StarQuester

Privacy Policy

Last updated: 12 October 2026. StarQuester LLC ("StarQuester," "we," "us") is committed to protecting your privacy. This policy describes the personal information we collect, how we use and protect it, and your rights regarding your information.

Data Controller

The data controller responsible for your personal information is StarQuester LLC. You can contact us at support@starquester.com.

Definitions

In this policy, "Service" or "Services" means the StarQuester website and application. "Personal information" (or "personal data") means information that identifies or can reasonably be linked to you. "Service providers" or "processors" are third parties that process data on our behalf to operate the Service (e.g., hosting, payment processing).

Terms not defined here have the same meaning as in our Terms of Use where applicable.

Information We Collect

We may collect personal information when you use our Amazon seller tools, create an account, subscribe to our service, or contact us. This may include:

  • Account information: name, email address, username, and password (stored in hashed form).
  • Payment information: billing is processed by Stripe. We do not store full card numbers; Stripe handles payment details in accordance with their privacy policy.
  • Usage information: how you use the platform (e.g., connected sellers, schedule settings, review request usage) to provide and improve our services.
  • Contact and support: if you use our contact form or support channels, we collect the name, email, and message you provide.
  • Email preferences: whether and when you said yes to, or unsubscribed from, product update and offer emails.
  • Technical data: IP address, browser type, device information, and similar data for security and operation of our website.
  • Analytics data: we use PostHog, a product analytics tool. If you accept cookies, PostHog stores an identifier in your browser so we can understand how StarQuester is used (e.g., pages visited, features used, session duration). In the UK, by default we use PostHog for statistics only, as UK law allows: an anonymous identifier stored in your browser counts visits and journeys so we can improve the site; it never records your visit and is never linked to you or your account. In the EU and EEA, until you make a choice, we count visits without cookies or any storage on your device: PostHog derives an anonymous identifier from a one-way hash of the date, your IP address and browser user agent. The hash changes every day, so visits can't be linked across days or to you. In that mode we record the page, the referring site, campaign (UTM) tags, your country, your browser/device type and, on our public pages, anonymous interactions such as which sections you view and which buttons you click; we never link this to an account or record your session. Sensitive values in page addresses (such as sign-in or verification tokens) are removed before anything is sent. We also log visits by known automated agents (e.g., search engine and AI assistant crawlers), identified by their user agent. PostHog processes data on our behalf under a Data Processing Agreement and does not sell your data; where we route analytics through PostHog's managed proxy, it is delivered via Cloudflare, a PostHog subprocessor. If you turn analytics cookies off (“Reject all”), we stop collecting analytics about your visits altogether. You can change your choice at any time via Cookie preferences.
  • Account activity: our servers record key events in your account — such as signing up (including the campaign or page you signed up from), signing in, connecting a store and plan changes — so we can run, secure and improve StarQuester. This uses no cookies and is based on our legitimate interests; you can object at any time by emailing us.
  • Advertising data: if advertising cookies are on (in the EU, EEA and UK only after you opt in; elsewhere by default, with an opt-out in Cookie settings), we load the Google Ads tag. It sets cookies that let Google measure which of our ads brought you to StarQuester and may show our ads again to people who visited before. Google processes this data under its own terms; see our Cookie Policy for the cookies involved and how to turn them off.

Amazon Authorization and Data

When you connect your Amazon Seller Central account to StarQuester, you authorize us to access certain data through Amazon's Selling Partner API (SP-API). We use this access to:

  • Sync order data (order IDs, status, delivery dates, ASIN/SKU) to determine when to send review requests.
  • Send compliant product review and seller feedback requests via Amazon's official "Request a Review" (solicitation) system.
  • Retrieve product catalog details (title, brand, image) for ASINs tied to your orders and inventory, so we can display your products in your dashboard.
  • As part of our Review Insights feature, retrieve aggregated review topic and trend data for your products, including brief excerpts from customer reviews, to show you what customers say about your products.

We may also use Amazon-sourced data to develop, test, and improve additional features of our platform, consistent with the purposes described in this policy. Before making any material new use of your Amazon data broadly available, we will update this policy and, where required by law, seek your consent.

We do not sell, share, or use Amazon account or order data for marketing or any purpose outside providing our platform features. Our handling of Amazon data complies with Amazon's Data Protection Policy and Solution Provider requirements. For more detail, see our Amazon Policy and Data Policy.

How We Use Your Information

We use the information we collect to:

  • Create and manage your account and authenticate you.
  • Process subscriptions and payments (via Stripe).
  • Sync orders and send review requests in line with your schedule and plan limits.
  • Respond to your inquiries and provide support.
  • Send you product updates, tips, offers and news about StarQuester by email (outside the United States, only if you say yes), which you can unsubscribe from at any time.
  • Improve our services, security, and user experience.
  • Comply with legal and regulatory obligations.

Product Updates and Offers by Email

We may email StarQuester customers about product updates, new features, tips for Amazon sellers, offers, and news about StarQuester, at the address on your account. If your Amazon store is in the United States, we may send these emails without asking first. If your store is anywhere else, we only send them after you say yes (we ask when you sign up or once in your dashboard, and you can change your answer in your profile settings at any time). Every one of these emails has an unsubscribe link.

You can unsubscribe at any time by clicking the unsubscribe link in any of these emails, by switching "Product updates and offers" off in your profile settings, or by contacting us at support@starquester.com. Unsubscribing will not affect transactional or account-related emails (e.g., password reset, billing, security and legal notices, and alerts you have switched on).

We may use a third-party email service provider to send these emails. That provider processes your email address only to deliver emails on our behalf and in accordance with our instructions and this policy.

Legal Basis for Processing

Depending on your location, we process personal information on the following bases:

  • Contract: to provide our services and perform our agreement with you.
  • Legal obligation: to comply with applicable laws.
  • Legitimate interest: for security, fraud prevention, improving our services, and emailing customers in the United States about our services (with an unsubscribe in every message).
  • Consent: where we ask for it (e.g., for non-essential cookies, and for product update and offer emails to customers outside the United States).

Your Rights (Including California and GDPR)

Depending on your jurisdiction, you may have the right to:

  • Access and correction: request access to and correction of your personal information.
  • Deletion (Art. 17 GDPR): request deletion of your personal information, subject to legal exceptions. For EU sellers, you can request account deletion from your account settings; we will complete the deletion cascade within 30 days.
  • Restrict processing (Art. 18 GDPR): request that we pause processing your data (e.g., SP-API sync) while a dispute is pending. EU sellers can toggle sync on/off from their Privacy & Data settings page.
  • Data portability (Art. 20 GDPR): receive a copy of your data in a structured, machine-readable format. EU sellers can export their account data from the Privacy & Data settings page. Note: buyer PII (buyer name and email) is excluded from exports, consistent with Amazon's data protection requirements.
  • Object to processing (Art. 21 GDPR): object to processing of your personal data carried out on the basis of legitimate interests (e.g., analytics, security monitoring). We will stop processing unless we can demonstrate compelling legitimate grounds that override your interests, or unless processing is necessary for legal claims.
  • Opt-out of sale or sharing: we do not sell your personal information. If we ever do, we will offer a "Do Not Sell or Share My Personal Information" option as required by California law.
  • Limit use of sensitive personal information: where applicable, you may limit our use of sensitive personal information.
  • Withdraw consent: where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of processing before withdrawal.

To exercise these rights, contact us at support@starquester.com or use the self-service tools in your account settings (Privacy & Data page). We may ask you to verify your identity before responding to requests. We will respond within the timeframes required by applicable law (e.g., within 30 days under GDPR). California residents may also use the link in our footer or contact us for CCPA/CPRA requests.

If you are in the European Economic Area (EEA) or UK, you have the right to lodge a complaint with your local data protection supervisory authority if you believe our processing of your personal data infringes applicable law. For example, users in Germany may contact the Federal Commissioner for Data Protection and Freedom of Information (BfDI — bfdi.bund.de); users in other EU member states may contact their national authority (a full list is available at edpb.europa.eu). We encourage you to contact us first so we can address your concerns.

Children's Privacy

Our Services are not directed to individuals under 18. We do not knowingly collect personal information from anyone under 18. If you are a parent or guardian and believe your child has provided us with personal information, please contact us and we will delete it promptly.

Do Not Track

Some browsers offer a "Do Not Track" (DNT) setting. We do not currently respond to DNT signals because there is no common standard for how such signals should be interpreted. We treat the data we collect as described in this policy regardless of your DNT setting.

Disclosure of Information

We do not sell your personal information. We may share information only:

  • With service providers (e.g., hosting, Stripe for payments) who are contractually bound to protect it and use it only to provide services to us.
  • When required by law (e.g., subpoena, court order) or to protect our rights, your safety, or the public.

Security

We use reasonable technical, administrative, and physical measures to protect your information, including:

  • Encryption in transit (e.g., TLS) and at rest where appropriate (e.g., AES-256 for stored credentials).
  • Secure storage of SP-API and account credentials using encryption and access controls.
  • Access limited to personnel who need it to operate and support the service.

No method of transmission or storage is completely secure. We cannot guarantee absolute security but we work to protect your data in line with industry and Amazon's requirements.

Breach notification (GDPR Art. 33–34): In the event of a personal data breach affecting EU users, we will notify the relevant supervisory authority within 72 hours where feasible, and notify affected users without undue delay where the breach is likely to result in a high risk to your rights and freedoms.

Retention

We retain your personal information only as long as needed to provide our services, comply with law, or resolve disputes. Account and subscription data are retained while your account is active and for a reasonable period after closure. Amazon-sourced data is handled according to our Data Policy and Amazon's Data Protection Policy (including retention limits for order-related data).

For sellers operating in the EU: buyer name and email synced via the Amazon SP-API are automatically redacted from our systems 30 days after the order's delivery date. SP-API audit logs are anonymized and retained for up to 12 months from the date of anonymization for legal compliance, then purged. When you request account deletion, all your data (including seller records and any retained order data) is deleted within 30 days via our secure deletion cascade.

International Transfers

Your information may be processed in countries other than your own. We take steps to ensure that transfers comply with applicable data protection laws (e.g., standard contractual clauses or other approved mechanisms where required). For EU sellers, account and order data is stored in the EU (eu-central-1 region) via our database provider. We have executed or are in the process of executing Data Processing Agreements with our key subprocessors, including Google Cloud, Turso and PostHog (analytics; PostHog uses Cloudflare to deliver its managed proxy).

Links to Other Sites

Our site may link to third-party websites (e.g., Amazon, Stripe). We are not responsible for their privacy practices. Please read their privacy policies before providing them with personal information.

Related Policies

  • Cookie Policy — what cookies and tracking technologies we use and how to manage them.
  • Data Policy — detailed information on how we collect, store, retain, and delete data, including Amazon SP-API data.
  • Amazon Policy — how we integrate with Amazon Seller Central and our compliance with Amazon's policies.
  • Terms of Use — the agreement governing your use of StarQuester.

Changes to This Policy

We may update this privacy policy from time to time. We will post the updated policy on this page and update the "Last updated" date. Continued use of our services after changes constitutes acceptance of the updated policy.

Contact Us

For questions about this privacy policy or our data practices, contact us at support@starquester.com.