Privacy Policy

Ecomessence LLC, doing business as Stonaris (“Stonaris,” “we,” “us,” or “our”) respects your privacy. This Privacy Policy explains how we collect, use, disclose, protect, and retain information when you visit our website, use our platform, connect third-party services, or otherwise interact with us.

Stonaris provides automated bookkeeping software for ecommerce sellers, starting with Amazon sellers. Stonaris is a software company, not a bank. If additional financial services become available in the future, they will carry their own notices.

One thing worth saying plainly: we never collect or store Social Security numbers or dates of birth. Ever.

By using Stonaris, you agree to this Privacy Policy. If you do not agree, do not use our website or services.

1. Information We Collect

We may collect the following categories of information.

Account and Business Information

When you create an account, join a waitlist, request access, or use Stonaris, we may collect:

• Name
• Email address
• Phone number
• Business name
• Business address
• Business type
• Tax identification information
• Ownership information
• Authorized user information
• Account login information
• Communication preferences
• Support messages and inquiries

Financial Information

To provide bookkeeping, expense tracking, and financial reporting features, we may collect or process:

• Bank account information
• Account balances
• Transaction history
• Card transactions
• Categorized expenses
• Bookkeeping records
• Financial reports
• Tax-readiness information
• Reconciliation records
• Internal notes, classifications, and audit logs related to bookkeeping activity

When you connect a bank or card account to Stonaris, we use a regulated financial data provider — Stripe, Inc. (Financial Connections) or Plaid Inc. ("Plaid") — to link your account and retrieve your financial data, such as account details, balances, and transaction history. These connections are read-only: they cannot move your money. By connecting an account, you grant Stonaris and the data provider the right to access and process this information as described in the provider's own privacy policy, including the Plaid End User Privacy Policy. Stonaris never receives or stores your bank login credentials; they go directly to the data provider.

Amazon Seller and Advertising Data

If you connect your Amazon account or Amazon Ads account, we may collect and process data made available through Amazon APIs, including:

• Seller account identifiers
• Marketplace identifiers
• Settlement data
• Payout data
• Fees
• Refunds
• Reimbursements
• Adjustments
• Sales and order-related financial data
• Advertising spend and campaign-related financial data
• Inventory-related financial data
• Product identifiers such as SKUs or ASINs where needed for bookkeeping and profitability analysis
• Reports, financial events, and other Amazon data authorized by you

Stonaris is designed to use Amazon seller financial and operational data for bookkeeping, reconciliation, expense tracking, tax-readiness, and financial visibility. Stonaris does not intend to access Amazon buyer personally identifiable information unless it becomes strictly necessary for an approved and authorized use case.

Automatically Collected Information

When you visit our website or use our platform, we may automatically collect:

• IP address
• Device type
• Browser type
• Operating system
• Pages viewed
• Referring pages
• Date and time of access
• Clicks and interactions
• Session activity
• Error logs
• Security logs
• Authentication logs

Cookies and Similar Technologies

We may use cookies, pixels, analytics tools, and similar technologies to operate the website, remember preferences, improve performance, understand usage, and protect against fraud or abuse. You can adjust cookie settings through your browser, but some features may not work properly if cookies are disabled.

2. How We Use Information

We use information to:

• Provide and operate Stonaris
• Create and manage user accounts
• Verify identity and business information
• Connect to authorized Amazon and Amazon Ads accounts
• Pull, parse, categorize, and reconcile Amazon settlement and financial data
• Automate bookkeeping
• Categorize expenses
• Generate financial reports
• Support tax-readiness workflows
• Detect errors, fraud, misuse, or unauthorized access
• Secure the platform
• Provide customer support
• Communicate with users
• Improve product performance
• Develop new features
• Comply with legal, regulatory, contractual, and Amazon requirements
• Enforce our Terms of Service and other agreements

Part of automating your books is done with artificial intelligence: transaction descriptions and related bookkeeping context may be processed by our AI service provider (Anthropic) to suggest categories. That data is used to run your books — not to train public models, and never for advertising.

3. How We Share Information

We never sell your data, and we never use it for advertising. Full stop.

We share information only with the service providers it takes to run Stonaris:

• Stripe — subscription billing and bank/card data connections
• Plaid — bank/card data connections
• Amazon — authenticating your seller and ads connections
• Anthropic — AI transaction categorization
• Resend — transactional email
• Cloud hosting and database providers

Amazon and Connected Platforms

When you connect your Amazon or Amazon Ads account, we may exchange information with Amazon as needed to authenticate your account, receive authorized data, maintain API access, comply with Amazon policies, and provide the Stonaris service.

Service Providers

We may share information with vendors that help us operate the platform, including:

• Cloud hosting providers
• Database providers
• Security monitoring providers
• Analytics providers
• Customer support tools
• Email providers
• Error tracking tools
• Infrastructure providers
• Legal, compliance, and accounting advisors

These providers may only use information as needed to provide services to Stonaris.

Legal and Compliance

We may disclose information if we believe it is necessary to:

• Comply with law, regulation, subpoena, court order, legal process, or government request
• Comply with payment processor or Amazon obligations
• Protect the rights, property, and safety of Stonaris, users, partners, or others
• Detect or prevent fraud, abuse, security incidents, or illegal activity
• Enforce our agreements

Business Transfers

If Stonaris is involved in a merger, acquisition, financing, reorganization, sale of assets, bankruptcy, or similar transaction, information may be transferred as part of that transaction, subject to appropriate protections.

4. Amazon Data Handling

When we access Amazon data, we use it only for authorized business purposes, including bookkeeping, reconciliation, financial reporting, expense tracking, tax-readiness, profitability visibility, and related support.

We do not use Amazon data for unrelated advertising, resale, or unauthorized purposes.

We restrict access to Amazon data to authorized personnel and systems that need access to provide and support the service. We maintain security controls designed to protect Amazon data, including access controls, secure credential storage, encryption, logging, and monitoring.

If you disconnect your Amazon account or request deletion, we will delete or de-identify Amazon data in accordance with Amazon requirements, legal requirements, accounting obligations, and legitimate business needs.

5. Data Retention and Deletion

We retain information only as long as reasonably necessary for the purposes described in this Privacy Policy, including to provide the service, comply with legal and regulatory obligations, maintain business records, resolve disputes, enforce agreements, and satisfy Amazon, tax, accounting, and security requirements.

For Amazon data, we follow applicable Amazon data retention requirements. If we ever process Amazon buyer personally identifiable information, we will limit retention and delete it according to Amazon's applicable requirements, unless a shorter period is required by law or contract.

You can delete your account yourself at any time from Settings — no email required — and we offer a one-click export of your books first. We may retain certain information where required or permitted by law, tax obligations, compliance obligations, fraud prevention, dispute resolution, security, or legitimate business recordkeeping.

6. Security

We use administrative, technical, and physical safeguards designed to protect information against unauthorized access, loss, misuse, alteration, or disclosure.

These safeguards may include:

• Encryption in transit
• Encryption at rest
• Secure credential storage
• Role-based access controls
• Multi-factor authentication for administrative access
• Network security controls
• Audit logging
• Monitoring and alerting
• Vulnerability management
• Access reviews
• Incident response procedures
• Vendor risk management
• Least-privilege access

No system is perfectly secure. We cannot guarantee that information will never be accessed, disclosed, altered, or destroyed. You are responsible for protecting your login credentials and notifying us immediately if you believe your account has been compromised.

7. Financial Privacy

Because Stonaris handles business financial data, we treat financial information with care. Where applicable, we may provide additional privacy notices required by financial privacy laws. Those notices may explain additional rights or limits on how certain nonpublic personal information is shared.

8. User Choices and Controls

Depending on your location and relationship with Stonaris, you may have the right to (California residents have these rights under the CCPA):

• Access certain information we hold about you
• Correct inaccurate information
• Request deletion of certain information
• Disconnect third-party integrations
• Opt out of certain communications
• Limit certain uses or disclosures where required by law
• Request information about how your data is processed

To make a request, contact us at support@stonaris.com. We may need to verify your identity before fulfilling a request.

9. Third-Party Services

Stonaris may integrate with third-party services such as Amazon, Amazon Ads, Plaid, Stripe, identity verification providers, payment processors, and analytics tools. Your use of those third-party services may be governed by their own terms and privacy policies. Stonaris is not responsible for the privacy practices of third parties.

10. Children's Privacy

Stonaris is intended for business users and is not directed to children. We do not knowingly collect information from children under 13. If we learn that we have collected information from a child, we will delete it as required by law.

11. International Users

Stonaris is initially intended for users and businesses based in the United States. If you access Stonaris from outside the United States, you understand that your information may be processed in the United States, where privacy laws may differ from those in your location.

12. Communications

We may send you service-related communications, including account notices, security alerts, product updates, billing notices, policy updates, and support messages. You may opt out of marketing emails, but you may still receive transactional or service-related messages.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the effective date and may notify you by email, in-app notice, or website notice. Your continued use of Stonaris after the updated policy becomes effective means you accept the updated policy.

14. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at: