Data processing agreement

Purpose and scope

This data processing agreement (the “DPA”) forms part of our terms of service, between Scalerify Management LLC as data processor and the seller as data controller. It governs the processing of the business, financial and personal data accessed through Amazon Seller Central (SP-API), and of the documents the seller shares, to produce Scalerify Verified reports.

What the processing consists of

We parse, analyze and structure settlement data, bank statements, cost of goods and listing metadata for one purpose: to verify the financial records of the connected brand and state verification findings. We do not value the business.

Sub-processors

To deliver the platform we engage vetted third-party sub-processors. Reports are currently prepared by an operator, using the services below. This list is updated before any new sub-processor starts processing.

• Hosting of this website: SSDnodes, in a datacenter in Dallas, Texas, United States.
• Hosting and databases for the Scalerify platform: Google Cloud Platform, including Firebase.
• Artificial intelligence: Google (Gemini), Anthropic (Claude), and Together AI for open-weight models such as Llama.
• Forms and email: our own form server at forms.scalerify.com, which receives what you type into the request, contact and Red Flag Scan forms, and Kit, which holds the sample-report and mailing lists and sends those emails.
• Video hosting: Vidalytics, for the walkthrough on the home page. It receives a view only when a visitor presses Play, and never seller data.

AI data protection

All AI processing runs over paid API connections, under terms that exclude training on customer data and indefinite retention. No e-commerce data, financial settlement or proprietary brand information routed to a model provider is used to train its public foundation models. Where a provider’s standard terms do not give us that, brand data is not routed to it.

Security measures

We apply technical and organizational measures against unauthorized or unlawful processing, accidental loss and destruction. SP-API tokens are held in a managed secrets store, and all data is encrypted in transit and at rest.

Deletion

On written request, or once the data is no longer needed for the transaction, we permanently delete or anonymize the associated financial and account data. Only aggregated, non-identifiable metrics used to improve the Score are kept.

Questions: use our contact form at https://scalerify.com/contact — it reaches us directly. We do not publish an email address.

Last updated: October 16, 2026.