Privacy Policy
Last updated: November 3, 2026
1. Who we are
MarketLedger is operated by Andrii Nazarov (sole proprietor), registered in Poland, who is the controller of your personal data. Contact: support@marketledger.co.
2. What we collect
- Your account: e-mail address and sign-in details (passwords are handled by Google Firebase Authentication; we never see them).
- Your Amazon data, only with your authorization through Amazon: orders, fees, refunds, payouts, inventory and, if you connect it, advertising spend.
- Data you enter yourself: product costs and expenses.
- Billing: your plan and payment status. Card details are entered on Stripe's page and never reach us.
- Usage and security logs.
We do not collect Amazon buyer names, addresses, phone numbers or e-mails, and MarketLedger cannot request them. Of an order's delivery we keep only the two-letter country code of the destination (for example DE), because the VAT of a sale depends on it; never the address, city or postcode. We never store your Amazon password.
3. How we use it
- To show you your sales, costs and profit, and to keep them up to date.
- To run your subscription and to prevent abuse of free trials and payment fraud.
- To answer support requests and keep the service secure and reliable.
We do not sell your data, and we do not use Amazon data for anything other than providing MarketLedger to you.
4. Where it is stored and who processes it
These providers process your data for us, each bound by a data processing agreement. Not all of them are in the European Union:
| Provider | What | Where |
|---|---|---|
| Google Cloud Firestore (our database) | Your account, Amazon data, product costs, expenses and billing records | European Union (eur3 multi-region: Belgium and the Netherlands) |
| Google Cloud Run (our private service that calls Amazon) | Amazon data while it is imported and computed | European Union (europe-west1, Belgium) |
| Vercel (the website and dashboard) | Page and dashboard requests while they are answered; nothing is stored there | Requests are computed in the European Union (fra1, Frankfurt); the public pages are delivered from Vercel’s worldwide network |
| Google Firebase Authentication | Your e-mail address and sign-in details | Google’s global infrastructure, including the United States |
| Our Amazon Ads services (Google Cloud Run) | Your Amazon Ads authorization and advertising figures, if you connect Amazon Ads | United States (us-central1, Iowa) |
| Stripe | Payments, invoices and tax | United States and European Union |
| Amazon Web Services (Simple Email Service) | Service e-mails, once we start sending them | European Union (eu-west-1, Ireland) |
When your data is transferred to the United States, the transfer is covered by the European Commission's Standard Contractual Clauses in our agreement with that provider. You can ask us for a copy of the relevant safeguards at the address above.
5. How long we keep it
| Data | Kept |
|---|---|
| Orders, fees, refunds, payouts, inventory and advertising figures from Amazon | 18 months, then removed automatically |
| Your product costs and expenses (data you enter yourself) | While your account exists; after your Amazon data is erased for non-payment, 24 more months |
| Your Amazon authorization (refresh token) | Until you disconnect or Amazon revokes it; then destroyed at once |
| Billing records (plan, payment status, Stripe references, amounts, dates) | While your account exists; after deletion, as long as tax law requires (up to 6 years) |
| One-trial-per-seller marker (a keyed hash, no name or e-mail) | 12 months |
| Fraud-prevention signals (keyed hashes of IP address and card fingerprint, flags) | IP hashes 30 days; flags with the billing records |
| Security logs (counts and codes, no Amazon data) | 12 months |
| Backups | 21 days |
6. When you disconnect Amazon or stop paying
Disconnecting Amazon (in MarketLedger or in Seller Central), or Amazon revoking our access: we stop every call to Amazon at once, destroy your authorization at once, and erase all data of that Amazon account, including your costs, within 7 days. Reconnecting within those 7 days cancels the erasure. Backups holding it expire within 21 more days. We can confirm the erasure in writing on request.
Stopping payment: your account is frozen and we stop calling Amazon. Your data is kept for 90 days (30 days if you never paid) so you can come back. After that we erase your Amazon data, as Amazon's Data Protection Policy requires, and keep only what you entered yourself — your product costs and expenses — for 24 months, so they are there if you return. If you disconnect Amazon during that time, they are erased too, within 7 days.
Deleting your account: ask us at the address above; your data is erased as for a disconnection. Billing records that tax law requires us to keep are kept as stated in section 5.
7. Cookies
We use cookies needed to sign you in and to remember your settings. When you arrive through a partner link, a cookie named ml_campaign remembers the campaign code (not who you are) for 60 days, so the right trial applies when you sign up.
8. Your rights (GDPR)
You may ask for access to your data, a copy of it, its correction or erasure, a restriction of its use, and object to its use. You can download your product costs and expenses yourself at any time in Settings. You may also complain to the Polish data protection authority (Prezes UODO). Write to us at the address above.
9. Changes
We will tell you by e-mail or in the app before a material change to this policy takes effect.