Privacy Policy

Spillmark is operated by Cantein, LLC, based in Monterey, California, USA. Spillmark helps Amazon sellers measure how their Meta (Facebook and Instagram) advertising drives sales on Amazon. Questions about this policy can be sent to hello@spillmark.com.

Sign-up form. When you enter your email on our website we collect your email address, the time you signed up, the plan you picked (if any), your optional answers about what you sell, what you spend on Meta each month, and what prices would feel cheap or expensive to you, which version of the page you saw, and where you came from (the link's ref or utm tags and the name of the referring site).

Your account. When you create an account we collect your name, email address, and password (stored only in scrambled, hashed form), your brand's name and time zone, two-factor sign-in settings, and for each sign-in session the time, IP address, and browser.

Payments. Stripe processes payments. You enter your card details on Stripe's page, and we never see or store your card number. We keep your Stripe customer and subscription IDs, your plan, and whether your subscription is active and when it renews. Stripe keeps your billing details and invoices under its own privacy policy.

Uploaded reports. If you upload reports (such as Amazon's All Orders and Transaction reports, a Meta Ads Manager export, or a Shopify sales report), we read the file and keep only what Spillmark needs: order dates, products, quantities, amounts, Amazon fees and refunds, the shipping state or region, and ad spend by day and region. We delete the original file as soon as it has been read. We do not keep buyer names, addresses, emails, or phone numbers from these reports.

Website cookie. Our website sets a first-party cookie holding a random ID, so you see the same version of the page on each visit and we can count which version leads to more signups. It isn't used for advertising.

Connected accounts. If you use Spillmark and choose to connect your accounts, we access only the data needed to provide the service, with your authorization:

• Amazon Ads: advertising profiles, Amazon Attribution tags and reports, and sponsored ads performance reports.
• Amazon Seller Central (Selling Partner API): order dates, quantities, revenue, and the shipping state or region, used to measure sales by geography. We do not collect or store buyer names, addresses, emails, or phone numbers.
• Meta: ad account, campaign, ad set, and ad performance data, including spend and targeting geography.

Technical data. Our hosting provider records standard server logs (such as IP address, browser type, and pages requested) for security and reliability. To stop automated signups, we also keep a scrambled (hashed) form of your IP address, not stored with your email, for up to one day. We do not use advertising cookies.

Product analytics. We use PostHog to understand how people use our website and the Spillmark app: pages visited, buttons clicked, and actions such as signing in or approving a change. When you're signed in, these are linked to your account ID and email. They don't include the text on the page or data from your connected Amazon or Meta accounts, and we don't record your screen. PostHog sets a first-party cookie to recognize your browser between visits.

• To provide Spillmark: tagging your ads, building attribution reports, and running geo holdout analysis.
• To send account emails (confirming your email address and resetting your password), and to contact you about service updates. You can opt out of non-essential emails at any time.
• To secure, maintain, and improve the service.

We do not sell your information, and we do not share data from your connected Amazon or Meta accounts with other customers or third parties. Your data is used only to provide Spillmark to you.

We use service providers to run Spillmark, such as Vercel for hosting and storage, Neon for our database, Stripe for payments, Resend for sending account emails, and PostHog for product analytics. They process data only on our behalf. We may disclose information if required by law. Data obtained through Amazon APIs is handled in line with Amazon's applicable license agreements and data protection policies.

We keep sign-up form information until you ask us to remove it. Data from connected accounts and uploaded reports is kept while your account is active and deleted within 30 days of you disconnecting an account or closing your Spillmark account. A brand's owner can delete the brand and all of its data at any time from its Settings page; that deletion happens straight away and cancels its plan. Stripe keeps invoices and payment records as required for tax and accounting. Email hello@spillmark.com to request access to or deletion of your data, including your account itself. You can also revoke Spillmark's access at any time from your Amazon or Meta account settings.

Data is encrypted in transit (TLS) and at rest. Access to systems and credentials is restricted, protected with multi-factor authentication, and limited to what is needed to operate the service. If a security incident affects your data, we will notify you and the relevant platforms promptly.

Spillmark is a business service and is not directed to anyone under 18.

We will post any changes on this page and update the date below. If changes are significant, we will notify you by email.