ZonRaseed Privacy Policy

ZonRaseed is operated by Cairo Circuits, which is the controller of the personal data described here. ZonRaseed is an independent service and is not owned, endorsed or sponsored by Amazon. For any privacy question or request, email privacy@zonraseed.com.

ZonRaseed is a business tool for sellers and their teams. It is not directed at children, and you must be at least 18 to create an account.

Account information you give us:

• Your email address, your name, and your password (stored only as a hash by our authentication provider).
• If you sign in with Google: the name and email address Google shares with us. We do not receive your Google password.
• Two-step verification settings, if you turn them on.

Business data you add or connect:

• Products, SKUs, product costs, inventory, suppliers, purchases, expenses, wallets and payouts you enter or import from CSV files.
• Business details you choose to add, such as a tax registration number and tax address.
• Supplier invoice images you upload.
• Messages you send us through support requests and feedback.

Amazon data, when you connect your Amazon seller account:

• Orders, returns, refunds, fees, settlements, reimbursements, inventory, catalogue and, if you connect Amazon Ads, advertising spend — the figures needed to calculate your profit.
• We do not request Amazon's restricted buyer information. We do not receive or store your customers' names, addresses or contact details.
• We never ask for your Amazon password. The connection uses Amazon's official authorisation, and the access tokens it issues are stored encrypted.

Information from the Android app:

• A random installation identifier and a push-notification token, used only to send alerts you enable to this device and to stop sending when you sign out.
• Crash reports with a fixed set of fields: an error code and message, the screen, the app version and update, the platform and the operating-system version. They contain no business figures.
• Fingerprint or face unlock, if you turn on app lock, is checked by your phone's operating system. ZonRaseed never receives biometric data.
• The app keeps a copy of recently viewed data on your phone so it can show it when you are offline.

Information about use of the website:

• A shortened record of how you arrived (visit source, campaign, first page and device type) and in-account events such as starting a session or opening a section.
• Our product analytics do not store raw IP addresses, full referrer links, page content, query strings or advertising click IDs. Our hosting and database providers process IP addresses and request logs to deliver the service and protect it from abuse.

• To provide the service: sync your Amazon data, calculate profit, produce reports, keep your books and send the alerts you choose.
• To keep accounts and data secure, enforce workspace permissions and prevent abuse.
• To answer support requests and fix errors.
• To understand which parts of ZonRaseed are used, and to improve them.
• To meet legal obligations.

We do not sell your personal data or your Amazon data, and we do not use it for advertising. The app contains no advertising and no third-party advertising or tracking SDKs.

Some features use AI models from third-party providers (Google Gemini, Groq, Mistral and OpenRouter). Before an analytical question leaves our servers, names, contact details, bank details and credentials are removed; only aggregated figures, SKUs and pseudonymous references are sent, and a request that still fails that check is not sent.

Reading a supplier invoice is different: when you ask ZonRaseed to read one, the image is sent as it is, so whatever is printed on it reaches the provider. It only happens when you choose to do it for that invoice. These providers may keep and use the content they receive under their own terms.

If you message ZonRaseed support on WhatsApp, an AI assistant may answer first. Your message, the recent conversation and, when your WhatsApp number is linked to your account, your plan and the status of your Amazon connection and sync are sent to one of these providers to write the reply. Your Amazon figures, orders and customers are never sent, and a message that looks like a password, token or key is withheld. Asked who it is, the assistant says it is the team's AI assistant, and you can ask for a person at any time.

AI never calculates your figures. Profit, costs and totals are always computed by ZonRaseed's own code.

We share data only with providers that run part of the service for us, and only what each needs:

• Supabase — database, file storage and sign-in (hosted in the European Union, Ireland).
• Vercel — website and API hosting.
• Expo — Android app updates and delivery of push notifications.
• Google — Google sign-in, and Firebase Cloud Messaging, which delivers notifications to Android devices.
• Amazon — the Selling Partner API and Amazon Ads API, which your data comes from when you connect them.
• Resend — sending service emails.
• Meta (WhatsApp) — delivering the messages you exchange with ZonRaseed support on WhatsApp.
• Google Gemini, Groq, Mistral and OpenRouter — the AI features described above.
• Our payment provider — if you buy a paid plan, payment is taken on the provider's own page. We receive the payment status and amount, never your full card number. ZonRaseed is free during its Beta.

We may also disclose data when the law requires it, or to protect our users or the service from fraud or abuse.

• All traffic between the app, the website and our servers uses HTTPS.
• Every workspace is isolated at the database level, so one seller cannot read another's data.
• Amazon access tokens are stored encrypted. On your phone, the session is kept in the operating system's secure storage.
• Two-step verification is available, and sensitive actions such as account deletion require it when it is on.

No system is perfectly secure. If a breach affects your personal data, we will tell you as the law requires.

We keep your data while your account is active. When you ask us to delete your account, we verify the request and complete it within 30 days, removing your sign-in and the workspace's data from our systems. Copies may remain in backups for a limited time until those backups are deleted in their normal cycle.

Crash reports and server error records are kept only as long as they are useful for fixing problems. A push token is removed when you sign out of the app or turn notifications off.

• See and correct your data in the app and on the website.
• Export your reports and books.
• Disconnect Amazon at any time from Settings.
• Turn notifications off in the app or in your phone's settings.
• Delete your account and data — see below.
• Ask us for a copy of your personal data, or object to how we use it, by emailing privacy@zonraseed.com.

In the Android app: open More, then Account, then Delete account & data. On the website: Settings, then Account security. Either way, you type DELETE to confirm, the request is verified, and it is completed within 30 days. You can cancel it until we start.

If you can't sign in, email privacy@zonraseed.com from the address on your account. Full details: https://zonraseed.com/data-deletion

If we change this policy, we will update the effective date above, and for significant changes we will tell you in the app or by email before they apply.

Email privacy@zonraseed.com with any question about this policy or your data.