Privacy Policy
This policy explains what information Profit Outpost collects, why, and how we use, store, share, protect and delete it, and the choices you have. It covers the Profit Outpost desktop app, its web services, and this website.
- Who we are
- Information we collect
- Google user data (Google Sheets)
- How we use information
- Service providers and sharing
- AI features
- How we protect information
- How long we keep information
- Your rights and choices
- Children
- Where information is processed
- Changes to this policy
- Contact us
1. Who we are
Profit Outpost is owned and operated by Daou Supplies LLC, 4901 Larabrook Place, Glen Allen, Virginia 23060, United States ("we", "us"). For privacy questions and requests, email support@profitoutpost.com.
2. Information we collect, and why
Account and sign-in information
Your name and email address, and the information needed to sign you in securely. Sign-in is handled by Amazon Cognito, a service of Amazon Web Services, which stores your email address, a protected form of your password and your multi-factor authentication (authenticator app) enrollment. We never see your password. We use this information to create your account, sign you in and keep it secure.
Information you add to your workspace
Leads, supplier price lists, notes, watchlists, alerts, cost records, settlement reports and documents you upload, your settings, and the team members you invite (their email addresses and roles). We use it to provide the features you use.
Amazon seller data (only if you connect your seller account)
Connecting an Amazon seller account is in development and not yet generally available. If you authorize Profit Outpost through Amazon's official authorization process, we receive data from the Amazon Selling Partner API for your seller account: catalog details, prices and offers, fee estimates, listing eligibility, inventory, orders and payout transactions. We do not request or store buyers' names, addresses or contact details from orders. We store an encrypted authorization token so we can retrieve this data for you, and we use the data only to provide Profit Outpost's features to your workspace. When you disconnect, we delete the stored token immediately; to also remove the authorization at Amazon, remove Profit Outpost under Manage Your Apps in Seller Central.
Google user data (only if you connect Google Sheets)
Described in detail in section 3.
Product and price research
The text you enter in Retail Price Search and the results shown to you. Product and retailer offer information that we collect from product data services and product research; this is information about products and public retail listings, not about you.
Communications
Your notification preferences, records of the emails we send you (recipient, type, time and delivery status, not the message content), and the emails you send to support@profitoutpost.com.
Technical and security information
Service logs such as the time of a request, the address requested, the response status and the IP address it came from, and audit records of sensitive actions in your workspace (for example, connecting an integration), which can include an IP address. We use these to keep the service secure, prevent abuse and fix problems. The desktop app does not use advertising identifiers. This website uses no cookies, analytics or trackers, and we do not keep visitor logs for it.
Payments
We do not currently collect payment card or bank information. If we begin taking payments online, we will use a third-party payment processor and update this policy before doing so.
3. Google user data (Google Sheets integration)
Connecting Google Sheets is optional. It lets you export your lead list from Profit Outpost to a Google spreadsheet.
What we access
- We request one Google permission: "See, edit, create, and delete only the specific Google Drive
files you use with this app" (
https://www.googleapis.com/auth/drive.file). - With it, Profit Outpost can access only spreadsheets it creates for you, or a spreadsheet you choose to use with it. It cannot see, list or open any other files in your Google Drive.
- We do not request access to your Gmail, contacts, calendar, Google profile or any other Google data, and we never receive your Google password.
How we use it
- Only when you ask Profit Outpost to export, it creates a spreadsheet named "Profit Outpost leads" (or uses the spreadsheet you chose), clears the selected sheet tab and writes your current lead list to it: product identifiers, titles and brands, supplier details, costs, prices, estimated profit, ROI and margin, estimated sales, eligibility, risk flags, match confidence, scores, status, tags and notes from your workspace.
- We use this access solely to provide the export feature you request. We do not read other content from your spreadsheets, and we do not use Google user data for advertising, to build profiles of you, or to train or improve AI or machine-learning models.
How we store and protect it
- When you connect, Google issues an authorization token. We store only the long-lived (refresh) token, encrypted, in our database. The encryption key is kept separately in AWS Systems Manager Parameter Store, encrypted with AWS Key Management Service. Short-lived access tokens are used in memory during an export and are not stored.
- We do not store copies of your spreadsheet's contents. We keep the connection status, when you connected, and audit records of connections and disconnections, which never contain tokens.
- A connection can be used only by the workspace that made it. Tokens are never sent to the desktop app or shown to anyone.
Sharing
We do not sell, rent or share Google user data. It is transferred only to Google, to perform the export you request, and it is processed by our hosting provider, Amazon Web Services, as part of running the service. Our staff do not read Google user data unless you ask us to for support, it is necessary for security (such as investigating abuse), or the law requires it.
Retention, revocation and deletion
- We keep the encrypted token until you disconnect Google Sheets or your workspace is deleted.
- When a workspace is deleted, including when you delete your account and it deletes the workspaces you solely own, we ask Google to revoke the workspace's token and then delete it.
- When you disconnect (Integrations › Google Sheets › Disconnect), we delete the stored token immediately and ask Google to revoke it.
- Database backups that may contain the encrypted token are kept for up to 7 days and then deleted automatically.
- You can also remove Profit Outpost's access at any time in your Google Account at myaccount.google.com/permissions.
- Spreadsheets Profit Outpost created belong to you and stay in your Google Drive. Deleting your Profit Outpost account or workspace does not delete them; you can delete them in Google Drive.
Google's own practices
Google processes data in your Google Account under Google's own Terms of Service and Privacy Policy, which we don't control. This section describes only how Profit Outpost handles the Google user data it receives.
Limited Use
Profit Outpost's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
4. How we use information
- To provide the features you use: research, profit calculations, price search, deal finding, leads, alerts, exports and integrations.
- To send the emails and in-app notifications you choose; security notices are always sent.
- To keep the service secure, prevent abuse, troubleshoot problems and enforce usage limits.
- To respond to your requests and comply with legal obligations.
We do not sell personal information and do not use it for advertising.
5. Service providers and sharing
We share information only as needed to run the service, with these providers, who process it for us:
| Provider | What it does for Profit Outpost |
|---|---|
| Amazon Web Services | Hosting (including this website), database and file storage; sign-in (Amazon Cognito); email delivery (Amazon Simple Email Service); the in-app assistant (Amazon Bedrock); security and logging |
| Retail Price Search (Gemini API with Grounding with Google Search); Google Sheets export if you connect it; Google Workspace for email you send to support@profitoutpost.com | |
| Amazon Selling Partner API | Your Amazon seller data, if you connect your seller account |
| Cloudflare | Domain name service for profitoutpost.com |
| Discord | Only if you add a Discord webhook: alert titles and messages are posted to your Discord channel |
| Product data services (such as UPCitemdb) | Product and price information; we don't send them personal information |
We may also disclose information if the law requires it, to protect the rights, property or safety of our users or others, or as part of a merger, acquisition or sale of assets, in which case this policy will continue to apply to your information.
6. AI features
- Retail Price Search sends the text you type to Google's Gemini API with Grounding with Google Search, which searches Google and returns an answer with sources. The answer is shown only to you and kept in your search history for 30 days. Google processes this text under its Gemini API terms, which describe how long Google keeps prompts and responses (Google states 30 days for searches grounded with Google Search) and how Google may use them.
- Automated product research, where enabled, sends product names and search terms to the Gemini API. These requests do not include your personal information.
- The assistant uses Amazon Bedrock. Your Amazon seller data and third-party historical data are not sent to AI models.
- We do not use your information, or Google user data, to train AI models.
7. How we protect information
- Encryption in transit (HTTPS/TLS) and at rest (AWS Key Management Service). Integration tokens are encrypted again with a separate key.
- Multi-factor authentication is required to sign in.
- Each workspace's data is kept separate from other workspaces, and access within a workspace follows the roles you assign.
- A web application firewall, rate limits, least-privilege access between our services, and audit records of sensitive actions.
No method of transmission or storage is completely secure, and we cannot guarantee absolute security. We do not currently hold third-party security certifications. If we learn of a security breach affecting your information, we will notify you as the law requires.
8. How long we keep information
| Information | How long |
|---|---|
| Workspace data (leads, suppliers, documents, settings, audit records) | Until you delete it or the workspace is deleted |
| Amazon and Google authorization tokens | Until you disconnect the integration or the workspace is deleted |
| Retail Price Search history | 30 days |
| Price and sales-rank history, eligibility checks | As set in your workspace's data retention setting (365 days by default) |
| In-app notifications | 180 days |
| Email delivery records | 90 days |
| Service and security logs | Up to 365 days |
| Database backups | Up to 7 days |
| Record that an account or workspace was deleted (account ID, time, IP address) and a one-way hash of the sign-in identifier, which stops old sessions from signing the deleted account up again | Kept for security and legal record-keeping |
9. Your rights and choices
- Access and correction: view and change your information in the app at any time, or email us for a copy of the information we hold about you or to correct it.
- Disconnect integrations: under Integrations; stored tokens are deleted immediately.
- Notifications: choose which emails and notifications you receive in Settings › Notifications.
- Delete your workspace: an owner can delete a workspace in Settings. This permanently deletes the workspace and all its data, including uploaded documents, and revokes its Google Sheets connection at Google.
- Delete your account: Settings › Delete my account. This deletes:
- your profile, your memberships, and your notifications, email delivery records and Retail Price Search history;
- every workspace where you are the only owner, with all its data and connected integrations (you are asked to confirm this first; to keep a workspace, make someone else an owner beforehand);
- your sign-in identity in Amazon Cognito (email address, password and authenticator enrollment).
- Other requests: for access, correction, deletion or any other privacy request, email support@profitoutpost.com from the address on your account. We may need to verify your identity. We aim to respond within 30 days, and always within the time applicable law requires. Depending on where you live, you may have additional rights under local law, and you can exercise them the same way.
10. Children
Profit Outpost is a business tool for people 18 and older. We do not knowingly collect information from children.
11. Where information is processed
We host Profit Outpost in the United States (Amazon Web Services, US East region). If you use it from another country, your information is transferred to and processed in the United States.
12. Changes to this policy
We will post changes on this page and update the dates above. If a change materially affects how we use Google user data or other personal information, we will tell you in the app or by email before it takes effect and, where required, ask for your consent.
13. Contact us
Daou Supplies LLC, 4901 Larabrook Place, Glen Allen, Virginia 23060, United States · support@profitoutpost.com