1. Who operates Groviix
Groviix is a software-as-a-service product operated by ALLIN INFO SYSTEMS PRIVATE LIMITED in India (“Groviix”, “we”, “us” or “our”). Questions and privacy requests can be sent to amazon@allinwebsolutions.com or raised through our contact page.
2. Scope
This policy applies to the public website at groviix.com, the application at app.groviix.com and the Groviix services made available to authorized customers. It does not control Amazon, Supabase, AI providers or other independent services that publish their own privacy terms.
3. Information we process
Account and contact information
- Name, work email, organization, telephone number and messages submitted for beta access, support, privacy or security enquiries.
- Authentication identifiers, account status, application roles and team or administrator permissions.
Customer-supplied product information
- Product names, identifiers, descriptions, specifications, brand facts, keywords, product photos, reference images, uploaded workbooks and instructions.
- Generated or edited listing text, images, A+ drafts, review decisions, exports and related workflow history.
Authorized Amazon marketplace information
When a customer authorizes a Seller Central or Vendor Central connection, Groviix may process the data required for the modules that customer uses, including:
- Amazon account and marketplace identifiers, OAuth authorization information and encrypted access or refresh tokens.
- Catalog records, ASINs, SKUs, titles, listing and variation status, product attributes and related identifiers.
- Available sales, demand, inventory, fulfilment-center, purchase-order, invoice, warehouse and operational status information.
- Brand Analytics or Search Query Performance records made available to the authorized brand account, including query and product metrics for a reporting period.
- Inventory mappings, sync state, workflow validation results and user actions created inside Groviix.
Restricted Direct Fulfilment data
For a Vendor account with the required Amazon program eligibility, application role approval and customer authorization, an API response may include customer-identifying fields as part of Direct Fulfilment order processing. Groviix is designed to process those fields transiently and filter customer names, delivery addresses, contact details and buyer messages from the operational records stored by the product and from the user interface. The operational record is limited to information such as order or purchase-order reference, SKU/ASIN, quantity, warehouse, status and timestamps needed for the customer’s fulfilment workflow. Restricted customer PII is not sent to generative AI providers.
Technical and usage information
- IP address, browser and device information, requested URLs, timestamps, authentication events, application errors, worker or sync status and security-relevant events.
- Local browser storage or necessary cookies used for authentication, session continuity, preferences and product operation. We do not use Amazon data for advertising tracking.
4. How we use information
- Provide, secure, maintain and troubleshoot the Groviix website and application.
- Authenticate users and enforce customer, role, team and connected-account boundaries.
- Run the feature requested by the user, such as listing creation, catalog viewing, analytics, inventory mapping, purchase-order review, FC validation or approved Direct Fulfilment monitoring.
- Generate customer-requested drafts, show progress, retain approved results and support focused revisions.
- Respond to enquiries, onboard beta customers, prepare written quotes and communicate important service or security information.
- Detect abuse, investigate incidents, protect users and comply with legal obligations.
We do not sell Amazon information or customer personal data. We do not use one customer’s Brand Analytics or marketplace data to expose an external benchmark to another customer.
5. Marketplace authorization and tokens
Amazon account connections use Amazon’s authorization process. Groviix does not ask customers to enter their Amazon password. Amazon OAuth tokens are kept server-side and stored using AES-256-GCM authenticated encryption. Customers can revoke Groviix access through the relevant Amazon account controls; revocation may stop marketplace modules from functioning.
6. Service providers and disclosures
We disclose information only where needed to provide the selected service, secure or operate the product, comply with law, or protect rights and safety. Current categories include:
- Amazon: marketplace authorization and Selling Partner API or related services for authorized account features.
- Supabase: application authentication, database and private file-storage infrastructure.
- Hostinger: application and website hosting infrastructure.
- OpenAI, Anthropic or Google: the active model provider for a customer-requested text, image or analysis feature. Product inputs necessary for that feature may be transmitted to the selected provider. Restricted Amazon customer PII is not sent to these providers.
- Scrape.do: retrieval of public web pages or public URLs when a customer explicitly uses a feature that needs public-page access.
- Twilio: optional WhatsApp operational alerts when the customer enables that channel. Marketplace customer PII is not used to populate alert templates.
Selected account-scoped analytical metrics may be supplied to an active AI text provider only when a user invokes a product feature that requires analysis. We do not send those metrics for unrelated model training or cross-customer benchmarking. Providers may process information in countries outside the customer’s country under their applicable contracts and safeguards.
7. Data security
We use technical and organizational measures appropriate to the service, including HTTPS, server-side credential handling, authenticated encryption for Amazon tokens, application authorization checks, database row-level access controls, private storage for protected files and synthetic data for development tests. No system can guarantee absolute security. See our Security page for the current public overview.
8. Retention
We retain account and operational information only while it is needed to provide the selected service, maintain security and audit context, resolve disputes, satisfy contractual or legal requirements, or complete an approved deletion request. Retention can vary by record type and customer agreement. Direct Fulfilment customer names, addresses, contacts and buyer messages are not intended to be persisted in Groviix operational records. Deleted information may remain in protected backups until the applicable backup cycle expires and is not restored for ordinary product use.
9. Customer responsibilities
Customers decide which authorized accounts, product inputs and users they connect to Groviix. Customers must have permission to upload and process the information they provide, configure team access appropriately, secure their users and devices, and review generated content before marketplace use.
10. Choices and rights
Depending on applicable law and the customer relationship, an individual may ask to access, correct or delete personal information, object to or restrict certain processing, or request a portable copy. A customer administrator may also request account closure or marketplace-data deletion. We may need to verify identity and authority before acting. See Data deletion for the request process.
11. Children
Groviix is a business service and is not directed to children. We do not knowingly solicit personal data from children for use of the service.
12. Business changes and legal disclosures
Information may be disclosed in connection with a merger, financing, acquisition, restructuring or sale of business assets, subject to appropriate confidentiality and applicable law. We may also disclose information when required by law or a valid legal process, or when reasonably necessary to protect the service, users or others.
13. Policy changes
We may update this policy as the product, providers or legal requirements change. The updated date will be shown above. Material changes may also be communicated through the application or account contact where appropriate.
14. Contact
Email privacy questions or requests to amazon@allinwebsolutions.com. Do not send passwords, OAuth tokens, API secrets or marketplace customer PII by email.