Data Policy
This Data Policy describes how BI Adlytics handles data obtained through the Amazon Ads API and Amazon Selling Partner API (SP-API), consistent with Amazon's Acceptable Use Policy and Data Protection Policy. It supplements our Privacy Policy and our Security page, which covers our technical controls in more detail.
1. Data we access
With your authorisation, we access advertising performance, campaign structure, search terms, orders, settlements and finance events, inventory, returns and Brand Analytics reports for the Amazon accounts you connect. We request only the scopes needed to provide the features you use.
2. How authorisation works
You grant access on Amazon's own consent screens. We never receive or store your Amazon username or password. You can revoke access at any time from Amazon Seller Central; revocation stops all future data collection.
3. Storage and security
- Refresh tokens and other credentials are encrypted at rest and are never exposed to the browser or to other customers.
- Each customer's data is isolated per workspace with row-level security.
- Data is stored on reputable cloud infrastructure with access restricted to authorised systems and personnel.
- Personally identifiable information (PII) from orders is handled in accordance with Amazon's requirements and is not used for any purpose other than providing the service to you.
4. How we use Amazon data
Solely to provide features to the authorising seller — computing profit, analysing advertising, preparing bulk changes, generating reports and analytics within your own account. We do not sell Amazon data, share it with other sellers, or use it to benefit any party other than you.
5. Retention and deletion
We retain Amazon data only as long as needed to provide the service and as permitted by Amazon's policies. Advertising history is preserved per your plan (3–24 months). On subscription cancellation we retain your data for up to 90 days to allow reactivation, after which it is deleted or anonymised. PII is deleted within 30 days of a deletion request or of your ceasing to use the service, whichever is earlier. You may request deletion at any time.
6. Sub-processors
We use: Supabase (database/hosting), Vercel (application hosting), Instamojo (payments) and Google (analytics). Each processes data under its own terms and only as needed to operate the service.
7. Incident response
In the event of a data breach affecting Amazon Information, we will investigate, remediate, and notify affected parties and Amazon as required by applicable policy and law.
8. Contact
Data protection queries: info@biadlytics.com.
This template reflects common Amazon API data-protection requirements and should be reviewed by qualified legal counsel and against the current Amazon Data Protection Policy before publication.