Privacy notice

Supermod sends supplied listing text to the server and, only when an eligible paid scan is allowed, to TypeSafe with the detector questions. Provider keys stay server-side.

Amazon account data

If you connect Seller Central, Supermod accesses seller identity, marketplace participation, catalog fields, submitted listing attributes, listing status, and Amazon-reported listing issues so you can choose listings to review. It does not request orders, buyer details, addresses, payments, or customer PII. Amazon refresh tokens remain server-only and are encrypted at rest.

Storage and deletion

Reports and reviewer feedback are stored in your browser. Signed-in reports, Amazon connection status, marketplace identifiers, and selected normalized listing imports are also stored in Supabase under organization-scoped access controls. Disconnecting Amazon deletes Supermod’s locally stored token, marketplaces, and imports; it does not claim to revoke Amazon-side authorization. Remove Supermod in Seller Central to revoke it there. Account deletion and formal retention periods still require owner policy before broad launch.

Authentication and exports

Google OAuth and email magic-link paths exist through Supabase Auth. Validation exports are created only when requested, remain on the user’s device, and contain the complete supplied listing copy, report evidence, checks, and feedback.

Beta boundary

Do not submit customer data, credentials, or unrelated sensitive information. Hosting, retention, subprocessors, data-subject procedures, and this notice still require owner and legal approval before a broader launch.