Privacy Policy

1. Introduction

Goodwin Technology and Services LLC ("Company," "we," "us," or "our") operates FBA Health Monitor, a software-as-a-service application that monitors Amazon seller account health metrics and delivers proactive alerts (the "Service"). This Privacy Policy explains what information we collect, how we use it, and your rights with respect to that information.

By using the Service, you agree to the collection and use of information in accordance with this policy. If you do not agree, please discontinue use of the Service.

2. Information We Collect

2.1 Information You Provide Directly

When you register for an account, we collect your email address and a password (stored as a one-way cryptographic hash — we never store your password in plaintext).

2.2 Amazon Selling Partner API Data

To provide the core monitoring functionality, you authorize FBA Health Monitor to access your Amazon Seller Central account via the Amazon Selling Partner API (SP-API). Through this authorization, we receive and store:

We do not collect, request, or store:

• Customer names, addresses, or contact information (PII)
• Order details or customer payment information
• Inventory or product listing data
• Any data beyond what is listed above

This data access is governed by Amazon's Data Protection Policy (DPP), which we strictly adhere to.

2.3 Usage and Technical Data

We automatically collect certain technical information when you use the Service, including IP address, browser type, pages visited within the application, and timestamps of actions. This data is used solely for security monitoring, debugging, and improving the Service.

3. How We Use Your Information

We use the information we collect for the following purposes:

Service Delivery. To authenticate your Amazon account, fetch account health metrics, display your dashboard, and deliver email alerts when your account health changes.

Communications. To send you alert emails when your Account Health Rating drops or a new policy violation is detected. You may disable email alerts at any time in your account settings.

Security. To detect and prevent unauthorized access, fraud, and abuse.

Service Improvement. To understand how the Service is used and improve its features and reliability. We do not sell or share individual usage data with third parties for this purpose.

4. How We Store and Protect Your Data

Encryption at rest. Your Amazon LWA refresh token is encrypted using AES-256-GCM before being stored in our database. The encryption key is stored separately from the database.

Encryption in transit.All data transmitted between your browser, our servers, and Amazon's API is encrypted using TLS 1.2 or higher.

Access controls. Access to production systems and databases is restricted to authorized personnel only, following the principle of least privilege.

Data hosting. Our application and database are hosted on infrastructure provided by Vercel and Neon (or equivalent cloud providers). These providers maintain SOC 2 compliance and industry-standard security practices.

5. Data Sharing and Disclosure

We do not sell, rent, or trade your personal information. We may share your information only in the following limited circumstances:

Service Providers. We use third-party services to operate the Service, including email delivery (Resend) and cloud infrastructure providers. These providers process data only as necessary to provide their services to us and are bound by appropriate data processing agreements.

Amazon.By connecting your Seller Central account, you authorize data exchange between FBA Health Monitor and Amazon's SP-API in accordance with Amazon's terms of service.

Legal Requirements. We may disclose your information if required to do so by law, court order, or governmental authority, or if we believe in good faith that such disclosure is necessary to protect our rights, your safety, or the safety of others.

Business Transfers. In the event of a merger, acquisition, or sale of all or substantially all of our assets, your information may be transferred as part of that transaction. We will notify you via email before your information becomes subject to a different privacy policy.

6. Data Retention

We retain your account information and Amazon connection data for as long as your account is active. Account health history snapshots are retained for 90 days and then automatically deleted. If you delete your account, we will delete or anonymize all associated data within 30 days, except where retention is required by law.

7. Your Rights and Choices

Access and Portability. You may request a copy of the personal data we hold about you by contacting us at support@goodwintech.services.

Correction. You may update your email address and password at any time within your account settings.

Deletion. You may delete your account at any time. Deleting your account will disconnect your Amazon account and remove all associated data within 30 days.

Disconnect Amazon Account. You may disconnect your Amazon Seller Central account from FBA Health Monitor at any time via the dashboard. This will immediately delete your stored refresh token and stop all monitoring.

Alert Preferences. You may disable email alerts at any time in your account settings.

California Residents (CCPA). If you are a California resident, you have the right to know what personal information we collect, request deletion of your personal information, and opt out of the sale of personal information (we do not sell personal information). To exercise these rights, contact us at support@goodwintech.services.

8. Children's Privacy

The Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us immediately.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by sending an email to the address associated with your account at least 14 days before the change takes effect. Your continued use of the Service after the effective date constitutes acceptance of the updated policy.

10. Contact Us

If you have questions or concerns about this Privacy Policy, please contact us:

Goodwin Technology and Services LLC
Email: support@goodwintech.services
Website: https://goodwintech.services