Privacy Policy

Draft for owner and legal review. The routing, versioning, and acceptance mechanics around this document are production code. The prose is not legal advice and has not been reviewed by counsel.

1. What we collect

Your account details. Your email address, your display name if you set one, and which stores you have access to.

Your Amazon business data. Orders, settlements and fees, inventory, listings, advertising performance, and search-performance reports for the stores you connect.

Costs you enter. Unit costs and supplier invoices you upload so PpcGPT can calculate profit.

Operational records. What was approved, by whom, and when.

2. What we deliberately do not collect

No buyer personal information, ever. PpcGPT does not request, store, or process buyer names, addresses, phone numbers, or email addresses. The Amazon permissions PpcGPT asks for exclude the roles that carry that data.

3. Why we process it

To show you your business, to draft recommendations, to carry out changes you approve, and to keep the service working and secure. That is the whole list.

4. What we never do

• We do not train models on your data.
• We do not benchmark your data against other sellers, in aggregate or otherwise.
• We do not sell your data, and we do not share it for advertising.

5. Who processes data on our behalf

Named, with purpose and region, on the Subprocessors page. We give 30 days' notice on that page, and by email to account owners, before adding one.

6. Where your data lives

In the United States, with our infrastructure providers. Amazon data is fetched from the regional endpoint your store belongs to.

7. How long we keep it

For as long as your account exists. When you delete a store, or ask us to delete your account, we remove the stored business data and the stored Amazon authorization for it, and we confirm in writing what was removed and when. Backups age out on our provider's schedule, within 30 days.

8. Your choices

You can export or correct the cost data you entered, and you can revoke PpcGPT's Amazon access from Amazon at any time.

Deleting a store is self-service: Settings → Stores. It has a seven-day grace period during which you can cancel it.

Deleting your whole account is handled by request during the beta — mail privacy@ppcgpt.ai and we will complete it within seven days. A self-service control for account deletion is not yet built, and we would rather say so here than describe a button that does not exist.

Full step-by-step instructions, including what is removed in each case, are on the Deleting your data page.

9. Security

Amazon authorizations are encrypted at rest and readable only by the single service that refreshes them. Access to your data is scoped to the stores you have been granted, enforced in the database rather than only in the interface.

10. Contact

Privacy questions and requests: privacy@ppcgpt.ai. Security reports: security@ppcgpt.ai.