Privacy Policy

AmzDataLens ("we", "us", or "our") is committed to protecting your personal data. This Privacy Policy explains what information we collect, how we use it, with whom we share it, and the rights you have in relation to it. It applies to all users of our platform at amzdatalens.com and any related mobile applications or APIs.

By using our Service, you acknowledge you have read and understood this Policy. Where we are required to obtain your consent, we will do so explicitly.

A. Information you provide directly

B. Information collected automatically

C. Data from third-party integrations

When you connect a third-party service (e.g., Amazon Seller Central via OAuth), we receive only the scopes you authorise. We do not access your account beyond what is necessary for the feature you are using.

We use your personal data to:

• Create, manage, and authenticate your account.
• Provide and operate the Service, including real-time product research, keyword analysis, listing quality checks, rank tracking, and competitor intelligence features.
• Process payments and send transactional communications (receipts, renewal notices, billing alerts).
• Send service-related notifications (feature updates, downtime alerts, security notices).
• Send marketing communications where you have opted in — you may opt out at any time.
• Generate aggregated, anonymised usage analytics to improve the platform.
• Detect, investigate, and prevent fraudulent transactions and abuse of the Service.
• Comply with legal obligations.

We do not use your data to train AI models, and we do not sell your personal data to any third party.

Where the General Data Protection Regulation (GDPR) or similar legislation applies, we rely on the following legal bases:

We share data only where necessary and under appropriate safeguards:

Service providers (data processors)

Other disclosures

• Legal requirements: We may disclose data if required by law, regulation, court order, or to protect the rights, property, or safety of AmzDataLens, its users, or the public.
• Business transfers: In the event of a merger, acquisition, or asset sale, your data may be transferred. We will notify you before data is subject to a different privacy policy.
• With your consent: Any other sharing will occur only with your explicit consent.

We retain personal data for as long as your account is active or as needed to provide the Service. Upon account deletion:

• Account and profile data are deleted within 30 days.
• Billing records are retained for 7 years to comply with tax and accounting obligations.
• Anonymised analytics data may be retained indefinitely as it cannot be linked to any individual.
• Backup copies are purged within 90 days of account deletion.

Depending on your jurisdiction, you may have the following rights regarding your personal data. To exercise any of these rights, contact us at privacy@amzdatalens.com. We will respond within 30 days.

We use cookies and similar tracking technologies. You can manage your cookie preferences through your browser settings or our consent banner.

We do not use third-party advertising networks or sell cookie data to advertisers.

AmzDataLens operates globally. Your data may be transferred to and processed in countries outside your country of residence, including the United States. Where such transfers occur, we ensure appropriate safeguards are in place:

• Standard Contractual Clauses (SCCs) approved by the European Commission for transfers from the EEA.
• Data Processing Agreements (DPAs) with all third-party processors.
• Adequacy decisions where the destination country has been recognised as providing an equivalent level of protection.

The Service is not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a minor, please contact us immediately at privacy@amzdatalens.com and we will take prompt action to delete it.

We implement industry-standard technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction, including:

• Encryption in transit (TLS 1.2+) and at rest (AES-256).
• Bcrypt password hashing — we never store plain-text passwords.
• Role-based access controls and least-privilege principles.
• Regular security assessments and penetration testing.
• Monitoring and alerting for anomalous access patterns.

In the event of a data breach affecting your rights and freedoms, we will notify you and the relevant supervisory authority within the legally required timeframe (72 hours under GDPR where applicable).

We may update this Privacy Policy periodically. When we do, we will revise the "Last updated" date at the top and, for material changes, notify active users by email at least 14 days before the change takes effect. Continued use of the Service after that date constitutes acceptance of the revised Policy.

For any privacy-related questions, requests, or complaints, please contact our Privacy team:

If you are located in the European Economic Area and believe your data protection rights have been violated, you have the right to lodge a complaint with your local supervisory authority.