A server is easy to rent. It is hard to make safe.

1. Your Amazon keys stay on your box

To connect to Amazon, an automation needs secret keys for your seller account. The fast way is to paste them into the AI chat, into the script, or into a plain text file on the server. From there they get copied to a code site, a chat history or a backup. A person who finds them can read your orders and change your ads and prices as if they were you.

• You type the secret into a one-time form on your own computer. It goes from there to your box, and the copy on your computer is deleted. It never goes into the chat, and we never receive it.
• Your box stores your Amazon keys with strong encryption. The key that unlocks them is made on your box and never leaves it.
• Your Amazon keys are never written to the box's logs. The box keeps a record of each time it uses them.

2. Every page needs a sign-in

You ask the AI for a sales dashboard and it gives you a web address. It works on your phone, so it looks done. But often that address has no login, and anyone who finds it, or guesses it, sees your sales, your margins and your best products. Programs that search the internet for open pages like this run all day.

• Every page on your box is behind a sign-in. A person gets through only when they are signed in and are a member of your team. This is checked each time they open a page, not once a day.
• There are no passwords to guess or reuse. Your team signs in with a passkey (the fingerprint or face sign-in on their phone or laptop) or a 6-digit code sent by email. A code expires after 10 minutes and stops after 5 wrong tries.
• Each box is walled off. A sign-in to one box does not work on another, and a page on one box cannot reach another box.

3. No password login on your box

Many servers start with a password login for the all-powerful admin user. Programs try millions of common passwords on every server they can find, and a new server gets its first try within minutes. One weak password gives them the whole machine.

• Password login is off. Your box allows one user, and only with a key that is made on your computer during setup.
• The admin login is off, and its password is locked.
• When someone tries to log in again and again, the box blocks them.

4. The firewall lets in only you and your team

Each program on a server can open its own door to the internet: the database, the test version of an app, a tool you tried once. Nothing tells you that a door is open, and an open database with no password is one of the most common ways that data leaks.

• The firewall closes every door except two. One is for your own login from your computer, and it opens only for your key. The other is for web pages, and it lets a person through only after SellerBox checks that they are signed in and on your team.
• The app on your box listens only inside the box. A new program that Claude adds cannot open a new door through the firewall.

5. Security updates install themselves

A server works for months without attention, so nobody looks at it. In that time, holes are found in the software it runs, and the fixes are not installed. Attackers look for servers with old software because they know which holes are open.

• Your box installs security fixes automatically. So do the SellerBox systems that check who signs in.
• We never change the SellerBox app on your box without you. You take a new release when you ask Claude for it, so nothing changes under an automation you built.

6. Each person has their own sign-in

The team shares one password: you, your VA, your PPC freelancer. When one of them leaves, the password stays the same, because changing it means telling everyone else. So people who no longer work for you can still see your numbers.

• Each person has their own sign-in. Nobody shares one.
• When you remove a teammate, they lose access immediately. They do not keep it until a session runs out.
• Only the account owner can invite or remove people, and an invite expires after 7 days.

7. We hold no key to your box

When a tool or a developer sets up your server, they often keep a key to it, and your Amazon keys go through their systems too. Then your data is only as safe as their laptop and their staff.

• We hold no key to your box. We never make one, at any step. The only key is made on your computer, and it stays there.
• We never receive your Amazon keys. We keep only the ID of your Amazon app, which is not secret.
• Claude runs on your computer, on your own Anthropic account. SellerBox has no AI service of its own, so your data does not go through us to reach an AI model.
• We do not look at your data, sell it, or use it to train anything.

This also means we cannot open your box to fix something for you unless you give us access yourself.

8. Your data stays when the server is rebuilt

On a cheap server, the data sits on the same disk as the system. Rebuild the server to fix a problem, or move it to a bigger size, and years of sales history can go with it.

• Your data is on its own disk, separate from the server. When the server is rebuilt or resized, the disk and your data stay.
• The disk is protected from deletion, and it is stored on more than one physical machine, so a hardware fault does not lose it.
• Your box is a server for your account alone, in a data center in the EU. No other customer runs on it.

Report a problem

If you find a security problem, write to support@sellerbox.dev. We will reply to you. If we find a breach that affects your data, we will tell you without delay.

Card payments go to Polar, never to us. For what we collect and how long we keep it, see the Privacy Policy.