Security
How we keep your business data safe.
HTTPS everywhere
Every page and connection is encrypted in transit, and browsers are told never to use plain HTTP.
Every account is sealed off
Each account's data carries its own workspace, and the database itself refuses to show one account's rows to another. Automatic tests and a daily check look for anything that could cross over.
Tokens and keys are encrypted
Your Amazon connection, Keepa key and bank tokens are stored encrypted, and only our server can read them. Your browser never sees them.
Bank access is read-only
If you connect Monzo, LeadVault can read your balance and transactions. It can never move money.
Amazon access is limited
We only use the parts of Amazon's API that the features need. Nothing is changed on your Amazon account unless you switch the repricer on, and then only within the floors you set.
No staff access to your business data
Staff can't see your leads, sales or profit in the app. We only look at your data to help you if you ask us to.
Two-step login
Turn on a code by email at every sign-in. Wrong codes are limited and lock the account for an hour.
A log of outside changes
Every change made through our API or the AI assistant connection is recorded, with passwords and keys blanked out.
Your data, your choice
Download everything or delete your account at any time in Settings → Your data.
What we never do
- Sell your data.
- Share one account's data with another.
- Read Amazon buyers' names, addresses or contact details.
- Move money from your bank.
- Change a price you haven't allowed.
Found a problem?
Tell us through the Contact page and we'll reply quickly. Please don't test on other people's accounts.