Privacy Policy

What we collect

• Information you give us directly: your name, email address, store name, and the business details you enter on our audit form.
• Amazon seller account data, accessed with your authorization through the Seller Central user permissions you grant us, and through Amazon's Selling Partner API on a read-only basis once that authorization becomes available. This includes fee reports (including the per-SKU dimensions, weights and prices they carry), inventory and adjustment records, reimbursement reports, inbound shipment and received-inventory records, order and return data, removal and storage records, and settlement reports. Customer-return records may include a buyer's free-text return comment as Amazon supplies it.
• Data visible through a Seller Central user seat. Filing a reimbursement case is not possible through any API, so clients invite us as a scoped Seller Central user limited to case management and reporting. Acting under that seat we can see what that permission level exposes. We do not use it for listings, pricing, payments, or anything beyond claims and the reports behind them.
• Cost documentation you upload: supplier invoices and per-unit costs. Amazon values inventory reimbursements at your manufacturing cost, so we need these on file to claim the correct amount.
• Reports you run through the instant audit: nothing at all. If you drop your own Seller Central exports on our free-audit page, they are read in your browser, sent once to our engine, parsed in memory and discarded when the answer is written. They are not written to any database or file store, and the only record kept of the request is a rate-limit entry holding the number of files, your IP address and the time — no filenames, no SKUs, no figures. If you then choose to save your audit, we keep the figures only (the totals, the categories, which reports were read and which were missing) together with the email address and consent you gave us — never the reports themselves.
• Email address only, if you subscribe to policy alerts, or if you ask us to save an instant audit and follow up about it. A saved audit gets at most three follow-up emails; one click in any of them unsubscribes you from both that sequence and our policy alerts.
• Basic site analytics via Cloudflare Web Analytics: pages viewed and approximate region, with no cookies, no advertising trackers, and no cross-site profiling.
• How you found us, only when you send a form. Our own script notes the first page of your visit, the website that linked you here (its domain only, never the full address) and any campaign tag in the link. It keeps this in your browser for that visit only (session storage, cleared when you close the tab, no cookie) and sends it to us only with an audit request or signup you submit, so we know which pages are useful.

How we use it

To identify recoverable amounts in your account, prepare and file claims on your behalf, appeal denials, verify that reimbursements actually reach your payment ledger, identify avoidable fees, report results to you, and invoice for recoveries.

We use aggregated, de-identified patterns — error types and detection rules, never your products, prices, volumes, or customers — to improve our detection logic.

What we do not do

We do not sell your data. We do not share it with other sellers. We do not use your product, pricing, or sales data to inform any competing commercial activity, including our founder's own Amazon business. We do not request or store your Seller Central password. We do not use your data to train third-party AI models.

We do not commingle seller data. Every record in our systems is tagged to a single seller and every query is filtered to that seller. One client's data is never combined with, compared against, or exposed to another's.

Who processes it

We use a small number of service providers, each bound by confidentiality obligations and permitted to use data only to provide their service:

• Cloudflare — hosting, database, and encrypted document storage.
• Resend — transactional and notification email delivery.
• Stripe — payment processing. Receives your billing contact and company name and holds your card. We never see card numbers.
• Amazon — when filing claims on your behalf, which is the point of the service.

Anyone else only where required by law. If we add a processor that handles seller data, this list is updated.

Security

• All data is encrypted in transit (TLS) and at rest.
• Amazon authorization tokens are encrypted with AES-256-GCM using a key held separately from the database, so a database copy alone does not yield account access.
• We never store passwords. Sign-in uses one-time links that expire in fifteen minutes and work once; session tokens are stored only as irreversible hashes.
• Access is limited to personnel who need it for the work. Authorizations, report pulls, detections and staff actions in FeeBulldog are written to an audit log.
• We do not store payment card details.

Security incidents

If we become aware of a breach affecting your data, we will notify you and, where the data originated from Amazon, notify Amazon within 24 hours of discovery, and provide what we know about scope and remediation as the investigation develops.

Retention

Amazon account data is retained only as long as needed for the claims it supports — in practice the life of the engagement plus a period afterwards covering open, appealed, or reversed claims and our legal and accounting obligations. Personally identifiable information sourced from Amazon is deleted within 30 days of it no longer being required, except where retention is legally mandated. Amazon report data (parsed rows and the raw export files) is deleted with the rest of your account data when you close and request deletion, within 30 days. Cost documentation is retained while claims relying on it remain open or appealable.

Fee-alert subscribers are kept until they unsubscribe, which every alert email allows in one click.

Your control

You can revoke FeeBulldog's API access from your own Seller Central account at any time, and remove our user seat, without contacting us or giving notice. You can request a copy of your data, request corrections, or request deletion by emailing [email protected]. We action deletion requests within 30 days, subject to the retention obligations above.

Children

FeeBulldog is a business service and is not directed to anyone under 18.

Changes

If we change this policy materially we will update the date above and, for active clients, say so by email rather than relying on you to notice.

Contact

Questions about this policy, or any request above: [email protected]

See also: Terms of Service · How it works