Privacy Policy.

Information we handle

Account and sign-in information. We process your email address, account identifier, email verification information, authentication tokens, and access status to create your account, sign you in, and confirm your access. We also keep records needed to administer access invitations, including redemption, extension, or revocation of access.

Subscription and payment information. When you subscribe, an outside payment provider processes payment details that you enter in its hosted checkout. Our account service handles customer and subscription identifiers, plan and price information, payment and invoice status, renewal and cancellation dates, refunds, and disputes. Full card numbers and card security codes are not received by the Shop Stateside extension or account-service code.

Amazon content used for badges. The extension reads supported result cards and retrieves Amazon product and seller pages. It processes product identifiers, product and seller URLs, seller identifiers, and seller-location information to classify sellers. This processing takes place in your browser. Your Amazon searches, retrieved page content, and seller-check results are not sent to our account service or authentication and email providers.

Limited page and account activity. The extension observes which product cards are in view to prioritize checks and recognizes returns from checkout or billing management. It does not keep a general browsing-history log, record keystrokes, or send mouse movements or scrolling activity to our servers. Account services keep operational records of sign-in, checkout, access, and billing events.

Technical and delivery information. Hosting, authentication, payment, and email providers may process IP addresses, request times, browser or device information, security events, and email-delivery or bounce records to deliver and protect their services. IP addresses can indicate an approximate region. Shop Stateside does not request GPS access or use your physical location to decide a seller’s badge.

Information you send to support. If you contact us, we receive your email address, message, and any attachments you choose to provide. Please remove personal information from screenshots and do not send sign-in codes, passwords, or card details.

The extension does not request your Amazon password, access your email inbox, or intentionally collect your Amazon order history, payment details, health information, or private messages.

How we use information

We use information to display seller-location badges; provide sign-in and account access; administer subscriptions and access invitations; process payments, refunds, and disputes; send account and billing notices; respond to support and privacy requests; prevent fraud and abuse; and maintain the service’s security and reliability.

We use only the information reasonably needed for these purposes. We do not sell or rent personal information, build advertising profiles from Amazon browsing, or use or transfer user data for targeted advertising, creditworthiness decisions, or lending.

Where applicable law requires a legal basis, we process information to provide the service you request, meet legal obligations, and pursue our legitimate interests in operating and securing the service without overriding your rights. We obtain consent where required.

Service providers & sharing

We use outside service providers for website and database hosting, security, account authentication, payment processing, subscription management, and sign-in and transactional email delivery. Depending on their role, they process account and authentication information, payment and subscription data, recipient addresses and message contents, and technical, security, and delivery records. Billing notices apply when that feature is enabled. Payment providers may also process information for their own fraud-prevention and legal obligations.

Our current providers are Cloudflare (hosting and security), Supabase (authentication), Stripe (payments), and Resend (email).

Providers receive information needed for their role. Their own services and any independent processing are subject to their applicable terms and notices; those notices do not replace this policy for Shop Stateside’s handling of your information.

We may also disclose information when required by law or necessary to address fraud, abuse, or security threats. For data obtained through the Chrome extension, transfers in a merger, acquisition, or asset sale require your explicit prior consent under the Limited Use restrictions below.

Seller lookups make requests from your browser to Amazon. Amazon receives those requests and handles them under its own policies. Shop Stateside’s additional seller-lookup requests omit Amazon account cookies. Your ordinary Amazon browsing remains governed by your relationship with Amazon.

Chrome extension Limited Use

Shop Stateside complies with the Chrome Web Store User Data Policy, including its Limited Use requirements. This commitment covers data obtained through the extension and Chrome APIs, including information processed only on your device.

We limit use of that data to the disclosed seller-badging service and its related account, payment, support, and security functions. Transfers are limited to necessary service provision or improvement, legal compliance, protection against fraud or abuse, or a business transfer with your explicit prior consent.

Human access to that data is limited to your explicit consent for specific information, necessary security investigations, legal requirements, or aggregated and anonymized information used for permitted internal operations. We do not use or transfer it for personalized advertising, data brokerage, creditworthiness, or lending.

Read the Chrome Web Store Limited Use requirements.

Browser storage & tracking

The extension stores a local seller cache containing seller IDs, country codes, and the time each seller was checked. Entries older than 90 days are discarded when next read. The cache reduces repeated requests to Amazon and is not uploaded to our account service.

Your extension account data is stored separately on your device, including your email address, authentication session, signed access grant, and account-status hints. Temporary browser-session state tracks checkout or billing-return tabs using tab and account identifiers, flow type, and expiration times; it does not retain payment details or checkout URLs. Return entries stop being usable after at most 24 hours, and pending payment checks after five minutes.

Hosted account pages use browser session storage to maintain sign-in. The public marketing website does not include advertising trackers or analytics scripts. Our providers and linked services may use cookies or other storage needed for their own authentication, payment, security, and delivery functions.

We do not track browsing across unrelated websites for advertising. We do not change our practices in response to a Do Not Track browser signal. We do not sell personal information or share it for cross-context behavioral advertising, regardless of whether a browser sends an opt-out signal.

How long information is kept

Local seller-cache and temporary return-state limits are described above. Signing out clears the extension’s local account state, but does not clear its separate seller cache or delete your server-side account. Disabling or uninstalling the extension stops its seller checks; removing local browser data does not remove records held by our services.

Account and billing records do not automatically disappear when access expires. We retain records as needed to provide the account and subscription service, reconcile payments, resolve disputes, prevent abuse, and satisfy applicable accounting or legal obligations. Support records are kept as needed to resolve and document the request. Provider logs and backups may follow separate retention schedules.

You can request deletion using the contact details below. We assess what can be deleted and explain any records that must be retained for a permitted purpose. We do not promise that every provider or backup copy is erased immediately.

Your choices & privacy requests

You can review website permissions in Chrome, disable or remove the extension, sign out, and manage your subscription through My account. Signing out or uninstalling does not cancel subscription renewal. You can stop future renewal through account billing management.

To request access to, correction of, or deletion of your personal information, email support@shopstatesideapp.com with “Privacy request” in the subject. These requests are handled through support; there is no automatic account-deletion button. Use your account email when possible. We may need to verify that you control the account, but will not ask you to email your password or one-time sign-in code.

Depending on your location and applicable law, you may also have rights to receive a portable copy, restrict or object to processing, withdraw consent, appeal a decision on your request, or complain to a privacy regulator. Contact us to exercise an applicable right. We will respond as required by law and will not discriminate against you for exercising a privacy right.

Some information is necessary to authenticate your account and administer paid access. Deleting it may end your ability to use account features. We will address any active subscription as part of an account-deletion request and explain any billing records that must remain.

Security & international processing

Shop Stateside uses HTTPS for service communications, signed access grants, and access controls separating account information from seller checks. No method of storage or transmission can guarantee absolute security. Protect access to your device and email account, and do not share sign-in codes.

We and our service providers may process information in the United States and other countries where they operate. Those countries may have different privacy laws. Where required, we use the safeguards required by applicable law for international transfers.

Children’s privacy

Shop Stateside is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided personal information, contact us so we can investigate and take appropriate steps to remove it.

Changes & contact

We may update this policy as the service or our obligations change. We will post the revised policy here with an updated date and provide additional notice or obtain consent when required. Planned Apple apps and Apple purchase-sharing features are not currently offered under the Chrome release; we will update the relevant disclosures before introducing different data handling.

For questions about this policy or a privacy request, contact AMS Digital Ventures LLC, the provider of Shop Stateside, at support@shopstatesideapp.com.