Privacy Policy

Last Updated: March 4, 2026 · Effective Date: March 4, 2026

BuySignal ("the App") is developed and operated by XTS Supply LLC ("we", "us", "our"). This Privacy Policy explains how we collect, use, and protect your information when you use BuySignal.

1. Information We Collect

Account & Authentication

  • Amazon Seller Account Connection: When you connect your Amazon Seller Central account via OAuth, we receive a secure authorization token from Amazon. We never see or store your Amazon username or password. Your authorization token is encrypted with AES-256 and stored on our secure servers.
  • Subscription Information: Your subscription tier (Free, Scout, or Pro) is managed through Apple's App Store. We receive confirmation of your subscription status but do not process or store payment details — Apple handles all billing.

Information You Provide

  • Product Cost Data: Costs you manually enter for scanned products are stored locally on your device.
  • Saved Product Lists: Products you choose to save are stored locally on your device.

Information Collected Automatically

  • Camera Access: BuySignal uses your device camera for scanning product barcodes (UPC/EAN) and for image-based product recognition. Barcode data is processed in real-time on your device. When you use image recognition, captured text is sent to our servers for product matching. No raw images are stored or transmitted — only extracted text.
  • Scan Activity: When you scan a product, anonymous scan data (ASIN, timestamp, and pricing data) is logged to our servers to improve deal accuracy for all users. This data is not linked to your personal identity.
  • Crash & Diagnostic Data: Anonymous crash reports may be collected by Apple's built-in diagnostics system to help us improve app stability. This data does not identify you personally.

Information We Do NOT Collect

  • We do not collect your name, email address, phone number, or any personal contact information through the app.
  • We do not collect location data.
  • We do not use advertising trackers, analytics SDKs, or cross-app tracking.
  • We do not collect or store your Amazon account password.
  • We do not require you to purchase any third-party API subscriptions (such as Keepa).

2. How We Use Your Information

  • Amazon Authorization: Your encrypted authorization token is used by our servers to query Amazon's Selling Partner API on your behalf — looking up product information, checking your selling eligibility, and estimating fees. You can revoke this access at any time.
  • Product & Market Data: We operate backend servers that aggregate market data (pricing history, sales rank, seller counts, deal opportunities) from licensed data providers. This data is served to you through the app — no third-party API keys required on your part.
  • Scan Data: Anonymous scan data contributes to our crowdsourced pricing intelligence, helping keep deal information fresh and accurate for all users.
  • Product Cost Data: Used locally on your device to calculate profit, ROI, and break-even cost. Your cost data is not transmitted to our servers.
  • Camera Data: Barcode scanning is processed entirely on your device. Image recognition extracts text on-device, then searches our product database for matches.

3. Data Storage & Security

  • Device Storage: Your authentication token (JWT), saved products, cost data, and preferences are stored on your device using Apple's iOS Keychain (for credentials) and local app storage (for product data). Keychain data is encrypted at rest and only accessible when your device is unlocked.
  • Server Storage: Our backend servers store your encrypted Amazon authorization token, subscription status, and anonymous scan history. Servers are hosted on secure cloud infrastructure with encrypted storage volumes.
  • Encryption: Amazon authorization tokens are encrypted with AES-256 before storage on our servers. All communication between the app and our servers uses HTTPS/TLS encryption.
  • No Third-Party Sharing: Your data is never shared with, sold to, or disclosed to any third party for marketing or advertising purposes.
  • Data Retention: Your account data is retained as long as your account is active. Anonymous scan data is retained indefinitely to improve service quality. You may request deletion at any time.

4. Third-Party Services

BuySignal's backend servers connect to the following third-party services to provide you with product data:

Service Provider Purpose Privacy Policy
Selling Partner API (SP-API) Amazon Product catalog lookup, eligibility checks, fee estimation Amazon Privacy Notice
Keepa API Keepa.com Price history, sales rank, seller data, market analytics Keepa Privacy Policy
App Store / StoreKit Apple Inc. Subscription management and billing Apple Privacy Policy

These services are accessed by our servers on your behalf — you do not need accounts with or subscriptions to any of these services (other than your Amazon Seller Central account). We do not control these third-party services and encourage you to review their respective privacy policies.

5. Your Rights

You have the right to:

  • Access: View all data stored on your device within the app.
  • Delete: Remove all locally stored data at any time by deleting the app. Request deletion of server-side data by contacting us.
  • Export: Export your saved products as a CSV file (Pro tier).
  • Revoke Access: Disconnect your Amazon Seller Central authorization at any time through the app's Settings or through your Amazon Seller Central account.

For EU/EEA Residents (GDPR)

  • Legal Basis: We process your data based on your explicit consent (connecting your Amazon account) and legitimate interest (providing the service you requested).
  • Data Portability: You can export your saved products as CSV.
  • Right to Erasure: Delete local data by removing the app. Contact us to delete server-side data.
  • Contact: For GDPR-related requests, email privacy@getbuysignal.com.

For California Residents (CCPA)

  • We do not sell your personal information.
  • We do not share your personal information for cross-context behavioral advertising.
  • You may request deletion of your data by contacting us.

6. Children's Privacy

BuySignal is not intended for use by children under 13 years of age. We do not knowingly collect personal information from children under 13.

7. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes through the app or by updating the "Last Updated" date above. Continued use of the app after changes constitutes acceptance of the updated policy.

8. Disclaimer

BuySignal is not created, endorsed, or affiliated with Amazon.com, Inc. or any of its subsidiaries. "Amazon", "FBA", "ASIN", and related terms are trademarks of Amazon.com, Inc.

9. Contact Us

If you have questions about this Privacy Policy, contact us at:

XTS Supply LLC
Email: privacy@getbuysignal.com
Website: https://getbuysignal.com