Vtory Privacy Policy

Vtory is a service operated by Can Fly Trading Inc. (“Vtory,” “we,” “us,” or “our”) that connects Amazon Seller Central with QuickBooks Online. This policy explains how we handle personal information when you visit vtory.io, create an account, use the Vtory application, contact us, or connect third-party services.

1. Who is responsible for your information

Vtory is responsible for personal information used to operate the Service. For privacy questions or requests, contact our Privacy Officer:

We manage personal information under applicable Canadian privacy law, including Alberta’s Personal Information Protection Act and, where applicable, Canada’s federal private-sector privacy law. Additional rights may apply based on where you live.

2. Information we collect

Account and contact information

• Email address, account identifiers, and authentication records.
• Name and profile image when supplied through Google sign-in.
• Company settings, marketplace preferences, and support communications.

Amazon information

When you authorize Amazon Seller Central, we receive and store authorization tokens, seller and marketplace identifiers, product information, and settlement report data. Settlement data may include order identifiers, SKUs, transaction types, amounts, fees, taxes, refunds, adjustments, dates, quantities, and marketplace information. We do not ask for or store your Amazon password.

QuickBooks information

When you authorize QuickBooks Online, we receive and store authorization tokens, your QuickBooks company identifier, chart-of-account information, account mappings, and information about journals Vtory creates or deletes. We do not ask for or store your QuickBooks password.

Product, billing, and technical information

• Product and supplier information you enter or upload, including SKU costs.
• Stripe customer, subscription, payment-status, and transaction identifiers. Stripe processes payment-card details; Vtory does not receive or store full card numbers.
• IP address, browser and device information, request times, security events, error logs, and application usage needed to operate and protect the service.

3. Where information comes from

We receive information directly from you and from services you choose to connect, including Google, Amazon, Intuit QuickBooks, and Stripe. We only access connected service data after you authorize the connection.

4. How we use information

• Authenticate users and maintain company accounts.
• Download, archive, parse, and display Amazon settlement reports.
• Maintain product costs and calculate cost-of-goods-sold entries.
• Import QuickBooks accounts and create, replace, or delete requested journals.
• Provide subscriptions, customer support, and service communications.
• Monitor reliability, prevent abuse, secure the service, and troubleshoot errors.
• Comply with legal obligations and enforce our Terms of Service.
• Improve Vtory using aggregated or de-identified information.

Where European or UK data-protection law applies, our legal bases are performance of a contract, steps requested before entering a contract, compliance with legal obligations, our legitimate interests in operating and securing a business service, and consent where consent is required. You may withdraw consent at any time, but withdrawal does not affect earlier lawful processing.

5. When we disclose information

We disclose information only as reasonably necessary to:

• Operate Vtory through service providers, including Amazon Web Services for hosting, authentication, databases, storage, encryption, serverless processing, logs, and email delivery.
• Complete actions you request with Amazon, Intuit QuickBooks, Google, and Stripe.
• Work with professional advisers under confidentiality obligations.
• Comply with law, lawful process, or protect users, Vtory, and others from harm.
• Complete a merger, financing, reorganization, or sale, subject to appropriate confidentiality and privacy protections.

We do not sell personal information. We do not share personal information for cross-context behavioural advertising and do not use customer financial data for advertising.

6. Service providers and international transfers

Vtory is operated from Canada. Our service providers—including Amazon Web Services, Amazon, Intuit, Google, and Stripe—may process information in the United States and other countries where they operate. Information stored outside Canada may be accessible to courts, law enforcement, or regulators under local law.

We select established providers and use contractual, organizational, and technical safeguards appropriate to the information. Where required for transfers from the EEA, UK, or Switzerland, we rely on an adequacy decision, contractual safeguards, or another lawful transfer mechanism.

7. Cookies and local storage

Vtory uses essential cookies and browser storage for authentication, security, session continuity, and saved interface preferences. These technologies are necessary for requested application features. We do not currently use advertising cookies or third-party advertising trackers. Third-party hosted pages, such as Stripe Checkout, apply their own cookie and privacy policies.

8. Security

We use reasonable administrative, technical, and organizational safeguards. Measures include access controls, encryption in transit, encryption of connected service tokens using AWS Key Management Service, private report storage, and tenant-scoped access controls. No internet service is completely secure, and we cannot guarantee absolute security.

9. Retention and deletion

Amazon settlement reports, parsed settlement records, and archived report files are currently retained for up to two years, unless deleted earlier. Connected service tokens and related integration data are retained while the integration is active and are deleted or scheduled for deletion after disconnection. Account and billing records are retained while your account is active and afterward only as reasonably needed for legal, tax, fraud-prevention, dispute, backup, and enforcement purposes.

You may disconnect Amazon or QuickBooks from the application. To request account and personal-information deletion, email hello [at] vtory [dot] io. Some information may be retained where required or permitted by law.

10. Your privacy rights

Depending on your location, you may request access to, correction of, deletion of, or a portable copy of personal information; restriction of or objection to processing; or withdrawal of consent. You may also complain to your local privacy regulator. We may verify your identity and may deny or limit a request where the law permits.

Alberta residents may contact the Office of the Information and Privacy Commissioner of Alberta. EEA and UK residents may complain to the supervisory authority where they live or work. California residents may also have rights to know, correct, or delete information and to receive non-discriminatory treatment. Vtory does not sell or share personal information as those terms are defined by California privacy law.

11. Business customer data

When Vtory processes personal information contained in Amazon or QuickBooks data for a business customer, that customer is responsible for its instructions and lawful use of the data, and Vtory acts as its service provider or processor to the extent required by applicable law. Business customers must provide any notices and obtain any permissions required for the data they submit or connect.

12. Children

Vtory is a business service and is not directed to anyone under 18. We do not knowingly collect personal information from children.

13. Automated decisions

Vtory does not make decisions producing legal or similarly significant effects about individuals using automated decision-making.

14. Changes to this policy

We may update this policy as Vtory or applicable law changes. We will post the revised policy with a new effective date and provide additional notice when required by law.

15. Contact us

Questions, complaints, and privacy requests may be sent to hello [at] vtory [dot] io or to the mailing address above. Our Terms of Service also apply to your use of Vtory.