This privacy policy explains how Uppfylla Ltd ("we", "us", "our") collects, uses, and protects data when you use the Adaptimizer platform ("the Service").
1. What data we collect
To provide our Amazon advertising optimisation service, we access and store the following data from your Amazon accounts:
- Amazon Ads performance data: Campaign metrics, keyword performance, search term reports, bid history, and budget data from the Amazon Ads API.
- Product listings: ASIN information, product titles, categories, and pricing from the Amazon SP-API.
- Inventory levels: Stock quantities and fulfilment status to enable stock-aware automation.
- Fee information: FBA fees, referral fees, and other Amazon marketplace fees for profitability calculations.
- Account information: Your email address, company name, and contact details provided during registration.
2. What we do NOT collect
We explicitly do not access or store:
- Customer personally identifiable information (PII): We do not access buyer names, addresses, payment details, or any end-customer data.
- Restricted Data Tokens: We do not request or use Amazon Restricted Data Tokens (RDT) that grant access to customer PII.
- Order-level buyer data: We do not access individual order details that could identify your customers.
- Financial account information: We do not access your bank details, payment methods, or disbursement data.
3. How we use your data
Your data is used exclusively to provide the Adaptimizer optimisation service:
- Optimisation recommendations: Analysing campaign performance to generate bid, budget, and targeting recommendations.
- Performance reporting: Creating dashboards and reports showing advertising performance and profitability.
- Search term intelligence: Identifying profitable and wasteful search terms for harvesting and negative targeting.
- Stock-aware automation: Monitoring inventory to pause or adjust advertising when stock is low.
- Rule execution: Applying approved optimisation rules to your Amazon Ads campaigns.
4. Data storage and security
- Encryption at rest: All data is encrypted using AES-256 encryption at rest.
- Encryption in transit: All data transmission uses TLS 1.2+ (HTTPS).
- Hosting: Data is stored on servers located in the UK/EU region.
- Access controls: Role-based access control (RBAC) limits data access to authorised personnel and systems only.
- API credentials: Amazon API tokens are encrypted and stored server-side only. They are never exposed in browser sessions, logs, or client-side code.
5. Data retention
We retain your data as follows:
- Active accounts: Data is retained for the duration of your subscription plus 90 days after termination.
- After termination: Upon request, all your data can be exported and/or permanently deleted within 30 days.
- Audit logs: Action logs are retained for 12 months for compliance and dispute resolution purposes.
- Backups: Encrypted backups are retained for a maximum of 30 days after data deletion.
6. Third-party sharing
Your data is yours. We do not sell, rent, or share your Amazon advertising data with any third parties. Your data is used exclusively to provide the Adaptimizer service to you. The only external data transmission is back to Amazon's APIs to execute approved changes on your behalf.
7. Your rights
Under GDPR and UK data protection law, you have the right to:
- Access the data we hold about you
- Request correction of inaccurate data
- Request deletion of your data
- Export your data in a portable format
- Withdraw consent for data processing
- Object to automated decision-making
8. Cookies
The Adaptimizer platform uses essential cookies for session management and authentication. We do not use tracking cookies, advertising cookies, or third-party analytics that track individual users.
9. Changes to this policy
We may update this privacy policy from time to time. We will notify you of significant changes via email or through the platform. Continued use of the Service after changes constitutes acceptance of the updated policy.
10. Contact
If you have questions about this privacy policy or wish to exercise your data rights, contact us:
- Email: hello@uppfylla.co.uk
- Company: Uppfylla Ltd
- Location: United Kingdom