Privacy Policy
Last updated: 6 August 2026
The short version
- We store your Amazon seller data (listings, stock, orders, fees), the supplier price lists you upload, and your account details — and that’s it.
- We never store your customers’ personal details. Our systems have no fields for them.
- We never sell data, and we never use your data to train AI models.
- Your data lives on Amazon Web Services, encrypted in transit; only the services listed under “Sub-processors” ever touch it.
- You can disconnect RestockIQ from Amazon at any time, and have everything deleted within 30 days of asking.
1. Who we are
RestockIQ (restockiq.org and app.restockiq.org) is operated by Cape International Limited, registered in England & Wales, company number 13531931. Registered office: Brendan Court, 6 Britannia Road, Sale, Manchester, M33 2AA, Great Britain. We are the data controller for the personal data described in this policy. For anything privacy-related, email support@restockiq.org.
2. What we collect, and why
| Data | Why we have it |
|---|---|
| Account details: your name, email address, and login credentials (passwords stored only as secure hashes) | To operate your account and contact you about the service |
| Your Amazon seller data: listings, inventory levels, orders, fees, and shipment data, accessed through Amazon's Selling Partner API with your authorisation | To compute restock recommendations, sourcing suggestions, purchase orders and profit analysis — the service itself |
| The supplier price lists you upload | To match, price and order products |
| Support correspondence | To help you, and to keep a record of what we agreed |
| Minimal technical logs: IP address, browser user-agent, timestamps | Security, debugging and abuse prevention |
Your order data is processed without buyer personal information. We do not store your customers’ names, delivery addresses, email addresses or phone numbers anywhere in our systems — by deliberate design, the database schema has no place for them.
3. What we never do
- We never sell or rent your data to anyone.
- We never use your data to train AI models — ours or anyone else’s.
- We never show your data to another RestockIQ customer. Isolation between accounts is enforced by automated cross-tenant tests that run in our release pipeline; a release that could leak one seller’s data to another cannot ship.
- We never see or store your Amazon password (authorisation happens on Amazon’s own consent screen) or your payment card details (handled entirely by Stripe, our payment processor).
4. The legal bases we rely on (UK GDPR)
- Contract— processing your account data, Amazon seller data and price lists is necessary to provide the service you signed up for.
- Legitimate interests— security logging, abuse prevention, and improving the service, balanced against your rights.
- Legal obligation— retaining billing and accounting records we are required to keep.
- Consent— any optional communications; withdraw at any time.
5. Sub-processors
These are the only third parties that process data on our behalf, and what each one receives:
| Service | What it’s for | What it receives |
|---|---|---|
| Amazon Web Services (AWS) | Hosting and database | All stored data listed above |
| Cloudflare | HTTPS and traffic protection | Traffic in transit |
| Amazon Selling Partner API | Your listings, inventory, orders and fees | Authorised API access to your seller account |
| Keepa | Market price and sales-rank history | Product identifiers (ASINs) only |
| OpenAI | Automated title-match verification before a purchase order is sent | Product titles only — never your sales, costs or account data |
| Stripe | Payment processing | Your billing details and card information, which Stripe holds and we never store |
If this list changes, this page changes first.
6. Where your data lives, and international transfers
RestockIQ runs on AWS in the United States (us-east-2 region). Because Cape International Limitedis a British company serving customers in the UK and elsewhere, this involves transferring personal data to the United States. Those transfers are protected by the contractual safeguards in AWS’s data processing terms, incorporating the standard contractual clauses and the UK International Data Transfer Addendum.
7. Security
All traffic is encrypted in transit (HTTPS/TLS, fronted by Cloudflare). Data is held in managed AWS infrastructure with access restricted to authorised personnel. Account isolation is verified by automated tests on every release. We do not claim certifications we do not hold; this section describes what we actually do.
8. Retention and deletion
We keep your data while your account is active. If you ask us to delete your account, we verify the request and delete your data within 30 days. Encrypted backups containing your data expire within a further 35 days. Billing records are kept for as long as tax and accounting law requires, and no longer.
9. Your rights
Under UK data protection law you can ask us for access to your personal data, correction, erasure, a portable copy, or restriction of processing, and you can object to processing based on legitimate interests. Email support@restockiq.organd we will respond within one calendar month. If you are unhappy with how we handle your data, you have the right to complain to the Information Commissioner’s Office (ico.org.uk).
10. Disconnecting RestockIQ from Amazon
You can revoke RestockIQ’s access to your Amazon account at any time, without asking us: in Seller Central, go to Settings → Account Info → Manage your apps and remove RestockIQ. Our access stops immediately. If you also want your stored data removed, email support@restockiq.org and we will delete it as described in section 8 and confirm when it is done.
12. Changes to this policy
If we make a material change we will tell you by email or in the application before it takes effect. This page always shows the date it was last updated.