Privacy Policy

Information we collect

• Account information. The email address and organization you sign in with, used to authenticate you and scope your data to your organization.
• Marketplace order data. When you connect your eBay account, we access your order records through eBay’s API — order IDs, item titles, amounts, fees, buyer usernames, and dates.
• Purchase & shipment emails. When you connect an inbox — Gmail, Outlook, or IMAP — we read the order-confirmation and shipment/delivery emails in it, from the retailers and marketplaces you buy from, to extract order IDs, item titles, amounts, tracking numbers, and dates. We request read-only access and only process messages that match an order- or shipment-notification pattern; we do not read your personal correspondence.
• Derived records. The matches and profit figures we compute from the data above.

We do not collect or store your eBay, Google, or other account passwords. Access is granted through each provider’s authorization system, and connections can be revoked at any time.

How we use your information

We use your data solely to provide the service: matching purchases to sales, computing profit and margins, displaying your records, and operating, securing, and improving AOA Ledger. We do not sell your data or use it for advertising.

Google user data and Limited Use

When you connect a Gmail inbox, you grant AOA Ledger read-only access to your messages through the gmail.readonly scope. We use this access solely to find and read order-confirmation and shipment/delivery emails and extract the order fields needed to match your purchases to your sales. We do not use Gmail data for advertising, we do not sell it, and we do not use it to train generalized or artificial-intelligence models.

AOA Ledger’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

In particular, no human at AOA Ledger reads your Gmail messages except: with your explicit consent (for example, to troubleshoot a support request you raise); where required for security purposes such as investigating abuse; to comply with applicable law; or where the data has been aggregated and anonymized so it no longer identifies you. You can revoke this access at any time by disconnecting the inbox in AOA Ledger or from your Google Account permissions; when you disconnect, we stop accessing your inbox and delete the stored access tokens.

Browser extension (Amazon order sync)

AOA Ledger offers an optional Chrome browser extension that syncs your completed Amazon purchases into your account. The extension runs in your own browser while you are signed in to Amazon normally.

• What it reads. Only order data visible on your own Amazon order pages (order history, order details, and package tracking): order IDs, item titles and ASINs, quantities, amounts, order and delivery dates, ship-to name, and carrier/tracking numbers.
• When it reads. Only on those order pages, and it sends data only when you click “Sync my orders.” It does not run on any other Amazon page and does not browse your account on its own.
• What it never touches. It never reads, stores, or transmits your Amazon username, password, one-time codes, payment methods, billing address, cart, or any page outside your orders. It makes no requests to Amazon of its own — it only reads pages you have already opened.
• Where it sends data. Captured order data is sent over HTTPS only to AOA Ledger, authenticated by your existing AOA Ledger session. The extension holds no passwords or API keys.

We use this data only to record your purchase costs and match them to your eBay sales for profit reporting. We do not sell it, use it for advertising, or use it to train generalized or artificial-intelligence models. You can stop it at any time by removing the extension, and you can delete the synced records as described under Data retention.

Service providers

We share data with a small set of processors strictly to run the service:

• OpenAI — the text of order- and shipment-notification emails is sent to OpenAI’s API to extract the order fields listed above. OpenAI processes this text only to return those fields and, per its API terms, does not use it to train its models.
• eBay and Google — accessed through their APIs to retrieve your order and email data with your authorization.
• Hosting & infrastructure — our application host, database, and automation platform, which store your data to operate the service.

These providers act on our instructions and are not permitted to use your data for their own purposes.

Data retention

We keep your records for as long as your account is active or as needed to provide the service. You can request deletion of your data or disconnect an integration at any time; when you delete an organization, its associated records are removed.

Security

Access tokens for connected accounts are stored securely and never exposed to your browser. We use encrypted connections and scope every record to the owning organization so one customer’s data is never visible to another.

Your choices

You can disconnect any connected eBay account or inbox, request a copy of your data, or request deletion of your account and its records by contacting us. Revoking access at the provider (eBay or Google) also stops future data collection.

Changes to this policy

We may update this policy from time to time. Material changes will be reflected by the “last updated” date above.

Contact

Questions about privacy? Contact us at support@aoatraders.com.