Privacy Policy

1.1 Information you provide

When you contact us, request a consultation or engage our services, we collect your name, company or brand name, email address, phone number and the details of your inquiry. If you sign a service agreement with us, we also process the business contact and billing information needed to perform it.

1.2 Amazon Selling Partner data (App)

Only after you authorize the App on Amazon’s official consent page — and only to the extent needed for the features you use — the App retrieves the following through the Selling Partner API:

• Account identifiers: selling partner ID, marketplace IDs and the authorization (refresh) token issued by Amazon
• Orders and order items: order IDs, dates, status, ASIN/SKU, quantities, item prices and fees — without buyer personal information
• Sales and traffic reports
• FBA and seller-fulfilled inventory data
• Listings and catalog item data
• Settlement, financial event and fee data

The App does not request access to buyer names, addresses, phone numbers, email addresses or any other Restricted Data.

1.3 Information collected automatically

The Website is hosted on GitHub Pages. When you visit, our hosting provider and the font delivery networks we use (Google Fonts and jsDelivr) may process technical data such as your IP address, browser type and access time in order to deliver and secure the Website. We do not use analytics, advertising or tracking cookies.

We use information only for the following purposes:

• To provide the App’s dashboards, alerts and reports to the seller who authorized it
• To perform our Amazon operations and consulting services under contract
• To respond to inquiries, prepare quotes and provide customer support
• To maintain the security and integrity of the Services and prevent misuse
• To comply with legal and regulatory obligations

We do not use Amazon information for any other purpose. In particular, we do not sell it, use it for advertising or for marketing to buyers, combine it with other sellers’ data, or use it to compete with Amazon or with the seller.

We do not sell or rent personal information or Amazon Information, and we do not provide it to third parties except as described below.

4.1 Service providers (processing on our behalf)

We also use cloud infrastructure providers to host and store App data. They act only on our instructions and are bound by confidentiality and security obligations.

4.2 Legal requirements

We may disclose information if required by law, regulation, court order or a lawful request from a competent authority, or where necessary to protect the rights, property or safety of BEYOND EARTH, our customers or others.

4.3 Business transfers

If BEYOND EARTH is involved in a merger, acquisition or transfer of business, information may be transferred as part of that transaction. We will notify you in advance, and the recipient will remain bound by this policy.

4.4 Within your organization

App data is shown only to the seller who authorized it, the users that seller designates, and the BEYOND EARTH team members assigned to that account.

We keep information only as long as necessary for the purposes described above, and then delete it without delay.

Electronic records are deleted using methods that prevent recovery, and paper records are shredded.

6.1 Revoke the App’s access

1. Sign in to Seller Central.
2. Open Apps and Services → Manage Your Apps.
3. Find BEYOND EARTH Amazon Analytics and remove (revoke) its authorization.

Once access is revoked, the App can no longer retrieve your data, and we delete stored Amazon Information and tokens within 30 days.

6.2 Request access, correction or deletion

Email jay@beyonder.co.kr with the subject “Data Request,” including your company name and, if applicable, your selling partner ID. We will verify your identity, respond within 10 days, complete deletion within 30 days and confirm in writing once done. Records we are legally required to keep (see Section 5) are retained only for the required period.

• Encryption in transit (HTTPS/TLS 1.2 or higher) for the Website and all API communications
• Encryption at rest (AES-256) for stored App data and authorization tokens
• Application credentials and refresh tokens kept in secure, encrypted secret storage — never in browser code
• Role-based access control with least privilege, individual accounts and multi-factor authentication for systems that store Amazon Information
• Access logging, monitoring and periodic security reviews
• An incident response process, including notification to Amazon within 24 hours
• Confidentiality obligations and privacy training for staff who handle data

BEYOND EARTH is based in the Republic of Korea. Amazon Information is retrieved from Amazon’s systems, which may be located outside Korea, and our service providers (such as GitHub and FormSubmit) may process information on servers outside Korea. Inquiry-form data (name, company, email, phone and inquiry details) is transmitted to FormSubmit when you submit the form, solely to deliver it to our email.

Wherever information is processed, we apply the protections in this policy and comply with the Personal Information Protection Act’s requirements for cross-border transfers. If you prefer that your inquiry not be transferred, contact us directly by email or phone instead of using the online form.

The Website does not use cookies for analytics, advertising or tracking. It stores a single language preference (be_lang) in your browser’s local storage, which you can clear at any time in your browser settings.

During the App’s authorization flow, a one-time security value (state) is kept in your browser’s session storage to protect against cross-site request forgery. It is removed when the flow completes or the browser tab is closed.

Under the Personal Information Protection Act and other applicable laws, you may request access to, correction or deletion of, or suspension of processing of your personal information, and you may withdraw your consent at any time. You can exercise these rights by contacting our Privacy Officer (Section 13); a legal representative or authorized agent may also act on your behalf. We will act without delay and within 10 days.

To report a privacy concern or seek remedies, you may also contact:

• Personal Information Infringement Report Center (KISA): privacy.kisa.or.kr · 118
• Personal Information Dispute Mediation Committee: www.kopico.go.kr · 1833-6972
• Supreme Prosecutors’ Office, Cybercrime Investigation: www.spo.go.kr · 1301
• Korean National Police Agency, Cyber Bureau: ecrm.police.go.kr · 182

The Services are intended for businesses and are not directed to children. We do not knowingly collect personal information from children under 14. If you believe a child has provided us with information, please contact us and we will delete it.

We may update this policy to reflect changes in our Services or in the law. Updates will be posted on this page with a new effective date at least 7 days before they take effect, or at least 30 days before for material changes that affect your rights.