Privacy Policy

ASINmd is operated by Lasagna LLC. This policy explains what information we collect when you use our website and our service, why we collect it, how long we keep it, and the choices you have. You can reach us through our contact form.

We collect no more information than we need, in these categories.

• Account information. Your email address, your name if you provide it, and the workspace you belong to. This is what identifies you and controls what you can see.
• Marketplace information. Listing and catalog data retrieved from a marketplace after you authorize us to access it — listing states, listing issues, restrictions, product type information and the changes between them over time.
• Messages you send us. If you use our contact form we receive your name, email address, an optional company name, the category of your enquiry and your message.
• Limited technical information used to protect the service. When you submit the contact form we also process a pseudonymous value derived from the network address the message was sent from, so that we can limit how many messages a single sender can submit. We do not store the network address itself, the value is one-way, and it is not used to identify you or to track you across sites or sessions.

We access Amazon marketplace information only after you have authorized it for your selling account, and we use it only to provide ASINmd — that is, to record listing state, detect changes, reconstruct incidents and present evidence back to you.

We do not sell marketplace information. We do not share it with advertisers or data brokers, and we do not use it to build products for anyone other than the workspace it belongs to.

ASINmd is designed not to ingest order or customer personal information. We do not request buyer names, shipping addresses, phone numbers, buyer messages or order details, because investigating a listing does not require them.

You can withdraw authorization at any time from your Amazon selling account. When you do, we delete the stored credentials for that connection immediately.

• To provide, operate and secure the service.
• To authenticate you and keep your workspace separate from every other.
• To retrieve and interpret marketplace data you have authorized us to access.
• To respond to messages you send us.
• To meet legal obligations that apply to us.

We do not use your information for automated decision-making that produces legal or similarly significant effects about you, and we do not sell it.

There is no cross-seller benchmark and no shared intelligence store. We do not train shared models on marketplace-derived data from multiple workspaces. Any historical context we show you is drawn only from your own workspace.

• Marketplace credentials — kept only while your connection is active, and deleted when you disconnect or revoke authorization.
• Raw marketplace responses — kept for up to 30 days, then purged. They exist so an interpretation can be re-checked against what was actually received, which stops being useful once it is stale.
• Normalized listing data and the evidence derived from it — kept for the life of your workspace. This is the incident history the product exists to preserve; deleting it would defeat the purpose of recording it.
• Account information — kept while your account exists.
• Contact form messages — kept while they are useful for correspondence and record-keeping, together with the abuse-prevention value described above.

You can ask us to delete your account and the data associated with your workspace by contacting us. Disconnecting a marketplace connection removes its stored credentials immediately. Some records may be retained where we are required to keep them by law.

We keep the list of companies that process data on our behalf as short as we can. Today it is two:

• Supabase — database, authentication and storage for application and marketplace-derived data.
• Vercel — application hosting and content delivery.

We will update this section before adding another provider that processes your information.

Our service providers may process information in the United States and in other countries where they operate. Our primary database is hosted in the United States. If you are accessing ASINmd from elsewhere, your information may be transferred to and processed in a country whose data protection laws differ from those of your own.

We run no analytics, advertising or session-recording services. The public pages of this site load no third-party scripts and set no tracking cookies.

When you sign in, we set cookies that are strictly necessary to operate the service: one to keep you authenticated, and one to remember which workspace you are currently viewing. Neither is used to track you across other websites.

We describe our security practices in detail on our security page. In summary: workspace data is isolated at the database level, marketplace credentials are handled only on the server, traffic is encrypted in transit, and operational access to our own systems requires a second authentication factor.

Depending on where you live, you may have the right to access the personal information we hold about you, to correct it, to ask us to delete it, to object to or restrict how we use it, and to receive a copy in a portable format.

To exercise any of these, contact us and we will respond. We will not charge you for making a request or treat you differently for having made one.

ASINmd is a business tool and is not directed at children. We do not knowingly collect personal information from anyone under 16. If you believe a child has provided us with personal information, contact us and we will delete it.

We will update this policy when our practices change. The effective date at the top of this page always reflects the current version, and we will tell account holders about material changes rather than relying on you to notice.

Questions about this policy or about how we handle your information can be sent through our contact form, selecting “Security & privacy”.