Privacy Policy

Effective July 25, 2026 | KrateIQ by Zerionyx LLC | privacy@krateiq.com

1. Who We Are

Zerionyx LLC (“Zerionyx,” “KrateIQ,” “we,” “us,” or “our”) develops and operates KrateIQ, a wholesale product intelligence service designed to help authorized business users evaluate supplier catalogs and sourcing opportunities. KrateIQ is an independent software product and is not affiliated with or endorsed by Amazon.

2. Scope and Current Service Status

This Privacy Policy applies to krateiq.com, the KrateIQ early-access program, related forms, support communications, and the KrateIQ service when made available. During the pre-launch period, the website primarily collects waitlist and contact information. Additional service data described below will be processed only when the corresponding beta functionality is active and a seller has authorized access.

3. Information We Collect

3.1 Website, waitlist, and contact information

We may collect your name, work email address, company name, role, marketplace interests, sourcing workflow information, and messages that you submit through our forms or email channels.

3.2 Account and business information

When accounts become available, we may collect login identifiers, organization details, user roles, account preferences, authorization status, and records needed to administer the service.

3.3 Supplier catalog and sourcing content

At your direction, KrateIQ may process supplier catalog files and related business content, including product names, identifiers, costs, case quantities, URLs, brand information, and notes. We may generate product-match candidates, fee estimates, margin estimates, restriction context, and other analytical results from that content.

3.4 Amazon seller authorization and marketplace data

With explicit seller authorization, KrateIQ may receive access tokens and non-buyer marketplace information available through approved Selling Partner API roles, such as product catalog, listing, pricing, fee, offer, and restriction-related information needed for the authorized workflow. We limit access to the roles and data reasonably required to provide the service.

3.5 Technical and security information

We may collect IP address, browser and device information, timestamps, authentication and authorization events, configuration changes, system errors, API request metadata, and security events. Security logs are designed not to contain buyer personally identifiable information.

3.6 Support communications

We retain the information you provide when requesting support, reporting a problem, participating in product research, or otherwise communicating with us.

4. Information We Do Not Intentionally Collect

The current KrateIQ scope is not designed to collect Amazon buyer personally identifiable information, buyer messages, shipping addresses, payment information, or order-level buyer data. KrateIQ does not send messages to buyers or create Amazon orders. Users must not upload buyer PII, passwords, API secrets, payment-card data, health information, or other unnecessary sensitive data.

5. How We Use Information

We use information to operate and improve the website and service; manage the waitlist and beta; authenticate users and seller authorizations; match supplier items to product candidates; generate pricing, fee, profitability, competition, and restriction insights; provide support; prevent fraud and security incidents; maintain audit records; comply with legal and contractual obligations; and communicate material service or policy updates.

We do not use Amazon-derived information for unrelated advertising, buyer profiling, or purposes outside the seller-authorized KrateIQ workflow.

6. Legal Bases

Where applicable law requires a legal basis, we process information to perform a contract or take steps requested before entering one, pursue legitimate interests such as service security and improvement, comply with legal obligations, and obtain consent where required. You may withdraw consent for future processing when consent is the applicable basis.

7. Amazon SP-API Data Handling

Explicit authorization: Each seller must authorize KrateIQ through the applicable Amazon authorization workflow before we access seller data.

Least privilege: We request only the SP-API roles reasonably necessary for the approved product-intelligence use case.

Purpose limitation: Amazon information is used only to provide, secure, support, and improve the authorized KrateIQ functionality.

Revocation: A seller may revoke authorization through Amazon Seller Central and may also request deletion as described in our Data Deletion Instructions.

8. How We Share Information

We may share information with vetted service providers that support hosting, infrastructure, database, security, analytics, communications, and customer support functions, subject to appropriate confidentiality and data-protection obligations. We may also disclose information when required by law, to protect rights and security, in connection with a corporate transaction, or with your direction or consent.

We do not sell personal information or Amazon-derived seller information. We do not share such information for cross-context behavioral advertising.

9. Data Retention

Backups: Deleted production data may remain in encrypted backups until those backups age out through the normal rotation cycle, generally within 30 additional days, unless legal preservation is required.

Account and supplier content: Generally retained while the account is active and deleted or de-identified within 30 days after a validated account-closure or deletion request, unless a longer period is legally required.

Amazon non-PII data: Retained no longer than 18 months unless a longer period is legally required, and deleted sooner when it is no longer needed for the authorized service.

Security logs: Retained for at least 12 months to support security monitoring, incident investigation, and contractual compliance. Logs are minimized and are designed not to contain buyer PII.

10. Security

We use administrative, technical, and organizational safeguards designed to protect information, including encrypted transmission, encryption at rest where applicable, access controls, least-privilege permissions, multi-factor authentication for privileged access, logging and monitoring, vulnerability management, backup controls, and incident-response procedures. No system can be guaranteed completely secure, and users are responsible for protecting their own credentials and devices.

11. Cookies and Analytics

The website may use essential technologies required for security, hosting, form delivery, and basic operation. We may use limited analytics to understand site performance and usage. Where required, non-essential cookies or similar technologies will be activated only after appropriate notice or consent.

12. International Data Transfers

Zerionyx LLC is a United States company. Information may be processed in the United States or other locations where approved service providers operate. Where required, we use appropriate safeguards for cross-border transfers.

13. Your Privacy Choices and Rights

Depending on your location, you may have rights to access, correct, delete, or receive a copy of your personal information; restrict or object to certain processing; withdraw consent; or appeal a decision. You may unsubscribe from non-essential communications at any time. To exercise a right, contact privacy@krateiq.com. We may need to verify your identity and authority before completing a request.

14. Children

KrateIQ is a business service and is not directed to children under 18. We do not knowingly collect personal information from children.

15. Changes to This Policy

We may update this Privacy Policy as the service, legal requirements, or data practices change. We will post the revised version with a new effective date and provide additional notice when required.

16. Contact

Privacy questions and requests: privacy@krateiq.com

General support: support@krateiq.com

Website: https://krateiq.com

Company: Zerionyx LLC