Privacy Policy

This Privacy Policy covers the tools Xcelerate Brands provides at xcelrack.com, including xCast, and the xcelrack.com website. It explains what information we collect, how we use it, how we store and protect it, who we share it with and when we delete it.

Xcelerate Brands provides these tools to the clients of its account management services and to the people working on their accounts. Our main website, xceleratebrands.com, has its own Privacy Policy.

Account information. The name and email address of each person invited to a tool, their password (stored only as a one-way hash), their two-step verification settings, and records of their sign-ins: the time, IP address and browser.

Amazon seller data. When a seller connects xCast to their Amazon account through the Selling Partner API, or when their team uploads reports, we receive:

• FBA inventory reports: products, SKUs, ASINs, quantities, fulfillment center and inbound shipment details, and related inventory planning figures.
• Order reports: order dates and status, products, SKUs, quantities, prices, sales channel, and the city, state, postal code and country an order shipped to. These reports contain no buyer names, street addresses, email addresses or phone numbers.

Business records. Information a client or our team enters in a tool, such as product details, case pack sizes, supplier lead times, purchase orders, warehouse stock and shipments.

Website visitors. The xcelrack.com pages use no analytics, advertising or tracking cookies. Our hosting provider processes the IP address of each request to deliver the pages and protect them from attacks.

We use the information only to provide the tools to the client it belongs to: to forecast demand, plan shipments and purchase orders, show reports, keep accounts secure and support the people using them.

Amazon seller data is used only for the seller who authorized it. We do not sell it, rent it, use it for advertising, combine it with another seller's data, or use it to benefit any other client. We do not use it to train artificial intelligence models.

Legal compliance. We may use or disclose information when the law requires it, to protect our rights or to prevent fraud.

Our tools run on Cloudflare. Information is encrypted in transit with TLS 1.2 or higher and at rest with AES-256. The tokens that let xCast read a seller's Amazon reports are encrypted again before they are stored.

Every account signs in with two-step verification. Each seller's data is kept in its own workspace, and only the people assigned to that workspace can see it. Sign-ins and account changes are recorded, and access is reviewed every quarter. Our Security page describes these controls in detail.

If an incident affects Amazon seller data, we notify Amazon within 24 hours of detecting it, and we notify affected sellers without undue delay and no later than 72 hours after confirming it.

We do not sell or rent information, and we do not share it with other clients. We share it only:

• with Cloudflare, which hosts and stores it on our behalf under its own security and data protection commitments,
• with the people a client authorizes, such as their own team and the Xcelerate Brands staff working on their account,
• when the law requires it.

We keep Amazon seller data only while the seller uses our tools. When a seller disconnects xCast, ends their services with us or asks us to delete their data, we delete their workspace, its stored report files and its tokens within 30 days. Deleted data can remain in our hosting provider's automatic backups for up to 30 more days before it is overwritten.

Sign-in and account change records are kept for two years for security, then deleted automatically.

You have the right to:

• access, correct or delete your personal information,
• ask for a copy of the data held for your business,
• remove xCast's access to your Amazon account at any time from Seller Central, under Manage Your Apps,
• ask us to stop processing your data, which ends your use of the tools.

We may update this Privacy Policy when our tools or obligations change. Updates are posted on this page with a new effective date, and we tell clients about material changes.

For questions about this Privacy Policy or your data, contact us through the Xcelerate Brands contact page.