This Privacy Policy describes how Amazon Ads AI Assistant ("we", "us", or "our") collects, uses, and protects information when you use our Chrome extension and related backend service.
1. What we collect
Account information — your email address and a hashed (bcrypt) password when you register.
Amazon Ads campaign data — campaign names, bids, spend, ACoS, impressions, clicks, and related metrics that the extension reads from your advertising.amazon.com session. This data is captured only while you are actively using the extension on that page.
Usage data — token counts to track your monthly quota and enforce plan limits. No message content is stored long-term.
Conversation context — messages you send to the AI assistant are held in a short-term session cache (Redis) and expire automatically. They are not stored in a permanent database.
2. What we do not collect
Your Amazon seller account credentials or passwords
Browsing history outside of advertising.amazon.com
Payment card details (handled entirely by Stripe — see Section 5)
Any data from pages other than advertising.amazon.com
3. How we use your data
To provide the service — campaign data is sent to our backend to generate AI-powered recommendations.
To authenticate you — your email and hashed password are used for login and to associate your data with your account.
To enforce plan limits — token usage counts are tracked to apply monthly quotas.
To improve the service — we may review anonymized, aggregated usage patterns. We do not use your Amazon Ads data to train AI models.
4. AI processing
Your campaign data and chat messages are sent to one or more third-party large language model (LLM) providers to generate AI responses. These providers may include Anthropic (anthropic.com), OpenAI (openai.com), and others. Each provider's own data usage and privacy policies apply to data processed through their APIs. We do not send your Amazon account credentials to any AI provider.
5. Payments
Subscription payments are processed by Stripe (stripe.com). We do not store or have access to your payment card details. Stripe's Privacy Policy governs payment data.
6. Data sharing
We do not sell, rent, or share your personal data with third parties for marketing purposes. Data is shared only with:
Anthropic — for AI response generation (campaign data and chat messages)
Stripe — for payment processing (email address and subscription status)
Render — our cloud hosting provider, which stores the database and processes backend requests
7. Data retention
Account data — retained while your account is active. Deleted within 30 days of account deletion on request.
Campaign data — stored in our database and associated with your account. You can request deletion at any time.
Session/chat data — expires automatically (typically within 24 hours) from the Redis session cache.
8. Security
We use industry-standard measures: HTTPS for all data in transit, bcrypt password hashing, JWT-based authentication, and rate limiting on authentication endpoints.
9. Your rights
You may request access to, correction of, or deletion of your personal data at any time by contacting us at the email below. We will respond within 30 days.
10. Children
This service is not directed at children under 13. We do not knowingly collect data from children.
11. Changes to this policy
We may update this policy from time to time. We will notify registered users of material changes by email. Continued use of the service after changes constitutes acceptance.
12. Contact
For privacy questions or data deletion requests, email us at wqlu2010@gmail.com.