We treat your account like our own — because the founder is also a seller

Hi, this is Abdul. I sell on Amazon, Flipkart, Meesho, and Myntra under Raoofa Crafts, the same way you do. So when I built EcomShadow, the first question I asked was the same question you're asking now: "If I connect my Amazon account, how do I know my data is safe?"

Here's exactly how it works. EcomShadow connects to your Amazon Seller Central using the official Amazon SP-API authorization flow — the same OAuth standard that Helium 10 and SellerApp use. You never enter your Amazon password into our site. Amazon issues us a refresh token that grants only the specific permissions you authorize: read inventory, read orders, write listings (only if you opt in). Tokens are encrypted at rest using AES-256 in our Supabase database, never written to logs, never visible to our team, and never shared with third parties. You can revoke access from your Amazon Seller Central account in 30 seconds at any time, and we delete the token immediately.

The same principle applies to Flipkart, Meesho, and Myntra. Each integration uses the official partner authentication flow. If a marketplace doesn't have an official API yet (Meesho is still onboarding partners), we wait until it does — we never scrape, never automate browser logins, never ask for your dashboard password. Doing it right is slower; we accept that.

For team access, invite your VA, accountant, or business partner with role-based permissions. Give your accountant read-only access to revenue data and nothing else. Give your VA listing-edit access but no payout visibility. Remove anyone in one click — useful the day someone leaves your team. We're DPDPA 2023 compliant and our data is hosted with India residency for sensitive seller information.