This policy explains how Azentro Limited (“Azentro”, “we”, “us”) handles personal data when you visit azentro.co.uk, try the demo, create an account or use the Azentro app. We’ve written it to describe what the product actually does, in plain English. If anything is unclear, email us at support@azentro.co.uk.
1.Who we are
Azentro Limited is a limited company registered in England and Wales (company number 17015083), with its registered office at 20 Wenlock Road, London, England, N1 7GU. For the personal data described in this policy about you as a visitor or account holder, we are the data controller under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
For some data that you bring into Azentro about other people, such as your Amazon customers’ delivery locations or your suppliers’ contact details, you are the controller and we act as your processor. Section 4 explains this.
You can contact us about anything in this policy at support@azentro.co.uk.
2.The information we collect
Information you give us
- Account details: your email address, username, first and last name, and password. Your password is stored by our authentication provider as a one-way hash; we never see it in plain text.
- Profile picture (optional): if you upload one, we resize it in your browser before upload, which also strips hidden photo data such as location.
- Business settings: whether you trade as a sole trader or limited company, your VAT registration status and effective date, your business start date and your accounting year end.
- Business records you enter or import: purchase orders, suppliers, prep centres, expenses, other income, cost of goods and similar records, including CSV files you import and supplier invoices you attach (PDFs or images).
- Support and feedback: what you send through the contact form or to our support inbox (your name, email address and message), and in-app feedback (your message, the type of feedback, an optional rating, the page you were on and your browser type).
Information collected automatically
- Security and abuse prevention: your IP address, used to rate-limit sign-up, sign-in, contact and demo requests and to run our bot check; the country your connection comes from, used to keep your session secure; and your device type and browser.
- Usage records: for signed-in users, the first and last time you used the app each day and how many requests were made, so we can understand activity and spot problems.
- Error reports: if something breaks, the error message, the page and your browser type, linked to your account.
- Email delivery records: which service emails we sent you, when, and whether they were delivered.
- Demo usage: if you try the demo, a scrambled (hashed) version of your IP address, a random visit ID, and which pages you open and which buttons you press. We never record what you type, and the demo needs no account.
We don’t use advertising networks, third-party analytics, tracking pixels or session-recording tools, and we don’t sell your data.
3.Your Amazon data
When you connect your Amazon Seller Central account, you authorise Azentro through Amazon’s own sign-in to read your seller data using Amazon’s Selling Partner API. We never see your Amazon password. Amazon gives us an access key, which we store encrypted in a secure vault and use only to fetch your data. You can disconnect at any time, and you can also revoke our access from Seller Central.
With your authorisation we import, for the UK marketplace:
- Orders and sales, including refunds and cancellations
- Settlements, payouts, fees and other financial transactions
- FBA inventory, the inventory ledger, stranded stock and inbound shipments
- Customer returns, reimbursements and removal orders
- Your product listings, pricing and catalogue details
- Account health metrics and seller feedback
- VAT transaction reports, where you use our VAT features
We use this data only to provide Azentro to you: to calculate your costs, profit, VAT and stock, and to reconcile your account. We don’t use it for anything else, and we don’t share it with other sellers.
4.Your customers' and suppliers' details
Some of the data you bring into Azentro is about other people. For that data, you are the controller and we process it on your behalf, only to provide Azentro to you.
- Your Amazon customers: Amazon’s order and settlement reports include the delivery town, county, postcode and country of each order, and the order ID. Seller feedback includes the customer’s comments. If you use VAT reports, these can include a business customer’s VAT number and delivery location. We do not store your customers’ names, email addresses, phone numbers or full street addresses.
- Your suppliers and prep centres: any contact details you add, such as a contact name, email address, phone number and address.
We handle this data under Amazon’s data protection requirements for Selling Partner API developers and only on your instructions. When you delete your account, it’s deleted with everything else.
5.How we use it and our lawful bases
UK GDPR requires a lawful basis for each way we use personal data. Ours are:
| Purpose | Data used | Lawful basis |
|---|---|---|
| Creating and running your account | Account details, business settings | Contract: we need it to provide the service you signed up for |
| Importing and processing your Amazon data | Amazon data, your business records | Contract |
| Storing your files, imports and records | Invoices, CSV imports, business records | Contract |
| Sending service emails (sign-up codes, security alerts, account notices) | Email address, name | Contract, and legitimate interests in keeping your account secure |
| Preventing fraud, abuse and bots, and keeping sessions secure | IP address, country, device and browser, rate-limit records | Legitimate interests in protecting Azentro and our users |
| Fixing errors and improving the product | Error reports, usage records, feedback, demo usage | Legitimate interests in running a reliable product |
| Answering your questions | Support messages and contact details | Legitimate interests, or contract where it concerns your account |
| Meeting legal obligations and handling disputes | Any relevant records | Legal obligation, and legitimate interests in defending legal claims |
| Marketing emails (in future) | Email address, name | Your consent, or our legitimate interests for existing customers (see section 11) |
Where we rely on legitimate interests, we’ve weighed them against your rights and kept the data we use to the minimum. You can object at any time (see section 13).
6.Who we share it with
We share personal data only with service providers that help us run Azentro. Each acts on our instructions under a written contract that protects your data. We don’t sell data or share it for advertising.
| Provider | What they do for us | Where |
|---|---|---|
| Supabase | Database, sign-in, file storage and the encrypted vault for your Amazon key | London, UK |
| Vercel | Hosts the website and app | London, UK (with some operations processed in the US) |
| Upstash | Short-lived rate-limit counters keyed by IP address | See section 7 |
| Brevo | Sends our service emails and routes emails sent to our support inbox | European Union |
| Google Workspace | Our support and hello@ mailboxes | UK, EU and US |
| Cloudflare (Turnstile) | Bot check on sign-up, sign-in, password reset and contact forms; receives your IP address and browser signals | Global network |
| Amazon | The source of your Seller Central data, under your authorisation | EU / UK |
We may also disclose data if the law requires it, to protect our rights or the safety of others, or to a buyer or successor if Azentro is sold or restructured. In that case this policy would continue to apply to your data.
7.Where your data is stored
Your account data, Amazon data and files are stored in the UK (London). Some of our providers may process limited data outside the UK, for example to deliver email or check for bots. When that happens we rely on UK adequacy regulations (for example for the European Economic Area), or on the UK International Data Transfer Agreement or Addendum and equivalent safeguards. Contact us for more information.
8.How long we keep it
We keep personal data only as long as we need it. Records that aren’t tied to an open account are deleted automatically on this schedule:
| Data | How long we keep it |
|---|---|
| Account, Amazon data, business records and files | While your account is open, then deleted as described in section 9 |
| Sign-ups that are never completed | Deleted automatically |
| In-app feedback | 14 days |
| Rate-limit records containing IP addresses | 30 days after last use |
| Error reports | 90 days |
| Email delivery records | 12 months |
| Daily usage records | 12 months |
| Support conversations | 2 years |
| Demo usage (hashed IP, visit ID, pages and buttons) | 180 days (the daily demo allowance record is kept for 2 days) |
Azentro holds your business records for you, but you remain responsible for keeping your own accounting records for as long as HMRC requires. Please export anything you need before deleting your account.
9.Deleting your account
You can delete your account at any time from Settings › Profile › Delete this account. There’s a 28-day grace period in case you change your mind; during it, Amazon syncing stops and you can cancel the deletion. When the period ends we permanently delete:
- Your account, profile and settings
- All imported Amazon data and your encrypted Amazon access key
- Your purchases, suppliers, prep centres, expenses and every other business record
- Your profile picture and every invoice or file you uploaded
- Feedback, error reports, usage records, email delivery records, support conversations and rate-limit records linked to your account or email address
We keep only a minimal record that an account was deleted and when, which contains no name or email address. Deleted data may remain in our provider’s encrypted backups for a short time until those backups expire.
10.Cookies and similar technologies
We use only cookies that are needed for Azentro to work, plus one that remembers something about your device. We don’t use advertising or analytics cookies, which is why we don’t show a cookie banner.
| Cookie | Purpose | How long |
|---|---|---|
| sb-…-auth-token | Keeps you signed in | Your session: up to 30 days on a device you trust, 12 hours otherwise |
| az_sw | Enforces the session time limit and signs you out if your connection moves to another country | Your session |
| az_email | Remembers your email address on a device you’ve chosen to trust | 180 days |
| az_seen | Remembers that someone has signed in on this device, so the sign-in page can say “Welcome back”. It contains no personal details. | 1 year |
| az_demo_until, az_demo_lease | Run your demo session and its time limit | The demo session |
We also use your browser’s local storage for convenience, for example to keep a form you haven’t finished, your module preferences and a copy of your profile picture. This stays on your device. Our bot check, Cloudflare Turnstile, may also set its own strictly necessary data when it runs. You can clear cookies and local storage in your browser at any time, although you’ll then need to sign in again.
11.Emails we send you
At the moment we only send service emails: your sign-up code, a welcome email, security notices such as password or email changes, account deletion notices and replies to your support requests. You can’t opt out of these while you have an account, because they’re part of running it.
We may send product news and marketing emails in future. If we do, we’ll only send them to you if you’ve agreed, or, if you’re an existing customer, about similar Azentro products and services. Every marketing email will include an unsubscribe link, and you can opt out at any time by emailing support@azentro.co.uk.
12.Keeping your data secure
- All traffic to and from Azentro is encrypted (HTTPS).
- Your data is kept separate from every other seller's by database-level access rules.
- Your Amazon access key is held in an encrypted vault, never in plain text.
- Uploaded files are private and can only be opened through short-lived signed links.
- Sign-in is protected by rate limits, bot checks, session time limits and email verification codes for sensitive changes.
No system is perfectly secure. If we become aware of a breach that is likely to affect your rights, we’ll tell you and the Information Commissioner’s Office (ICO) as the law requires.
13.Your rights
Under UK GDPR you have the right to:
- Access the personal data we hold about you
- Correct data that is wrong or incomplete (most of it you can edit yourself in Settings)
- Delete your data (you can delete your account yourself, see section 9)
- Restrict how we use your data
- Object to uses based on our legitimate interests, and to marketing at any time
- Data portability: receive the data you gave us in a commonly used format. Azentro lets you export your records as CSV
- Withdraw consent where we rely on it, without affecting anything done before
To use any of these rights, email support@azentro.co.uk. We’ll respond within one month, and may ask you to confirm your identity first. It’s free, unless a request is clearly unfounded or excessive. We don’t make decisions about you based solely on automated processing that have legal or similarly significant effects.
14.Who Azentro is for
Azentro is a business tool for Amazon sellers. Anyone can sign up, but it’s designed for UK-based sellers and currently supports the Amazon UK marketplace only. It’s not intended for anyone under 18, and we don’t knowingly collect data from children. If you’re in the European Economic Area, you have equivalent rights under the EU GDPR, and this policy applies to you in the same way.
15.Changes to this policy
We’ll update this policy when what we collect or how we use it changes. The date at the top shows when it last changed. If a change is significant, we’ll tell you by email or in the app before it takes effect.
16.Contact us and complaints
For any question about this policy or your data, email support@azentro.co.uk or write to Azentro Limited, 20 Wenlock Road, London, England, N1 7GU.
If you’re unhappy with how we’ve handled your data, please contact us first so we can try to put it right. You also have the right to complain to the Information Commissioner’s Office, the UK’s data protection regulator, at ico.org.uk/make-a-complaint or on 0303 123 1113.