This Privacy Policy explains how [LEGAL ENTITY NAME] ("Elevate Analytics," "we," "us," or "our") collects, uses, stores, protects, shares, and deletes information when you use the Elevate Analytics platform and the marketing site at flightdeck.elevate33.com (collectively, the "Service"). It applies to information about our users and to data we process on our customers' behalf, including data obtained from the Amazon Selling Partner API ("SP-API").
1. Information We Collect
1.1 Information you provide
- Account data — name, business name, email address, and password when you register.
- Billing data — plan tier and payment details, processed by our payment provider (we do not store full card numbers).
- Support communications — messages you send us by email or through the app.
1.2 Amazon Selling Partner data
When you connect your Amazon account, we access only the data scopes you authorize through Amazon's consent flow. This may include:
- Product catalog and ASIN-level data (pricing, sales rank, inventory, reviews).
- Order, sales, and advertising performance metrics used to build your reports.
- Limited Personally Identifiable Information ("PII") associated with orders, only where required for an authorized feature.
1.3 Information collected automatically
- Log and usage data (IP address, browser type, pages viewed, timestamps).
- Authentication cookies required to keep you signed in.
2. How We Use Information
- To provide, operate, and maintain the analytics dashboard, reports, alerts, and notifications.
- To ingest, normalize, and aggregate marketplace data into the reports you configure.
- To authenticate you, secure your account, and prevent fraud or abuse.
- To provide customer support and respond to your requests.
- To comply with legal obligations and enforce our Terms of Service.
We do not use Amazon Information for any purpose other than delivering the features you have authorized. We do not use it to advertise, market, or train models for unrelated purposes.
3. How We Store and Protect Information
- Encryption in transit. All data is transmitted over TLS (HTTPS).
- Encryption at rest. Stored data, including Amazon Information and credentials, is encrypted at rest using industry-standard encryption (AES-256).
- Access controls. Access to production data is restricted to authorized personnel on a least-privilege basis and is logged.
- Credential isolation. API keys and tokens are stored encrypted and are never exposed in client-side code or logs.
- Retention. We retain Amazon Information only as long as needed to provide the Service. Personally Identifiable Information derived from SP-API is retained for no longer than 30 days after order delivery unless a longer period is required by law, and is then deleted.
4. How We Share Information
We do not sell your personal information or Amazon Information. We share information only with:
- Sub-processors who host or support the Service under contractual data-protection obligations (see Section 5).
- Delivery integrations you configure — for example, Slack or a webhook endpoint — only to deliver the alerts you set up.
- Legal authorities when required by law, subpoena, or to protect rights and safety.
5. Sub-Processors
We use the following sub-processors to operate the Service. Each is bound by confidentiality and data-protection terms.
| Sub-processor | Purpose | Region |
|---|---|---|
| Amazon Web Services (AWS) | Cloud hosting, compute, and encrypted data storage | United States |
| Payment processor | Subscription billing | United States |
Amazon Information stored in AWS is encrypted at rest and access-controlled. We will update this list before engaging a new sub-processor that handles Amazon Information.
6. Data Retention and Deletion
You may request deletion of your data, including Amazon Information processed on your behalf, at any time. Upon a verified request, or upon termination of your account or revocation of Amazon authorization, we delete or anonymize the relevant data within 90 days, except where retention is required by law.
7. Your Rights
Depending on your jurisdiction, you may have the right to access, correct, port, restrict, or delete your personal information, and to withdraw consent. We honor verified requests as described above. Sellers may revoke our SP-API access at any time from within their Amazon Seller Central account.
8. International Transfers
The Service is operated from the United States. If you access it from outside the U.S., your information may be transferred to and processed in the U.S. under appropriate safeguards.
9. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be posted on this page with an updated "Last updated" date.