Privacy Policy

We are an operations platform for multichannel ecommerce sellers. To do our job, we handle account information, business data you sync to the platform, and metadata about how you use the Services. The sections below describe what we collect, why, who else sees it, and the controls available to you.

Information you provide directly

We collect information you provide when you:

• Create an account — name, email address, business name, business address, phone number, and password.
• Subscribe to our Services — payment information (processed by our payment providers, not stored by us directly), billing address, and tax identification numbers.
• Connect your selling channels — API credentials and authorization tokens for sales channels (Amazon, Walmart, eBay, Shopify, Etsy) and shipping carriers.
• Use the Platform — product catalogs, inventory data, order information, supplier information, customer information, and other business data you input or sync to the Platform.
• Communicate with us — support requests, feedback, survey responses, and other communications.
• Use AI features — prompts, queries, and context you provide to AI Optimizer and AI Assistant.

Information we collect automatically

When you use our Services, we automatically collect:

• Usage data — pages viewed, features used, actions taken, time spent, and frequency of use.
• Device information — IP address, browser type, operating system, device identifiers, and language preferences.
• Cookies and similar technologies — see the Cookies & Tracking section below.
• Log data — access times, error reports, and system events.

Information from third parties

We may receive information about you from third parties, including:

• Sales Channels and platforms — when you connect Amazon, Walmart, eBay, Shopify, Etsy, or other channels, we receive data necessary to provide our Services.
• Shipping carriers — tracking, fulfillment, and rate data.
• Payment processors — transaction confirmations and billing information.
• Analytics providers — aggregated information about how you use our Services.
• Authentication providers — if you use single sign-on services to access your account.

We use your information to:

• Provide, maintain, and improve our Services.
• Process transactions and manage your account.
• Synchronize your data across selling channels, suppliers, and shipping providers.
• Generate AI-optimized listings and provide AI Assistant responses (your data is used to provide the service; we do not use customer data to train AI models without explicit consent).
• Process orders, manage inventory, and route fulfillment.
• Calculate accounting metrics and provide business insights.
• Communicate with you about your account, Services, and updates.
• Provide customer support.
• Detect, prevent, and respond to fraud, security incidents, and abuse.
• Comply with legal obligations.
• Enforce our Terms of Service.

We do not sell your personal information. We share information only as described below.

With selling channels, suppliers, and service providers

To provide our Services, we share necessary information with:

• Sales Channels and channels you've connected (Amazon, Walmart, eBay, Shopify, Etsy, etc.) to manage your listings, inventory, and orders.
• Suppliers and dropship partners to fulfill orders you've authorized.
• Shipping carriers to process fulfillment.
• Payment processors to handle billing (we use industry-standard providers like Stripe).
• AI service providers to power AI Product Optimizer and AI Assistant features (Anthropic, OpenAI). Your data is processed but not used for model training.

With service providers

We engage third-party companies to perform services on our behalf, including:

• Cloud hosting and infrastructure (Cloudflare, AWS, or similar).
• Email and communication services.
• Analytics and monitoring.
• Customer support tools.

These service providers are contractually required to use your information only to provide services to us and to protect your information.

For legal reasons

We may disclose information if required to comply with applicable law, legal process, government request, or to protect the rights, property, or safety of Appath, our users, or others.

Business transfers

If Appath is involved in a merger, acquisition, financing, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change and any choices you may have.

With your consent

We may share your information with your consent or as you direct.

We retain your information for as long as your account is active and as needed to provide our Services. We may retain information for longer periods to:

• Comply with legal obligations (e.g., tax records).
• Resolve disputes.
• Enforce our agreements.
• Maintain backups and security.

When you delete your account, we will delete or anonymize your personal information within a reasonable period, except as required by law.

We implement industry-standard security measures to protect your information, including:

• Encryption of data in transit (TLS) and at rest.
• Access controls and authentication.
• Regular security assessments.
• Employee training on data protection.

However, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.

Depending on your location, you may have rights to:

• Access — request a copy of your personal information.
• Correct — update or correct inaccurate information.
• Delete — request deletion of your personal information.
• Export — receive a portable copy of your data.
• Object — object to certain uses of your information.
• Restrict — request limitations on how we use your information.
• Withdraw consent — withdraw consent where processing is based on consent.

To exercise these rights, contact us.

California residents (CCPA / CPRA)

California residents have additional rights under the California Consumer Privacy Act and California Privacy Rights Act, including the right to know what information we collect, the right to delete, and the right to opt out of certain sharing practices. To exercise California-specific rights, contact us.

European residents (GDPR)

If you are in the European Economic Area, you have rights under the General Data Protection Regulation. Our legal bases for processing your data include contractual necessity, legitimate interests, legal obligations, and consent where applicable.

We use cookies and similar technologies to:

• Maintain your login session.
• Remember your preferences.
• Analyze how our Services are used.
• Improve our Services.

You can control cookies through your browser settings. Disabling cookies may affect the functionality of our Services.

Our Services are not directed to individuals under 16. We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal information, please contact us.

If you access our Services from outside the United States, your information may be transferred to, stored, and processed in the United States or other countries where Appath or its service providers operate. We take appropriate safeguards for international transfers.

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our website and updating the "Last Updated" date. Your continued use of the Services after changes indicates your acceptance of the updated policy.

For questions about this Privacy Policy or our data practices, reach out to our privacy team. We aim to respond within five business days.