Payout Proof privacy

Effective September 1, 2026

Data

We store the selling-partner identifier, encrypted Amazon refresh token, region, normalized financial event groups and transactions, reconciliation and receipt metadata, sessions, and Cazimedia billing identifiers. We do not request buyer PII or store raw Amazon responses.

Purpose

We use this data only to reconcile settlements, isolate deferred activity, generate requested receipts, authenticate the seller, manage billing, and operate the service.

Retention

Finance evidence and receipts are retained for up to 365 days while the installation is active. Permanent account deletion removes authorization, normalized data, and receipt objects.

Processors

Cloudflare hosts the Worker, D1 database, R2 receipts, queue, rate limiter, and logs. Amazon supplies authorized Finance data. Stripe processes subscriptions. We use no advertising, tracking, analytics, or AI service.

Security

Refresh tokens use AES-GCM encryption. Records are account-scoped, state and sessions are short-lived and single-use where applicable, mutations require origin and CSRF checks, and public actions are rate-limited.

Privacy requests: [email protected].