Privacy Policy

Last updated: 11 April 2026

Pellix ("we", "our", "us") is operated by Calypso Commerce Ltd, registered in England and Wales. This policy explains how we collect, use, store, share and delete your personal data and Amazon Selling Partner data when you use Pellix (the "Service").

1. Who We Are

Pellix is an Amazon analytics dashboard built for Amazon sellers and agencies. We use Amazon's Selling Partner API (SP-API) to retrieve your seller data and present it in a unified dashboard.

Data Controller: Calypso Commerce Ltd
Contact: support@pellix.co.uk

2. What Data We Collect

2.1 Account Data

When you sign up, we collect:

• Name and email address
• Password (hashed, never stored in plain text)
• Billing information (processed by Stripe; we do not store card details)

2.2 Amazon Selling Partner Data

When you connect your Amazon Seller Central account via OAuth, we access the following data through Amazon's SP-API:

• Orders data: Order IDs, items, quantities, revenue, fulfilment channel, order status
• Inventory data: SKU-level stock quantities, FBA inventory levels, days of cover
• Product/catalogue data: ASINs, titles, descriptions, images, pricing, listing status
• Performance data: Buy Box percentage, sessions, conversion rates, BSR

We only request access to the SP-API roles necessary to provide the Service. We do not access customer personal data (buyer names, addresses, or payment details) beyond what is included in anonymised order data.

2.3 Usage Data

We collect standard analytics data including pages visited, features used, browser type and IP address to improve the Service.

3. How We Use Your Data

• To provide, maintain and improve the Pellix dashboard and analytics features
• To sync and display your Amazon seller data in real time
• To send you alerts (e.g. low stock, listing issues) if configured
• To process payments and manage your subscription
• To respond to support requests
• To comply with legal obligations

We do not sell your data to third parties. We do not use your Amazon data for advertising or marketing purposes.

4. How We Store and Protect Your Data

• All data is stored on secure, encrypted servers (Cloudflare Workers and D1 database, EU region)
• Amazon API credentials (refresh tokens) are encrypted at rest using AES-256
• All data transmission uses TLS/HTTPS encryption
• Passwords are hashed using PBKDF2 with unique salts
• Access to production systems is restricted to authorised personnel only

5. Data Sharing

We share data only with the following categories of processors, and only as necessary to provide the Service:

• Amazon SP-API: To retrieve and sync your seller data
• Stripe: To process subscription payments
• Cloudflare: To host and deliver the Service

We do not share, sell, rent or disclose your Amazon data to any other third party unless required by law.

6. Data Retention

• Your account data is retained for as long as your account is active
• Amazon seller data is retained for the duration of your subscription plus 30 days
• Upon account deletion, all your data (including Amazon seller data) is permanently deleted within 30 days
• Backups containing your data are purged within 90 days of account deletion

7. Your Rights (Data Deletion & Access)

Under GDPR and the Amazon Data Protection Policy (DPP), you have the right to:

• Access: Request a copy of all data we hold about you
• Rectification: Correct any inaccurate data
• Deletion: Request deletion of your account and all associated data, including all Amazon SP-API data
• Portability: Receive your data in a machine-readable format
• Revoke access: Disconnect your Amazon Seller Central account at any time via your Pellix settings or directly in Amazon Seller Central under "Manage Your Apps"

To exercise any of these rights, email support@pellix.co.uk. We will respond within 30 days.

8. Amazon Data Protection Policy Compliance

Pellix complies with Amazon's Selling Partner API Data Protection Policy (DPP), including:

• We only access SP-API data roles necessary to provide our stated service
• We encrypt all Amazon data at rest and in transit
• We do not share Amazon data with unauthorised third parties
• We delete all Amazon data upon user request or account termination
• We maintain appropriate security controls and access logging

9. Cookies

We use essential cookies for authentication and session management. We do not use third-party advertising cookies.

10. Changes to This Policy

We may update this policy from time to time. Material changes will be communicated via email or in-app notification. Continued use of the Service constitutes acceptance of the updated policy.

11. Contact Us

For any privacy-related questions or requests:

Calypso Commerce Ltd
Email: support@pellix.co.uk
Address: London, United Kingdom