OA Hero
Add to Chrome

Privacy Policy

Last updated: 11 November 2026

Who we are

OA Hero is a Chrome extension from WhiteKnight Software Design - FZCO, registered in the IFZA free zone, Dubai Silicon Oasis, Dubai, United Arab Emirates (licence 87386). Contact: support@oahero.com.

What we collect

  • Your SellerOracle sign-in: when you sign in with SellerOracle, it tells OA Hero your SellerOracle user ID, name, email address, workspace name and your SellerOracle trial's status (waiting to start, running or none). OA Hero keeps your name, email address, trial status, your SellerOracle user ID and when it last checked your sign-in, plus an encrypted copy of the access token SellerOracle gives it, so it can check once a day that you are still signed in. It never sees your SellerOracle password, orders, emails or invoices.
  • Accounts made by buying OA Hero: your email address, the name on your payment, your password (stored only as a one-way hash), your licence (its key, plan and expiry date) and your Stripe customer, subscription and checkout IDs.
  • Sign-in token: kept in your browser so you stay signed in, with your account's name, email address, account number and whether it is an admin account. Signing out removes them.
  • Products you save: the products and notes you save in OA Hero, kept on OA Hero's server, with a copy of the list in your browser that stays, even after you sign out, until you remove OA Hero.
  • Brand-warning cache: what OA Hero shows about a product (such as its brand, warnings, title, picture, price and barcode) is saved in your browser, and OA Hero uses that copy for 24 hours so it doesn't look the product up again each time. The copy stays in your browser until OA Hero looks that product up again or you remove OA Hero, and copies saved by versions before 3.0.0 stay until you remove OA Hero.
  • Ungating checks: to show whether you need Amazon's approval to sell a product, the extension asks Seller Central for its approval page for that product, in one request. Chrome sends that request with the cookies that keep you signed in to Seller Central, as it does for a page you open there. OA Hero never reads or saves these cookies, or sends them to its own server. OA Hero uses the answer for 24 hours, and the answer stays in your browser until OA Hero checks that product again or you remove OA Hero. It reaches OA Hero's server only if you send a Report.
  • Feedback submissions: support messages and Reports you send are stored in our database and posted to our private Discord so we can reply. A Report also holds the page's address and what OA Hero showed on the page, and its Discord post shows your account's email address, the page's address, the product's brand, ASIN or barcode, the lines you ticked and what you wrote.
  • Support requests: when you click Request support for this website, the website's address and your browser's details (its name, version and system) are posted to our private Discord, and kept in our database until about a day after that.
  • Uninstall feedback: when you remove OA Hero, Chrome opens oahero.com/goodbye with the OA Hero version and the day you installed it. If you pick a reason we store it with that version and day, and any words or email you choose to add. It isn't linked to your account.
  • Emails we send you: most are queued in our database before they go out, and the queue keeps a record of each one: which email it was, your account number and, for some, the code from a password link or your licence key. Each record is deleted about a day after its email goes out.
  • Retailer lookups: the address of the website you're on (just the site, such as www.example.com) is matched against OA Hero's own retailer list. OA Hero's server doesn't keep it, and no one else gets it.
  • Qogita product lookups: on a Qogita product page, OA Hero reads the product's brand and barcode from the page and sends them to OA Hero's server with the product's ID and name from the page's address; OA Hero's server doesn't send Qogita anything for them. When a page doesn't show them, and in versions of OA Hero from before this change, OA Hero sends only the ID and name, and OA Hero's server sends Qogita the product name to get the brand and barcode, until Qogita stops that at the end of January 2027. For the prices OA Hero shows on Amazon, QogitaScout, run by the same company as OA Hero, downloads Qogita's catalogue, with its own Qogita account. With the same account, it reads the offers of the catalogue's products that match Amazon listings, to find which sellers give a marketplace invoice. Nothing about you is sent to Qogita.
  • Qogita prices on Amazon: to show Qogita's prices on Amazon UK, Germany, France, Italy and Spain, the extension sends OA Hero's server the ASINs on the Amazon product and search pages you visit there, unless you set Qogita prices to Off for those pages in Settings. OA Hero's server passes them on to QogitaScout, run by the same company as OA Hero, to find their Qogita prices, with nothing about who asked (no account, user or IP address). QogitaScout keeps the ASINs it couldn't find a Qogita price for, with nothing about who asked, and sends them to Keepa to find their barcodes. It keeps each of them after that, marked as looked up, and sends Keepa the same one again only once it has found a Qogita price for it, to check its prices, or when Keepa didn't answer. Neither OA Hero nor QogitaScout keeps the others, except the product page you're on, which OA Hero keeps (see Keepa lookups), and apart from QogitaScout and Keepa, no one else gets them.
  • Keepa lookups: OA Hero's server sends Keepa the ASIN of the Amazon page you're on, and the barcodes of products on shop and Qogita pages, using OA Hero's own Keepa account, to get the product's brand, title, picture, price and barcodes. It keeps the product's details (such as its brand, title, picture, price and barcodes) by its ASIN, with nothing about who asked (no account, user or IP address). QogitaScout sends Keepa the barcodes in Qogita's catalogue, to find the Amazon listings that carry them, and the ASINs it couldn't find a Qogita price for (see Qogita prices on Amazon), to find their barcodes. Nothing about you is sent to Keepa.
  • Barcodes you look up: sent to ean-search.org to find the product. When you open a Qogita product page, OA Hero's server sends the product's barcode to QogitaScout, run by the same company as OA Hero, with nothing about who asked (no account, user or IP address). QogitaScout looks the barcode up on ean-search.org to check whether the product is a tester, which Amazon doesn't allow to be sold, and keeps the barcode and ean-search's answer, with nothing about who asked.
  • Pictures: product pictures on Qogita and shop pages and in OA Hero's own panel come straight from Amazon's image servers, and the FBAMogul tab's video pictures come straight from YouTube. Your browser fetches them like any picture on a web page, so those servers see your IP address and browser.
  • Server logs: our hosting provider, Render, logs each request to OA Hero's server: the address requested, the time, your IP address and your browser. OA Hero's server also logs each request's other details, with what you look up, write, save or search for, your sign-in details and the payer's details Stripe sends us hidden. What stays readable is about the request itself, such as a saved product's marketplace, price and currency, the plan you chose at checkout and Stripe's IDs for a payment, and some lines name your account number. The emails and Discord posts we send are logged without what they contain.
  • Rate-limit counts: to enforce request limits, our database counts your requests by a scrambled fingerprint of your IP address, account number or, for password resets and website sign-ins, email address. It never holds the address or number itself.

Moving to SellerOracle

If you bought OA Hero, your email address and password hash, and your name if it has a first and a last name, are copied to a SellerOracle account in your name, run by the same company, so you can sign in there with the same email address and password. If that password is short or a common one, SellerOracle asks you to choose a new one the first time you use it. If you never set an OA Hero password, choose one with the "Forgot password?" link on SellerOracle's sign-in page. If your email address already has a SellerOracle account, nothing is copied to it and you sign in with your SellerOracle password. Only these are copied, and the two accounts are matched by your email address. If you can sign in to SellerOracle, SellerOracle emails you once about the change, from its own email service, unless your email address already had a SellerOracle account and you've unsubscribed from SellerOracle's news emails.

We do this because of our legitimate interest in keeping your access to OA Hero working once it signs in through SellerOracle. To object, email support@oahero.com or reply to that email: we then leave you out of the move, or delete the SellerOracle account it made for you.

How long we keep it

  • Your account: your account details, licence, SellerOracle sign-in details and saved products are kept while your account exists. When you ask us to delete your account we delete them, and our hosting provider's database backups keep a copy for up to 7 days after that.
  • Feedback and Reports: kept in our database and on our private Discord until you ask us to delete them.
  • Support requests: kept on our private Discord until you ask us to delete them, and in our database until about a day after they're posted there. If one can't be posted, it stays in our database until we post it again or delete it.
  • Uninstall feedback: 12 months, then deleted.
  • Records of the emails we send you: deleted from our database about a day after the email goes out. If an email can't be sent, its record stays until we send it again or delete it. When you ask us to delete your account, we delete these too.
  • The move to SellerOracle: the file of accounts we give SellerOracle is deleted right after SellerOracle imports it, and a list of just the email addresses is kept until the move email has gone out, then deleted.
  • Server logs: kept by Render for up to 30 days.
  • Rate-limit counts: deleted from our database within about an hour of the end of their limit's time window, so kept there for at most about a day and an hour.
  • Copies in your browser: the sign-in token and your account's details stay until you sign out or OA Hero signs you out, the copy of your saved products until you remove OA Hero, and product and ungating results as described above. OA Hero uses Qogita's answers for the products on the Amazon pages you visit, including which ones weren't on Qogita, for an hour. It deletes older ones when it next asks for Qogita's prices, at most once an hour, and keeps the time it last did that until you close Chrome. Removing OA Hero deletes everything it keeps in your browser.

What we do NOT do

  • We do not sell your data.
  • We do not use your data to determine creditworthiness.
  • We do not use your data for anything unrelated to OA Hero's single purpose (giving you sourcing context on product pages and Amazon search results).

Third parties

Sign-in is handled by SellerOracle, which WhiteKnight Software Design - FZCO also runs; its privacy policy is at selleroracle.com/privacy. We also use Render (hosting and server logs), Stripe (payments for OA Hero subscriptions and lifetime licences), Keepa (Amazon product data), Qogita (product details on Qogita pages, and the prices in its catalogue and its sellers' offers, downloaded by QogitaScout, which WhiteKnight Software Design - FZCO also runs), ean-search.org (barcode lookups), Brevo (sending email), Anthropic (AI that reads product data for some checks) and Discord (internal support). Each is a data processor on our behalf.

Your rights

Email support@oahero.com to request access, correction, or deletion of your data, or to object to your account being copied to SellerOracle. We'll respond within 30 days.