Privacy & Data Protection Policy

This Privacy and Data Protection Policy governs the handling of information across all web properties operated by Stupers International Inc. ("Company", "we", "our", or "us"), including our corporate portal (stupersinternational.com) and our specialized SaaS operating platforms such as eSellerOps (esellerops.com and app.esellerops.com).

We build automation and operational infrastructure. Protecting the integrity, confidentiality, and availability of our clients' business data, supplier catalogs, and Amazon merchant metrics is our fundamental operational baseline.

Depending on your interaction with our corporate services or SaaS platforms, we collect the following limited categories of information:

• Corporate Inquiries & Contact Details: Name, business email address, company name, phone number, and message content submitted through our online contact forms or consultation booking calendars.
• SaaS Account Identity & Authentication: Email addresses, hashed authentication credentials, and session tokens verified securely via Supabase Authentication and multi-factor authentication (MFA) protocols.
• Amazon Selling Partner API (SP-API) Data (For eSellerOps Users): When a user connects their Amazon Seller Central account to eSellerOps via Login with Amazon (LWA) OAuth 2.0, we securely obtain restricted access/refresh tokens along with specific merchant data: active/inactive inventory listings (getListingsItems), exact product fee schedules and estimated charges (getMyFeesEstimate), and ASIN-specific account gating/restrictions verifications (getListingsRestrictions).
• Operational Logs & System Telemetry: Standard web server access logs, browser agent strings, and transaction timestamps required for security auditing and diagnostic monitoring.

We protect your business and regulatory data with state-of-the-art cryptographic controls and cloud architecture:

• Encryption in Transit: All data transmitted between user browsers, corporate endpoints, Amazon SP-API endpoints, and our backend clusters is encrypted using modern Transport Layer Security (TLS 1.3).
• Encryption at Rest: Database volumes, OAuth tokens, and sensitive client records are encrypted at rest using industry-standard AES-256 encryption inside isolated AWS / Supabase data centers.
• Principle of Least Privilege: Internal access to production database systems is restricted exclusively to authorized senior engineering personnel via encrypted SSH tunnels and multi-factor authentication.

We retain personal and business information only for the duration necessary to fulfill the services requested, comply with legal obligations, or resolve disputes.

Amazon SP-API Revocation & Purge: If an eSellerOps user disconnects their Amazon Seller Central account from our application or requests account closure, all associated LWA OAuth tokens, cached product listings, and merchant-specific metrics are permanently purged from our active databases within thirty (30) days (or immediately upon verified request).

Right to Erasure (GDPR / CCPA): Users have the right to request access to, modification of, or permanent deletion of their personal information at any time. To initiate a data deletion request, email our compliance officer directly at senna@stupersinternational.com or support@esellerops.com.

If you have questions regarding this Privacy Policy, our Amazon SP-API compliance posture, or data protection practices, please contact our registered corporate office: