Is Productor for KDP safe?

Low risk

Productor for KDP sends KDP book metadata to Productor trademark APIs when users run trademark checks.

When a user clicks the extension's trademark-check buttons on KDP title setup pages, the extension reads the title, subtitle, description, and keywords from the page. It sends generated trademark search data based on that book metadata to Productor's DPMA, USPTO, and EUIPO trademark API endpoints. The background bundle also includes Basic Authorization credentials used for those API requests.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

Productor Appsv1.2.8Chrome Web Store
15Risk
Who publishes it

Productor LLC - 4 other listings from the same operator, none carrying a finding

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
Productor Apps
Declared legal entity
Productor LLC
Registered address
address_redacted, address_redacted, CO 80301, US
Registered contact
Productor LLC

Same store account

2 other listings published from this account, 74k+ users between them, none of them carrying a finding.

Same operator - 2 listings

Published under a different store account, but sharing the registered address, contact or declared legal entity this one gave the store.

Shared hosts - 1 hostname

Hostnames hardcoded in this extension that few other listings call. That can mean one operator behind both, and it can equally mean a small shared vendor, so it is context rather than a conclusion. Hosts that many listings call are left out: they are services, not connections.

register.dpma.de
Also called by 4 other listings, including MerchFlow for Merch by Amazon, Merch Dominator For Merch By Amazon & KDP, PrettyMerch

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

What it can do

Permissions this extension asks for, as declared in version 1.2.8. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Read and change your data on kdp.amazon.com

    *://kdp.amazon.com/*

  • Read and change your data on kdpreports.amazon.com

    *://kdpreports.amazon.com/*

  • Read and change your data on productor.io

    *://*.productor.io/*

  • Keep running in the background while your browser is open

    background

  • Store data in your browser

    storage

  • Schedule its own background tasks

    alarms

  • Show you desktop notifications

    notifications

Where it sends data

Destinations our analysis observed Productor for KDP contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • euipo-tm-api1.productor.io

    Productor for KDP sends data to euipo-tm-api1.productor.io. One other extension we have analysed sends data here.

  • dpma-tm-api.productor.io

    Productor for KDP sends data to dpma-tm-api.productor.io. No other extension we have analysed sends data here.

  • uspto-tm-api.productor.io

    Productor for KDP sends data to uspto-tm-api.productor.io. No other extension we have analysed sends data here.

Updated 30 September 2026hhoblekomblecenhpocenhkmhjioehig