Privacy Policy

Effective Date: November 1, 2025 · Last Updated: May 11, 2026

1. Scope and Acceptance

This Privacy Policy describes how Kanso WorldShop Inc. ("Kanso WorldShop," "ConsignPro," "we," "us," or "our") collects, uses, discloses, and protects information when you access our website at theconsignpro.com, our vendor portal at app.theconsignpro.com, or otherwise engage with our consignment and reimbursement services (collectively, the "Services").

By accessing or using the Services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with the practices described herein, you should discontinue use of the Services.

2. Data Controller

The data controller for personal information collected through the Services is:

Kanso WorldShop Inc.
6901 Lynn Way STE 207
Pittsburgh, PA 15208, USA
Email: support@theconsignpro.com

3. Information We Collect

3.1 Information You Provide Directly

• Account Information: name, email address, phone number, business name, contact person, role, and address.
• Financial Information: bank account details, Wise email, routing information, IBAN, currency preferences, and tax identification numbers (for issuing Form 1099 or equivalent).
• Identity Verification: business registration documents, copies of identification documents, and proof of address as required for KYC/AML compliance.
• Consignment Records: product details, SKUs, quantities, conditions, and consignment agreements.
• Communications: messages, support requests, and any documents you submit through email or our portal.

3.2 Information Collected Automatically

• Device & Connection Data: IP address, browser type and version, operating system, device type, and timezone.
• Usage Data: pages visited, features accessed, timestamps, click paths, and session duration.
• Cookies and Local Storage: session tokens, preferences, and analytics identifiers. See our Cookie Policy for details.

3.3 Information from Third Parties

• Marketplaces: sales transactions, customer return data, fees, and product listings from Amazon, eBay, Walmart, and other marketplaces where we operate on your behalf.
• Amazon Selling Partner API (SP-API): when partners authorize us, we retrieve FBA inventory data, returns reports, reimbursement reports, and related information from the Amazon SP-API. See Section 7 for specific Amazon SP-API terms.
• Payment Processors: transaction confirmations and account verification data from Stripe, Wise, and bank partners.
• Service Providers: hosting providers, fraud-prevention services, and analytics platforms.

4. How We Use Information

We use the information we collect for the following purposes:

• To operate the Services, including listing inventory, processing sales, handling returns, and managing payouts.
• To file Amazon FBA reimbursement claims on behalf of authorized partners.
• To verify identity, comply with KYC/AML obligations, and prevent fraud.
• To communicate with you about your account, transactions, support inquiries, and service updates.
• To issue tax forms (Form 1099-MISC or equivalent) and maintain financial records as required by law.
• To improve, secure, and analyze the Services.
• To comply with legal obligations and respond to lawful requests from authorities.
• To enforce our Terms of Service and protect the rights, property, and safety of Kanso WorldShop, our partners, and third parties.

5. Legal Basis for Processing

Where the General Data Protection Regulation (GDPR) or similar regulations apply, our lawful bases for processing are:

• Contract: processing necessary to perform the consignment agreement.
• Legal obligation: tax reporting, KYC/AML compliance, and other statutory duties.
• Legitimate interests: fraud prevention, security, business operations, and direct communications with active partners.
• Consent: for marketing communications and optional analytics cookies, where required.

6. Information Sharing

We do not sell personal information. We share information only as follows:

• Marketplaces: Amazon, eBay, and Walmart receive listing data, fulfillment information, customer communications, and any information they require to process orders placed under our seller accounts.
• Service providers: hosting (Railway, Cloudflare), database providers, email delivery, payment processors (Stripe, Wise), accounting software, and analytics tools. All service providers are bound by contractual confidentiality and data protection obligations.
• Legal compliance: in response to subpoenas, court orders, or other legal process, or when we believe in good faith that disclosure is required by law or to protect rights, property, or safety.
• Business transfers: in connection with a merger, acquisition, financing, or sale of assets, subject to standard confidentiality protections.
• With your consent: in any other circumstance where you direct us to share information.

7. Amazon SP-API & Marketplace Data

When a partner authorizes ConsignPro to access their Amazon Seller Central account via the Amazon Selling Partner API (SP-API), we receive specific data necessary to provide our reimbursement service.

7.1 Data we access via Amazon SP-API

• FBA inventory adjustment events (lost, damaged, customer returns)
• Reimbursement reports (already-paid reimbursements)
• Returns reports (customer-initiated returns)
• Seller account identification information
• Limited marketplace participation data

7.2 How we protect this data

• OAuth refresh tokens are stored encrypted at rest using AES-256-GCM encryption.
• API requests are made over HTTPS only.
• Access to retrieved Amazon data is restricted to authorized personnel involved in reimbursement processing.
• Retrieved data is used solely for the purpose of identifying and filing reimbursement claims on the partner's behalf, and for related financial reconciliation.

7.3 Data sharing involving Amazon

We do not sell, license, or share Amazon-derived data with third parties. We do not use Amazon data for any purpose unrelated to the reimbursement service. Partners may revoke our Amazon SP-API authorization at any time through their vendor portal Settings, which immediately terminates further access.

7.4 Compliance with Amazon's Data Protection Policy

ConsignPro complies with the Amazon Selling Partner API Developer Agreement and the Amazon Data Protection Policy. We do not retain Personally Identifiable Information (PII) of customers obtained through Amazon SP-API beyond what is necessary for the service. Partner-level information is retained for the duration of the partnership and as required for tax and legal purposes.

8. Data Retention

We retain personal information for as long as necessary to provide the Services and to comply with our legal obligations. Specifically:

• Active partner data: retained for the duration of the partnership.
• Financial records: retained for at least 7 years for tax and accounting purposes, as required under U.S. federal and Pennsylvania state law.
• Transaction logs: retained for 7 years.
• Marketing communications: retained until you unsubscribe.
• Amazon SP-API OAuth tokens: retained until partner revokes authorization or terminates the partnership.
• Anonymized analytics: may be retained indefinitely.

9. Security Measures

We implement administrative, technical, and physical safeguards to protect personal information, including:

• Encryption at rest (AES-256-GCM) for sensitive tokens and credentials
• Encryption in transit (TLS 1.2+) for all communications
• Access controls and authentication for all administrative systems
• Hosting on secure infrastructure (Railway, Cloudflare) with regular security updates
• Physical security at our Pittsburgh facility, including access logs
• Regular review of security practices

While we take reasonable measures, no system can guarantee absolute security. You are responsible for protecting your account credentials and notifying us promptly of any suspected unauthorized access.

10. Your Rights

Subject to applicable law, you may have the following rights regarding your personal information:

• Access: request a copy of personal information we hold about you.
• Correction: request correction of inaccurate or incomplete information.
• Deletion: request deletion of personal information, subject to legal retention requirements.
• Restriction: request restriction of processing in certain circumstances.
• Portability: request a machine-readable copy of personal information you provided.
• Objection: object to processing based on legitimate interests.
• Withdraw consent: where processing is based on consent, you may withdraw consent at any time.

To exercise these rights, contact us at support@theconsignpro.com. We will respond within 30 days. We may need to verify your identity before fulfilling the request.

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what categories of personal information we collect and the right to non-discrimination for exercising your rights.

11. International Data Transfers

ConsignPro is operated from the United States. If you access the Services from outside the United States, your information will be transferred to, processed in, and stored in the United States, which may have data protection laws different from those of your country.

Where required, we rely on Standard Contractual Clauses (SCCs) or other lawful transfer mechanisms for international data transfers.

12. Children's Privacy

The Services are intended for business use and are not directed to individuals under the age of 18. We do not knowingly collect personal information from children under 18. If you believe a child has provided us with personal information, please contact us at support@theconsignpro.com.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. Material changes will be communicated to active partners via email and posted on this page with an updated effective date. Continued use of the Services after a change indicates acceptance of the updated Policy.

14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal information:

Kanso WorldShop Inc.
Attn: Privacy
6901 Lynn Way STE 207
Pittsburgh, PA 15208, USA
Email: support@theconsignpro.com