Last updated: October 2026
DeskPull LLC ("DeskPull", "we", "us", or "our") operates the website deskpull.com and the DeskPull desktop application for macOS and Windows (together, the "Service"). This Privacy Policy explains what information we collect, how we use it, and how we protect it when you visit our website or use the DeskPull app.
DeskPull is built around a simple idea: your Amazon report data belongs to you and stays with you. The section below explains how that works in practice.
DeskPull downloads your own Amazon reports to your own computer, on a schedule you set. The way this works is central to how we protect your data:
Account information. When you create a DeskPull account using Login with Amazon, we receive your name and email address from Amazon, with your consent, to set up and manage your account.
Amazon authorization. When you connect an Amazon account, we store an encrypted authorization token that lets DeskPull retrieve your reports on your behalf. We do not store your Amazon password.
Schedule and app settings. We store the report schedules and settings you create, so your schedules run as configured. The local folder path where your reports are saved is stored only on your own device.
Billing information. When you buy a paid plan, your payment is processed by Paddle, our reseller and merchant of record (see "Service providers" below). Paddle collects and processes your billing and payment details. We receive confirmation of your subscription status and related billing events from Paddle, but we do not receive or store your full payment card details.
Website information. When you request a download link on our website, we collect your email address so we can send you the link, along with basic context about your visit (whether you were on a phone or a computer, and which page you came from) so we can measure how people find DeskPull. The download link contains a token that lets us connect your website visit or purchase to your DeskPull account when you sign in; the token routes and attributes your download, and never by itself grants access to anything.
App usage and crash information. The DeskPull app sends anonymous product-usage events (keyed to a random identifier, never your email or Amazon identity) and crash reports. Crash reporting stays on for everyone so we can fix problems that affect you; if you opt out of product analytics in Settings, crash reports are additionally stripped to the technical minimum (the error itself, the app version, and your platform), with no identifier of any kind. Neither usage events nor crash reports ever include your IP address, your report data, your file paths, or your emails; automated filters remove tokens, email addresses, and personal paths before anything leaves your computer.
Information collected automatically. When you visit our website, we automatically collect certain information, including pages viewed and interactions, device type, browser type and operating system, approximate geographic location (country or region level), and the referring website or advertisement. When you request a download link, ask us to send your purchase email again, sign in to the app, or link a purchase to your account, our servers also record the IP address the request came from.
We use the information we collect to:
We do not sell or rent your personal information, and we do not share it with third parties for their own marketing purposes.
Your Amazon report data is yours. We do not sell it, share it, or use it for any purpose other than delivering it to you. As described above, your report files are not stored on or routed through our servers.
Our website uses the following cookies and tracking technologies:
If you are in the European Economic Area, the United Kingdom, or Switzerland, the Google and Microsoft tools above do not set cookies until you accept them in our consent banner. If you decline, Google still receives cookieless, non-identifying signals (Google Consent Mode) that are used only for aggregate conversion modeling; Google states they are never used to track individual users across sites, build remarketing lists, or generate user profiles.
You can control or delete cookies through your browser settings. Disabling cookies may affect some functionality of our website.
We use a limited set of trusted service providers (subprocessors) to operate the Service. They process information only as needed to provide their service to us, and they are bound by confidentiality and data-protection obligations. Our main providers are:
We maintain a current list of our subprocessors and can provide it on request.
DeskPull's cloud service and database are located in the United States (AWS, us-east-1). If you access the Service from outside the United States, your information will be transferred to and processed in the United States. Where required, our providers rely on the EU Standard Contractual Clauses, the UK International Data Transfer Addendum, and, where the provider is certified, the EU-US Data Privacy Framework for these transfers.
We retain your account information and settings for as long as your account is active. If you cancel, your account and settings are kept rather than deleted, so you can re-subscribe, until you ask us to delete them. We retain your encrypted Amazon authorization token only while your Amazon account is connected; when you revoke access, the token can no longer be used. If you request a download link but never sign in, we delete that email and its context after 12 months, and you can ask us to delete it sooner at any time. We keep the IP address recorded with a download-link request, a request to send your purchase email again, or a sign-in for about a day, and with a request to link a purchase for a week. Analytics data is retained according to the default retention periods of each analytics provider (typically 14 months for GA4).
We keep the history of your report runs and deliveries (their status and settings, never the report data, which never reaches us) for 90 days, and billing and audit records for a year. Each is then moved to an encrypted archive that only we can read, and deleted from it two years later; a billing record that belongs to no subscription, such as a checkout that was never completed, is deleted at its year instead. If you delete your account in the app, none of it is kept for those two years: your account, its history, and its archived records are deleted after 30 days (signing in again before then cancels the deletion), and its billing and audit records are deleted, not archived, when their year ends.
We take reasonable measures to protect your information. Amazon authorization tokens are encrypted at rest using managed encryption keys, and connections to our services use HTTPS. No method of transmission or storage is completely secure, but we work to protect your information using industry-standard practices.
Depending on your location, you may have the right to:
To exercise any of these rights, please contact us using the details below.
The Service is not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If you believe we have inadvertently collected such information, please contact us so we can promptly delete it.
Our Service connects to Amazon through Amazon's official APIs. Your use of Amazon's services is governed by Amazon's own terms and privacy policies. DeskPull is an independent product and is not affiliated with, endorsed by, or sponsored by Amazon. Our website may also contain links to third-party sites that we do not control, and we are not responsible for their privacy practices.
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last updated" date.
If you have any questions about this Privacy Policy or how we handle your data, please contact us at [email protected].
DeskPull LLC
30 N Gould St, STE R, Sheridan, WY 82801, USA