connect it, written from what you've done in your account. Each has a link that stops them with one click. We don't send marketing email or newsletters.

Who we share it with

Only the service providers that run MyProfit, each for its own part:

• Heroku (Salesforce): application hosting and database, in the United States, on Amazon Web Services.
• Cloudflare: protects the site from attacks and delivers its pages. All traffic to MyProfit passes through it, encrypted, so it sees your IP address and the pages you request. On the sign-up form, its Turnstile check looks at your browser to tell people from bots. Cloudflare Web Analytics also counts visits to our pages (the page, the site that sent you, your browser, device type and country, and how fast the page loaded) so we can see which pages help sellers. It uses no cookies and doesn't follow you to other sites.
• Redis Cloud: the queue for background jobs.
• Stripe: payments and billing.
• Google: delivery of account emails, and signing in with your Google account if you choose it.
• SolarWinds Papertrail: server logs.
• jsDelivr: serves the scripts, styles and fonts our pages use, so it sees your IP address when your browser loads them.

We exchange data with Amazon, Xero and Intuit only as you direct, through the connections you set up. We may disclose information if the law requires it.

Security

Connections to MyProfit are encrypted (HTTPS). Every account signs in with a password and an authenticator-app code. Passwords and recovery codes are hashed, accounting tokens are encrypted, and access to production systems is limited to the people who run MyProfit. If a security incident affects Amazon information, we notify Amazon within 24 hours of discovering it, as Amazon requires, and notify the sellers affected.

How long we keep it

• Your account and Amazon data are kept while your account exists. You can ask us to delete them at any time.
• If an account has had no Amazon orders for two years, has no subscription and no working Amazon connection, we may delete its Amazon data and keep only the account record.
• Customer information: as described above (30 days after shipping for addresses, 36 months for the Sales Tax Report). FBA shipment details are kept for 90 days.
• Security logs (server logs, the requests our firewall blocked or challenged, and records of our background jobs) are kept for 13 months, as Amazon's security requirements ask, and then deleted. Our log provider's own copy is kept for a week.

Your choices and rights

• Disconnect Amazon at any time in Seller Central under Apps and Services → Manage Your Apps, and for ads in your Amazon account's Login with Amazon settings. We then stop fetching data.
• See, correct, export or delete your information by emailing info@myprofit.co from your account's address. We respond within 30 days.
• If you are in California, the European Economic Area or the United Kingdom, you have rights under the CCPA or the GDPR, including to access and delete your data and to object to its use, and we honor them. For people in the EEA and UK, we process data to perform our contract with you, for our legitimate interest in running a secure service, and to meet legal obligations. Data is stored in the United States.

Cookies

MyProfit uses only the cookies it needs to work: to keep you signed in (and remember you, if you choose), to protect forms against forgery, and, until you sign up, to remember the first page you visited and the site that sent you. No analytics or advertising cookies: the visit counts above use none.

Children

MyProfit is a business tool and isn't meant for anyone under 18.

Changes

If we change this policy we'll update the date at the top, and tell you in the app if a change matters to how your data is used.