Privacy Policy - NaviKit Seller Assistant

Last updated: May 22, 2026

1. Overview

NaviKit Seller Assistant is a Chrome extension that helps Amazon FBA sellers analyze product profitability, track competitor products, and review customer feedback. This policy describes what data we collect, how we use it, and your rights.

2. Data We Collect

2.1 Personal Information

We collect your email address when you create an account. You may optionally provide your name.

2.2 Authentication Data

We store your password in bcrypt-hashed form. We issue JWT tokens and refresh tokens (SHA-256 hashed) for session management. No authentication data is stored in plaintext.

2.3 Website Content (Amazon Product Pages)

When you visit Amazon product pages, our content script reads the following publicly visible data from the page:

Product ASIN, title, price, and category
Product dimensions and weight (for FBA fee calculation)
Customer ratings and review text (for AI analysis)
Best Sellers Rank (BSR)

This data is sent to our server only when you actively use a feature (e.g., clicking "Calculate Profit" or "Analyze Reviews"). We do not collect data from any websites other than Amazon.

2.4 Usage Data

We track daily API request counts (profit calculations, review analyses, competitor analyses) to enforce subscription plan limits.

2.5 Payment Data

We use Creem as our payment processor. We do not collect, store, or access your credit card or payment method details. Creem handles all payment data in compliance with PCI-DSS standards.

3. Browser Permissions

The extension requests the following permissions:

Permission	Purpose
storage	Store your login credentials and preferences locally in your browser
sidePanel	Display the dashboard sidebar for account management and watchlist
Host permission (amazon.com, amazon.co.uk, amazon.de, amazon.co.jp)	Read product data from Amazon pages to provide profit calculation and analysis features

4. How We Use Your Information

To provide profit calculation, competitor analysis, and AI-powered review insights
To process and manage subscription payments
To enforce usage limits per subscription plan
To track watched product prices and rankings for Business plan users

5. Data Storage and Security

All data is stored on secure servers with HTTPS/TLS encryption in transit
Passwords are hashed using bcrypt
Authentication tokens are hashed using SHA-256
Database access is restricted and authenticated
Review analysis results are cached for 7 days and automatically deleted

6. Third-Party Services

Service	Purpose	Data Shared
Creem	Payment processing	Email, subscription plan
GLM AI	Review analysis	Review text (for analysis only)

We do not sell, trade, or share your personal information with any other third parties.

7. Data Retention

Account data: Retained until you request deletion
Review analysis cache: Automatically deleted after 7 days
Watchlist snapshots: Automatically deleted after 30 days
Usage tracking: Retained for billing and limit enforcement

8. Your Rights

You may request:

Access to your personal data
Correction of inaccurate data
Deletion of your account and all associated data

To exercise these rights, contact us at krebs.chen@163.com.

9. Children's Privacy

Our service is not intended for children under 13. We do not knowingly collect information from children.

10. Changes to This Policy

We may update this policy from time to time. We will notify users of significant changes via email or in-app notification.

11. Contact

If you have questions about this privacy policy, please contact us at:

Email: krebs.chen@163.com