Privacy Policy

Last updated: August 2026

This Privacy Policy describes how 1000 Bananas (1000 Bananas, LLC, "we", "us") collects, uses, and protects information in connection with our website and the services we provide to partner brands (the "Services").

Information we collect

• Contact information. Name, business name, and email address when you contact us or enter into a partnership.
• Amazon business data. With a partner's explicit authorization, we access business data through Amazon's official interfaces — the Selling Partner API and the Amazon Ads API — on that partner's behalf. This includes sales and traffic reports, listing, catalog and pricing information, inventory data, and advertising performance metrics for the accounts and profiles the partner connects.
• Authorization tokens. OAuth tokens issued by Amazon when a partner authorizes our access. We never collect or store Amazon account passwords.
• Website data. Standard server logs (IP address, browser type, pages visited) used for security and site operation.

We do not request, receive, or store Amazon buyer personal information (such as customer names, delivery addresses, or contact details).

How we use information

• To provide the Services to the partner that authorized access — analysis, reporting, and management of their Amazon business.
• To operate, maintain, secure, and improve the Services.
• To communicate with partners and prospective partners.

Partner data is used solely to provide the Services to that partner. We do not sell partner data. We do not share partner data with third parties except infrastructure subprocessors (cloud hosting and database providers) bound by confidentiality and data-protection obligations, or where required by law. One partner's data is never used to benchmark, advantage, or inform any other party.

Data security

Data is encrypted in transit (TLS 1.2+) and at rest (AES-256). Authorization tokens are stored encrypted. Access follows least-privilege principles and is restricted to personnel who need it to operate the Services. We comply with Amazon's Data Protection Policy for developers.

Data retention and deletion

We retain partner data for the duration of the partnership. If a partner revokes authorization or requests deletion, we delete their data from our systems within 30 days. To request deletion, email partners@1000bananas.com.

Your rights

Depending on your jurisdiction (including under GDPR and CCPA), you may have rights to access, correct, delete, or restrict processing of your personal information, and to data portability. To exercise any of these rights, contact partners@1000bananas.com. Partners may revoke our access to their Amazon accounts at any time from Seller Central (Manage App Permissions) and their Amazon advertising account settings.

Changes

We will post any changes to this policy on this page with an updated date. Material changes will be communicated to partners by email.

Contact

Questions about this policy or data requests: partners@1000bananas.com.