Privacy policy

Last updated: November 13, 2026

S&T Creatives (“we”, “us”) is an internal tool we use to run our own print-on-demand business on Amazon. This policy explains what data the tool handles, why, where it is stored and how it is protected. It applies to the website at this address and to the dashboard reached through “Sign in”.

Who uses the tool

The dashboard is not open to the public. Accounts are created by our administrator for team members only, and there is no public sign-up. S&T Creatives connects only to Amazon seller and advertising accounts that we own.

Data we handle

• Team accounts: name, email address and a password stored as a salted scrypt hash, plus sign-in sessions (time, IP address and browser) used to keep accounts secure.
• Amazon Selling Partner API data: orders (order numbers, items, quantities, prices, status), listings and catalog details of our own products, and fees and settlements needed to calculate profit.
• Buyer shipping addresses: read from Amazon only at the moment an order is sent to a print partner for production, and passed to that partner so it can ship the order. They are not stored in our order list; the partner’s order confirmation, which can include the address, is kept with that fulfilment record.
• Buyer personalization: text or images a buyer entered to personalize a product, used to create the print file for that order.
• Amazon Ads API data: our advertising profiles, campaigns, ad groups, keywords and targets, bids and budgets, and daily performance metrics (impressions, clicks, spend, sales, orders). Used to report performance and to manage our own campaigns. It contains no buyer personal data.
• Integration credentials: API tokens for Amazon and our print partners, encrypted with AES-256-GCM before they are stored.

How we use data

• To fulfil, ship and track customer orders and to confirm shipments to Amazon.
• To create and maintain our product listings.
• To measure and manage our Sponsored Products advertising.
• To calculate the profit of our orders.

We do not use Amazon data for marketing to buyers, we do not sell data, and we do not share it with advertisers or data brokers.

Sharing

Order details and the shipping address of an order are shared only with the print-on-demand partner that produces and ships that order. Amazon data is otherwise shared with no one, except where the law requires it.

Storage and security

• Data is stored in a PostgreSQL database on a server we control. The database is not reachable from the internet.
• The site is served only over HTTPS (TLS) through Cloudflare.
• Every team member has a personal account with permissions limited to the pages they need. Sessions use secure, HTTP-only cookies, and repeated failed sign-ins are blocked.
• API credentials are encrypted at rest. Passwords are never stored in readable form.

Retention

Order and fulfilment records are kept while needed to handle returns, customer service, accounting and tax, and are then deleted. Advertising reports are kept as long as they are useful for comparing performance. When an Amazon account is disconnected, its synced orders and listings are removed from the tool.

Your requests

If you believe we hold personal data about you (for example as an Amazon buyer) and want to know what it is or have it deleted, contact us at [email protected]. We will answer within 30 days.

Changes

We will update this page when the way we handle data changes, and change the date at the top.

Contact

Email: [email protected]