Privacy Policy

1. Overview

MerchAuto ("we", "our", "the extension") is a Chrome browser extension suite that automates product uploads to Amazon Merch on Demand. We take your privacy seriously. This policy explains what data we collect, how we use it, and your rights.

2. Data We Collect

When you use MerchAuto, we collect only the minimum data necessary to operate the service:

• Google account email and display name — collected when you sign in with Google, used to identify your account.
• Google profile picture URL — displayed in the extension interface only.
• Device fingerprint — a hash derived from hardware signals (CPU, GPU, screen, timezone) used solely to enforce single-device licensing. This hash cannot identify you personally and is never shared.

We do not collect: your Amazon credentials, your design files, your custom presets, your financial information, or any browsing history.

3. How We Use Your Data

• To verify your license and grant access to the extension.
• To enforce single-device licensing (one license = one machine).
• To track active subscription status.

We do not sell, share, or rent your data to any third party. Ever.

4. Data Storage

Your account data (email, name, device fingerprint, plan) is stored securely in Supabase, a GDPR-compliant database hosted in the European Union. Data is encrypted at rest and in transit.

5. Amazon Data

MerchAuto operates entirely within your own Chrome browser. All interactions with Amazon Merch on Demand happen locally on your machine. We never receive, store, or process your Amazon account credentials, product data, or sales information.

6. Third-Party Services

• Google OAuth — used for sign-in only. We receive your email and name. Google's privacy policy applies.
• Supabase — database provider. GDPR compliant.
• Cloudflare — CDN and API routing. No personal data is stored by Cloudflare on our behalf.

7. Your Rights

You have the right to request deletion of your account and all associated data at any time. Contact us at the email provided on this website and we will delete your data within 7 days.

8. Changes to This Policy

We may update this policy occasionally. Significant changes will be communicated via the extension or this website. Continued use of MerchAuto after changes constitutes acceptance.