Privacy Policy

01 Information We Collect

Information you provide. Account and contact details (name, business name, email address, password), waitlist and invite-code submissions, billing information (processed by our payment processor — we do not store full payment card numbers), settings and rules you configure in the Service, and communications you send us.

Amazon account data you authorize. When you connect your Amazon accounts through Amazon's official authorization flows, we receive advertising and selling data via the Amazon Ads API and Selling Partner API, such as campaign, ad group, keyword, bid, budget, search-term, impression, click, spend, sales, and inventory data. Most of this is business data; it may include limited personal information such as account identifiers.

Information collected automatically. Log and usage data (IP address, browser and device type, pages viewed, actions taken in the dashboard, timestamps), and cookies or similar technologies as described in Section 7.

Information from third parties. Payment status from our payment processor and technical data from our service providers.

We do not knowingly collect information from anyone under 18, and the Service is not directed to children.

02 How We Use Information

We use information to: provide, operate, and secure the Service, including generating proposed campaign changes, reports, and analytics from your Amazon data; authenticate you and manage your account and subscription; process payments; communicate with you about the Service, including transactional messages, waitlist and beta updates, and, with your consent where required, marketing messages you can opt out of at any time; monitor, troubleshoot, and improve the Service, including in aggregated or de-identified form; enforce our Terms of Service and protect against fraud, abuse, and security threats; and comply with legal obligations.

Amazon data use. Data obtained through Amazon's APIs is used only to provide and improve the Service for the account that authorized it, consistent with Amazon's API policies. We do not use your Amazon data to advertise to you, and we do not sell it.

Automated processing. The Service uses automated rules and software (including AI models used for analysis and narration) to generate proposed advertising changes. These proposals affect advertising campaigns, not legal or similarly significant effects on individuals, and changes are applied subject to the controls you configure.

03 How We Share Information

We do not sell personal information, and we do not share personal information for cross-context behavioral advertising.

We share information only with: service providers who process it on our behalf under contract, such as cloud hosting and storage, payment processing, email delivery, analytics, and AI model providers used to operate Service features; Amazon, to the extent necessary to execute changes and retrieve data you have authorized; professional advisors (lawyers, accountants, auditors) under confidentiality obligations; authorities, where required by law, subpoena, or court order, or to protect the rights, safety, or property of AutoPPC, our users, or others; and a successor entity in connection with a merger, acquisition, financing, or sale of assets, subject to this Policy.

04 Data Retention

We retain personal information for as long as needed to provide the Service and for legitimate business purposes such as billing records, dispute resolution, and legal compliance. Amazon data associated with your account is deleted or de-identified within a reasonable period after you disconnect your Amazon account or close your AutoPPC account, except where retention is required by law. Aggregated or de-identified data that cannot reasonably identify you may be retained without restriction.

05 Security

We use administrative, technical, and physical safeguards appropriate to the sensitivity of the information, including encryption in transit, access controls, and secrets management. No system is perfectly secure; you are responsible for keeping your account credentials confidential.

06 International Transfers

We are a Canadian company and use service providers located in Canada, the United States, and other jurisdictions. Your information may be processed and stored outside your province, state, or country, where it may be subject to the laws of those jurisdictions and accessible to their courts and authorities. We use contractual and technical safeguards with our service providers to protect transferred information.

07 Cookies and Analytics

We use cookies and similar technologies that are necessary for the Service to function (such as authentication and security) and, where enabled, analytics cookies that help us understand how the Service is used. You can control cookies through your browser settings; disabling necessary cookies may break parts of the Service. We honor the Global Privacy Control (GPC) signal where required by applicable law. Because we do not sell personal information or use third-party behavioral advertising, there is no advertising tracking to opt out of.

08 Your Rights and Choices

Depending on where you live, you may have the right to: access the personal information we hold about you and receive a copy in a portable format; correct inaccurate information; delete your information; withdraw consent to processing based on consent; and opt out of marketing communications (via the unsubscribe link in any marketing email or by contacting us).

To exercise these rights, email privacy@autoppc.ai from the address associated with your account, or include enough information for us to verify your identity. We will respond within the time required by applicable law (generally 30–45 days). We will not discriminate against you for exercising your rights. An authorized agent may submit a request on your behalf with proof of authorization. If we decline a request, we will explain why, and where applicable law provides an appeal process, you may appeal by replying to our decision; you may also contact your local privacy regulator.

09 Canada (PIPEDA)

We comply with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws. We collect, use, and disclose personal information with consent, express or implied as appropriate to the sensitivity of the information and the reasonable expectations of the individual, and only for purposes a reasonable person would consider appropriate in the circumstances. You may withdraw consent at any time, subject to legal or contractual restrictions and reasonable notice; withdrawing consent may limit our ability to provide the Service.

Our Privacy Officer is accountable for our compliance with this Policy and applicable privacy law. You can reach the Privacy Officer at privacy@autoppc.ai. If you are not satisfied with our response to a privacy concern, you may contact the Office of the Privacy Commissioner of Canada (priv.gc.ca).

10 United States State Privacy Rights

If you are a resident of California or another U.S. state with a comprehensive privacy law (including Colorado, Connecticut, Texas, Oregon, and Virginia), the rights in Section 8 apply to you as provided by your state's law.

For California residents (CCPA/CPRA): in the preceding 12 months we have collected the categories of personal information described in Section 1 (identifiers; commercial information; internet activity; professional information; and inferences drawn for Service analytics), for the purposes in Section 2, disclosed to the categories of service providers in Section 3. We do not sell personal information, do not share personal information for cross-context behavioral advertising, and do not use or disclose sensitive personal information for purposes requiring a right to limit. You have the rights to know, access, correct, delete, and port your personal information, and the right to non-discrimination. Submit requests as described in Section 8.

11 Third-Party Sites and Services

The Service links to and interoperates with third-party services, most notably Amazon. Their handling of your information is governed by their own privacy policies, which we encourage you to review. We are not responsible for the privacy practices of third parties.

12 Changes to this Policy

We may update this Policy from time to time. We will post the updated version with a new effective date and, for material changes, provide notice by email or through the Service before the change takes effect. Your continued use of the Service after the effective date constitutes acceptance of the updated Policy.

13 Contact Us

AutoPPC Inc. — Privacy Officer
Email: privacy@autoppc.ai

For general legal inquiries: legal@autoppc.ai