Privacy Policy

1. Introduction

NicheForge ("we", "our", "us") is a software product developed and operated by Brandaro ("Company"), committed to protecting your personal information. This Privacy Policy explains how we collect, use, store, and protect data when you use our Service.

2. Information We Collect

• Account data: Name, email address, and password (hashed) provided during registration.
• Amazon seller data: Marketplace ID, Seller ID, and LWA refresh token (encrypted at rest using AES-256-GCM). Collected only when you explicitly authorize the connection.
• Product data: ASINs, pricing, and supplier information that you import or enter into the platform.
• Usage data: Log data, IP addresses, and feature usage for security and service improvement.
• Payment data: Handled entirely by Lemon Squeezy. We do not store credit card numbers.

3. How We Use Your Data

• To provide and operate the Service.
• To connect to Amazon SP-API on your behalf and retrieve product and account data you request.
• To send transactional emails (account confirmation, password reset).
• To improve and secure the platform.
• We do not sell, rent, or share your personal data with third parties for marketing purposes.

4. Amazon Data

Data retrieved from the Amazon Selling Partner API ("Amazon Information") is used solely to provide features within your NicheForge account, at your explicit request as an authorized seller. We access only the data necessary for the features you use. Your Amazon authorization tokens are stored encrypted and are never shared with other users or third parties.

NicheForge does not sell Amazon Information. Amazon Information is used only to provide services requested by the authorized seller, and is not used for advertising, marketing, or any purpose unrelated to operating your NicheForge account.

You may disconnect your Amazon integration and revoke access at any time from the Integrations page within NicheForge, or directly from Amazon Seller Central. Once disconnected, NicheForge stops retrieving new Amazon Information for your account.

5. Data Storage and Security

Your data is stored on Railway (railway.app) using a managed PostgreSQL database. Sensitive credentials (Amazon tokens) are encrypted with AES-256-GCM before storage. We enforce HTTPS for all data in transit. Access to production data is restricted to authorized personnel only.

6. Third-Party Services

• Railway — application and database hosting.
• Lemon Squeezy — payment processing and subscription management.
• Resend — transactional email delivery.
• Google OAuth — optional sign-in method.
• Amazon SP-API — product and seller data, accessed on your behalf.

7. Data Retention

We retain your data for as long as your account is active. If you cancel your account, your data will be deleted within 30 days. You may request immediate deletion by contacting us.

8. Your Rights

You have the right to access, correct, or delete your personal data at any time. To exercise these rights, contact us at support@nicheforge.online.

9. Cookies

We use only essential cookies required for authentication and session management. We do not use advertising or tracking cookies.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you by email or in-app notice before significant changes take effect.

11. Contact

For privacy questions or data requests, contact us at support@nicheforge.online.