Obserway Assistant – Privacy Policy

Last updated: June 9, 2026
Chrome Extension · v2.0+

This Privacy Policy explains exactly what data the Obserway Assistant Chrome extension ("Extension") collects, how it is used, processed, retained, and with whom it is shared. Please read it carefully.

1. Who We Are

The Extension is developed and operated by Obserway. For questions, contact us at [email protected].

2. What Data We Collect

2.1 Amazon Order Data (from Seller Central)

Data Field	Purpose
Amazon Order ID	Unique identifier to track each order
Order status (Unshipped, Shipped, etc.)	Determine which orders need processing
Order date, latest ship date, latest delivery date	Scheduling and deadline tracking
Sales channel (e.g., Amazon.com.mx)	Route orders to the correct workflow
Total order amount and currency	Financial record keeping
Product title, ASIN, seller SKU, quantity, unit price	Identify ordered products
Buyer full name	Address shipment
Shipping address (line 1, line 2, city, state, postal code, country)	Fulfil the shipment
Buyer phone number (where available)	Carrier delivery requirement
Buyer email address	Order association and account matching
Tracking number	Upload shipping confirmation to Amazon
Shipping service and fulfilment method	Carrier identification

2.2 Authentication Data

Obserway account access token – A short-lived JWT issued by Obserway upon login. Stored locally in Chrome's storage.local. Used exclusively to authenticate requests to the Obserway backend.
Obserway account refresh token – A long-lived JWT issued by Obserway. Stored locally and on the Obserway backend (obserway.quicklycommerce.com) to obtain new access tokens automatically when the previous one expires. Used exclusively for authentication with Obserway servers.
Obserway account username (email) – Stored locally in Chrome's storage.local and on the Obserway backend to associate order data with your account.
Obserway account password – Submitted only at the moment of login. Transmitted over HTTPS to the Obserway backend (obserway.quicklycommerce.com) where it is stored encrypted at rest. It is used exclusively to refresh expired authentication tokens server-side on your behalf when the Extension is not actively running, ensuring uninterrupted order syncing. The password is never shared with any third party and is never sent to Amazon, Telegram, or any other service.

2.3 Browser Tabs and Amazon Page Content

Tab metadata (read-only): The Extension queries open tabs solely to detect whether an Amazon Seller Central tab is already open, which determines whether to open a background tab for order fetching. No tab URLs or browsing history are stored or transmitted.
Amazon page DOM: A content script injected into amazon.com and sellercentral.amazon.com pages reads the visible order, buyer, and address information shown to you on those pages. This is the source of the data described in Section 2.1. No keystrokes, passwords, or non-order page content are read.

2.4 Operational Telemetry

For reliability monitoring, the Extension may send the following information to a private Telegram bot operated solely by Obserway staff:

Your Obserway username
Error messages and diagnostic events (e.g., failed token refresh, scraping errors, stale fetch alarms)
Counts of orders processed

No buyer personal information, no passwords, and no order contents are ever sent to Telegram. This channel is used exclusively for internal operational monitoring by Obserway staff.

3. How We Use This Data

Sync Amazon order details to the Obserway platform for centralised order management.
Forward order and address data to the Obserway fulfilment service so shipments can be dispatched.
Automate shipping confirmation uploads (tracking numbers) back to Amazon Seller Central on your behalf.
Display order status and operational summaries inside the Extension popup.
Detect and alert on orders that are delayed or missing data.
Maintain uninterrupted authentication so that order syncing continues even when your browser is closed.

4. How Data Is Processed

The Extension scrapes order data from Amazon Seller Central pages you have open in your browser, via a content script injected on those pages.
Scraped data is sent over HTTPS to the Obserway backend API at obserway.quicklycommerce.com, where it is stored in a secured MySQL database associated with your account.
The backend then forwards order data to the Obserway fulfilment platform at obserway.com to generate shipment records.
When tracking numbers are available, the Extension uploads them to Amazon Seller Central on your behalf using your existing authenticated Amazon session.
If your access token expires while the Extension is not running, the Obserway backend uses your stored credentials to obtain a new token automatically.

5. Third Parties We Share Data With

Party	Data Shared	Purpose	Relationship
Amazon / Amazon Seller Central (`amazon.com`, `sellercentral.amazon.com`, `sellercentral.amazon.com.mx`)	Tracking numbers	Uploading shipping confirmations on your behalf	Your existing Amazon seller account; data is read from and written to Amazon only under your authenticated session
Obserway Backend (`obserway.quicklycommerce.com`)	All order data listed in Section 2.1, your username, your encrypted password, refresh tokens	Order storage, processing, management, and server-side token refresh	Operated by Obserway (first party)
Obserway Fulfilment Platform (`obserway.com`)	Order details, shipping address, buyer name, phone, products	Generate shipment records and assign tracking numbers	Operated by Obserway (first party)
Quickly Commerce Affiliate API (`affiliate-api.quicklycommerce.com`)	Your Obserway username and product/ASIN identifiers	Internal Obserway analytics and affiliate-link processing	Operated by Obserway (first party)
Telegram Bot API (`api.telegram.org`)	Your Obserway username and operational diagnostics (see Section 2.4)	Transport for internal operational alerts to a private Obserway-owned bot	Telegram is used solely as a message-transport service; messages are received only by Obserway staff

We do not sell, rent, or share your data with any other third parties, advertising networks, or analytics providers.

6. Data Storage

On your device (Chrome storage.local): Authentication tokens (access + refresh), username, fetched order list, extension logs. Cleared automatically when you uninstall the Extension or log out.
On Obserway servers (obserway.quicklycommerce.com):
- Order records, shipping addresses, product details, tracking numbers, buyer name/phone/email — stored in a secured MySQL database.
- Encrypted Obserway account credentials (username + password) used exclusively for server-side token refresh.
- Refresh tokens used exclusively for Obserway authentication.

7. Data Retention

Active order data – retained while your Obserway account is active and for up to 90 days after an order is fully shipped and closed.
Authentication tokens – retained locally until you log out or uninstall the Extension. Server-side tokens expire automatically.
Stored credentials (password) – retained only while your Obserway account is active. Deleted within 30 days of account deletion or when you log out from all devices.
Deleted accounts – upon account deletion request, all stored data associated with your account (orders, addresses, credentials, tokens) is permanently deleted within 30 days.

8. Security

All communication between the Extension and our servers is encrypted using HTTPS/TLS. Sensitive credentials are stored only in Chrome's storage.local (not storage.sync) and are never exposed to web pages. Server-side credentials are encrypted at rest. We follow industry-standard security practices including access controls, encrypted connections, and regular security reviews.

9. Your Rights

You have the right to:

Access the data we hold about you.
Correct inaccurate data.
Delete your data by requesting account deletion.
Export a copy of your order data.

To exercise any of these rights, contact us at [email protected].

10. Children's Privacy

The Extension is intended for use by business operators aged 18 and above. We do not knowingly collect data from children under 13.

11. Changes to This Policy

We may update this Privacy Policy periodically. The "Last updated" date at the top of this page will reflect any changes. Continued use of the Extension after changes constitutes acceptance of the updated policy.

12. Contact

For privacy questions or data requests:
📧 [email protected]
🌐 obserway.com