Terms and Conditions

Terms of Service

Last updated: August 31, 2025

1. Introduction

Welcome to FlowCart. By accessing or using our services, you agree to be bound by these Terms of Service ("Terms"). Please read these Terms carefully before using our platform. If you do not agree to these Terms, please do not use our services.

2. Description of Service

FlowCart provides AI-powered tools for Amazon sellers, including automated review solicitation campaigns, profit analytics, listing optimization, and buyer communication management. Our platform connects to your Amazon seller account through Amazon's Selling Partner API (SP-API) to deliver these services.

3. User Accounts

To access certain features of our service, you may be required to register for an account. You agree to provide accurate, current, and complete information during the registration process and to update such information to keep it accurate, current, and complete.

You are responsible for maintaining the confidentiality of your account credentials and for all activities that occur under your account. You agree to notify us immediately of any unauthorized use of your account or any other breach of security.

4. Subscription and Payment

Our services are provided on a subscription basis. By subscribing to FlowCart, you agree to pay all fees associated with your subscription plan. All payments are non-refundable except as expressly provided in our Refund Policy.

We may change our fees at any time by posting the changes on our site or by notifying you via email. Your continued use of the service after the fee change becomes effective constitutes your agreement to pay the changed amount.

5. Limitations of Liability

To the fullest extent permitted by law, FlowCart shall not be liable for any indirect, incidental, special, consequential, or punitive damages, or any loss of profits or revenues, whether incurred directly or indirectly, or any loss of data, use, goodwill, or other intangible losses, resulting from:

• Your access to or use of or inability to access or use the services;
• Any conduct or content of any third party on the services;
• Any content obtained from the services; and
• Unauthorized access, use, or alteration of your transmissions or content.

6. Termination

We may terminate or suspend your account and bar access to our service immediately, without prior notice or liability, for any reason whatsoever, including, without limitation, if you breach these Terms.

All provisions of these Terms which by their nature should survive termination shall survive termination, including, without limitation, ownership provisions, warranty disclaimers, indemnity, and limitations of liability.

7. Changes to Terms

We reserve the right to modify these Terms at any time. We will provide notice of significant changes by posting the new Terms on our site and/or sending you an email. Your continued use of the service after such modifications will constitute your acknowledgment and acceptance of the modified Terms.

Privacy Policy

The canonical Privacy Policy lives at /privacy. The full text is mirrored below for convenience.

Last updated: August 2, 2026

1. Information We Collect

We collect information that you provide directly to us when you register for an account, create or modify your profile, set preferences, or make purchases. This information may include your name, email address, phone number, billing information, and product information.

We also automatically collect certain information when you visit our site, such as your IP address, browser type, operating system, referring URLs, access times, and pages viewed.

2. Amazon Seller Data

When you connect your Amazon seller account to FlowCart, we access data through Amazon's Selling Partner API (SP-API). This section describes how we handle Amazon seller data in compliance with Amazon's Data Protection Policy (DPP).

Data we access:

• Order data (order IDs, order status, item details, delivery dates) for review campaign targeting and analytics;
• Financial events (transactions, fees, settlements) for profit analytics;
• Catalog information (product titles, ASINs, categories) for listing optimization;
• Messaging and solicitation capabilities for buyer communication features (delivered through Amazon's APIs without exposing buyer contact details to FlowCart);
• Seller account information (marketplace participations, performance metrics) for dashboard and analytics.

Buyer personal information:

FlowCart does not collect buyer personal information. We do not request, receive, or store Amazon buyer names, email addresses, or shipping addresses. We do not request Restricted Data Token (RDT) / restricted PII roles, and we do not call createRestrictedDataToken. Review requests are sent through Amazon's Solicitations API, which delivers the message on Amazon's side without exposing buyer contact details to us.

Data security:

• All Amazon seller data is encrypted in transit (TLS 1.2+) and encrypted at rest;
• Access to Amazon seller data is restricted to authorized personnel and systems required to provide FlowCart's services;
• We maintain security logs for a minimum of 90 days;
• We do not sell, rent, or share Amazon seller data with third parties for their own purposes.

Data retention and deletion:

• Amazon seller data we store is limited to non-buyer-PII fields needed to provide FlowCart's services (for example order IDs, order status, item details, delivery dates, financial events, and catalog information);
• When you disconnect your Amazon account or close your FlowCart account, we delete all stored Amazon seller data within 30 days;
• You may request deletion of your Amazon seller data at any time by contacting support@flowcartapp.com.

Security incidents:

In the event of a security incident affecting Amazon seller data, we will notify Amazon within 24 hours of becoming aware of the incident, and we will notify affected users promptly in accordance with applicable laws and Amazon's Data Protection Policy.

2A. Amazon Ads Data

When you authorize FlowCart to access your Amazon advertising account through the Amazon Ads API (Login with Amazon OAuth), we access advertising data solely to provide Sponsored Products management and reporting for your authorized advertising profiles. This notice is provided in accordance with Amazon Ads Partner Network Policies §4.14.

Advertising data we may access:

• Campaign, ad group, and keyword configuration and status for Sponsored Products;
• Bids, budgets, and targeting settings you authorize FlowCart to read or update;
• Performance reporting metrics (such as impressions, clicks, spend, and attributed sales) for the authorizing advertiser's own campaigns;
• Advertising profile and account identifiers needed to scope access to your authorized profiles.

How we use advertising data:

We use Amazon Ads data only to operate FlowCart's advertising tooling for the authorizing advertiser — reporting, recommendations (including bid and negative-keyword suggestions grounded in the seller's own margin data where available), and gated write actions that require your explicit approval before any change is applied through the Amazon Ads API. We do not sell, rent, or share Amazon Ads data with third parties for their own purposes. We do not operate as a comparison shopping engine, demand-side platform, marketplace, or competitive ad network.

Authorization and deletion:

• Access is granted only after you complete Amazon's authorization flow and can be revoked at any time from Amazon Ads / Login with Amazon;
• We request only the minimum Ads data needed for Sponsored Products management and reporting for the authorizing advertiser;
• When you disconnect advertising access or close your FlowCart account, we delete stored Amazon Ads data within 30 days, except where retention is legally required.

Data security and incidents:

• Amazon Ads data is encrypted in transit (TLS 1.2+) and encrypted at rest;
• OAuth access and refresh tokens are stored encrypted and are never written to application logs;
• In the event of a security incident affecting Amazon Ads data, we will notify Amazon within 24 hours of becoming aware of the incident, and we will notify affected users promptly in accordance with applicable laws and Amazon's policies.

The Amazon Ads integration is in application and is not yet available for third-party seller OAuth. This section describes how FlowCart will handle Ads data once that access is approved and you authorize it.

3. AI and Automated Processing

FlowCart uses artificial intelligence to generate product research reports when you request them. To produce those reports, we send the product name and any other product details you provide for the report to third-party AI model providers through our AI gateway (OpenRouter). We do not send buyer personal information, because we do not collect or store Amazon buyer names, email addresses, or shipping addresses. On every OpenRouter request we set provider.data_collection to deny, which instructs OpenRouter to route only to providers it marks as not collecting user data (including for model training). That setting is a routing preference we enforce in application code; it is not a separate contractual Zero Data Retention agreement with every underlying model vendor, and we do not currently enable OpenRouter's stronger zdr (zero-data-retention) flag. AI output is generated automatically and may be inaccurate. It is shown to you for your review. FlowCart does not currently apply AI output as unattended Amazon listing changes or Amazon Ads campaign updates. Separately from AI processing, when you enable an active review campaign FlowCart may send review solicitation requests through Amazon's Solicitations API on a scheduled automated sweep without a human approving each individual send.

4. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our services, including automated review campaigns, profit analytics, listing optimization, buyer communication, and Amazon Ads / Sponsored Products management;
• Process transactions and send related information;
• Send technical notices, updates, security alerts, and support messages;
• Respond to your comments, questions, and requests;
• Develop new products and services;
• Monitor and analyze trends, usage, and activities in connection with our services.

5. Information Sharing and Disclosure

We do not sell, trade, or otherwise transfer your personal information to third parties without your consent, except as described below:

• With vendors, consultants, and service providers who need access to such information to perform services on our behalf;
• In response to a legal request if we believe disclosure is required by law;
• To protect the rights, property, and safety of FlowCart, our users, or others;
• In connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business by another company.

6. Data Retention

We will retain your information for as long as your account is active or as needed to provide you services. We will also retain and use your information as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements. For Amazon seller data and Amazon Ads data, see the specific retention and deletion commitments in Sections 2 and 2A above.

7. Your Rights

You may access, correct, or delete your personal information by contacting us. Note that we may retain certain information as required by law or for legitimate business purposes.

8. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date at the top of this policy.

You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.