Privacy policy
This policy explains what Urbn Square processes, why we need it and the boundaries we apply when you connect a marketplace account.
Last updated: August 13, 2026
Urbn Square is the data controller for the website, account administration, support and service security. For operational marketplace data, the selling business remains responsible for its data and Urbn Square processes that information to provide the authorized service on its behalf. We are established at Lopikhof 1, 1108 GH Amsterdam, the Netherlands (Dutch Chamber of Commerce no. 83939210). For privacy questions, requests or security concerns, contact [email protected].
This policy applies to urbnsquare.com, your Urbn Square account and the operational data processed after you authorize a supported marketplace or fulfilment connection. It does not govern Amazon, Bol.com or another provider’s own processing; their policies continue to apply to your relationship with them.
Account and business information: your name, work email address, company name, role, plan, settings and support correspondence.
Authorized Amazon Information: catalog and listing data, offers, prices, sales, orders, inventory, shipments, returns, fees, settlements, invoices and eligible Brand Analytics reports needed for the features you enable.
Other connected operations: Bol.com and fulfilment-provider records where you choose to connect them, including orders and shipping details required to fulfil your own orders.
Information you add: suppliers, cost prices, lead times, purchase orders, product mappings, operational rules and notes.
Security and service records: sign-in events, authorization status, request metadata, error reports and audit logs used to protect and maintain the service.
The Amazon integration is designed not to persist buyer or recipient personally identifiable information. Buyer names, full addresses and contact details are stripped before storage; only non-identifying destination information such as country or region may be retained where required for tax and operational reporting. Urbn Square does not use Amazon Information to profile buyers or for advertising.
To connect the selling account you authorize and provide inventory, profitability, purchasing, listing and analytics features.
To calculate and explain product-level results, identify exceptions and prepare actions for your review.
To secure the service, investigate errors, prevent abuse and maintain an audit trail.
To provide onboarding, support, account notices and transactional email.
To comply with legal, tax, marketplace-policy and security obligations.
Under the GDPR, these uses rely on performance of our agreement, our legitimate interests in running and securing the service, compliance with legal obligations and, where applicable, your consent. You may withdraw consent without affecting earlier lawful processing.
You connect Amazon through Amazon’s supported authorization flow; Urbn Square does not ask for your Seller Central password. We use Amazon Information only to provide the enabled service to the selling account that authorized access.
Each customer’s operational data is separated by workspace and access controls.
We do not sell, rent or disclose non-public marketplace data for advertising.
We do not pool non-public Amazon Information across sellers, build cross-seller benchmarks from it or use one seller’s information to advise another.
Where an AI-assisted feature is enabled, Urbn Square sends only the minimum operational context needed to produce the requested explanation or prioritization. Deterministic calculations remain the source for stock and financial figures. The current Amazon integration does not send Amazon Information to the AI provider, and customer data is not used by Urbn Square to train a shared model.
We use a limited set of processors to operate the service. Their role does not automatically mean that they receive Amazon Information. Under the current Amazon integration design, the following boundaries apply:
DigitalOcean: processes Amazon Information as part of EU application hosting, managed database services and backups.
Sentry: processes technical error and service diagnostics. Marketplace credentials and Amazon business payloads are excluded from error-monitoring data; we do not intentionally send Amazon Information to Sentry.
Resend: processes account and transactional email. Amazon Information is not included in those messages.
Anthropic: processes selected non-Amazon operational context for enabled AI-assisted features. The current Amazon integration does not send Amazon Information to Anthropic.
These providers receive only the information required for their stated role and process it under contractual safeguards. If a processor handles personal data outside the European Economic Area, we use an approved transfer mechanism such as the European Commission’s Standard Contractual Clauses where required. We will update this policy and any required marketplace disclosures before changing which outside parties receive Amazon Information.
Marketplace credentials are encrypted with AES-256-GCM and the encryption key is kept outside the database.
Connections to the application, database and marketplace APIs use encrypted transport.
Production application data and managed database services are hosted in the EU.
Access is limited by workspace and role, and security-relevant events are monitored and logged.
No system is completely risk-free. If you believe your account or data may be affected by a security issue, contact [email protected] immediately.
We retain account and operational records while needed to provide the service, meet legal obligations and resolve disputes. Our retention schedule requires raw Amazon Information to be retained for no longer than 18 months, and for less time when it is no longer required. Derived or aggregated data originating from Amazon Information is retained only where permitted under applicable Amazon policies and the same documented retention schedule. We do not use transformation or aggregation to circumvent Amazon data-retention or deletion requirements. Security and financial records may be kept longer where law or marketplace policy requires this.
You can revoke Urbn Square’s Amazon authorization in Seller Central. After revocation, account closure or a valid deletion request, we stop new collection and delete or anonymize the affected information unless retention is legally required. Encrypted backups expire through the standard backup cycle.
The public pages do not load advertising trackers or third-party analytics. The signed-in application may use strictly necessary browser storage or session technologies for authentication, security and service preferences. These are not used for cross-site advertising.
Depending on the law that applies, you may request access, correction, deletion, restriction, objection or portability of personal data. You may also complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens). To exercise a right, email [email protected]; we may need to verify your identity before acting on the request.
We may update this policy when the service, law or marketplace requirements change. The date above identifies the latest version. If a material change affects an active customer, we will provide notice through the service or by email.