Privacy Policy

This policy explains what personal data AcosZero collects, why, and what you can do about it. AcosZero is a software service for managing Amazon advertising, operated by Teconia Montenegro d.o.o. (“we”, “us”). For anything about your data, write to [email protected].

1. What we collect

• Account data — name, email address, password (stored only as a salted hash), language, role and the workspaces you belong to. If you use two-factor authentication, its secret and recovery codes are stored encrypted or hashed. If you sign in with Google, we receive your name and email address from Google.
• Amazon Advertising data — after you authorize access through Amazon, we retrieve your advertising profiles, campaigns, ad groups, keywords, targets, search terms and their performance metrics through the official Amazon Ads API.
• Amazon Seller Central data — if you also authorize the Selling Partner API, we retrieve listings, prices, inventory, aggregated sales and traffic figures, Buy Box information, competitor product details and Brand Analytics search data. We do not request or store personal information about Amazon buyers (such as names or addresses).
• Billing data — payments are handled by Stripe. We keep the Stripe customer reference, your plan and subscription status, and the card brand and last four digits; we never see or store full card numbers.
• Usage and technical data — IP address, browser type, sign-in times and the actions you take in AcosZero (for example which changes were approved or applied), kept for security, support and the audit trail.
• Support messages — what you send us through the support form or by email.

2. Why we use it

• to provide the service: syncing and analyzing your Amazon data, showing reports and suggestions, and applying the changes you or your team approve (performance of our contract with you);
• to run optional AI features: when someone in your workspace asks for an AI analysis, we send the relevant campaign and product figures — not account passwords or Amazon buyer data — to the AI provider your workspace has selected (legitimate interest and your instruction);
• to bill subscriptions and prevent fraud (contract, legal obligation);
• to keep accounts secure — two-factor authentication, sign-in limits, logs (legitimate interest);
• to answer support requests and send service emails such as invitations and password resets (contract, legitimate interest).

We do not sell personal data, and we do not use your data or your Amazon data to advertise to you or for anyone else’s purposes.

3. Who processes it for us

We use these service providers, each bound by a data processing agreement:

• OVHcloud — servers and database hosting in the European Union;
• Stripe — payments and invoices;
• Mailgun — delivery of service emails;
• Google — “Sign in with Google”, only if you choose it;
• Anthropic, OpenAI or Google — AI analysis, only the provider your workspace selects and only when the feature is used;
• jsDelivr — delivery of icon fonts to your browser.

Amazon is the source of your Amazon data; its own privacy notice applies to your Amazon accounts. Some providers may process data outside the European Economic Area; in that case the transfer is covered by the European Commission’s standard contractual clauses or an adequacy decision.

4. How long we keep it

• Account and workspace data for as long as the account exists, and deleted within 30 days after it is closed.
• Amazon data while your authorization is active; it is deleted within 30 days after you revoke access, remove the Amazon account or close the workspace, as Amazon’s Data Protection Policy requires.
• Server logs for 14 days; billing records for as long as tax law requires.

5. How we protect it

All traffic is encrypted with TLS. Amazon and other access tokens are encrypted at rest, every user signs in with a second factor, access inside a workspace follows roles, and changes to your Amazon accounts are logged. Access to our servers and database is restricted to authorized personnel.

6. Cookies

AcosZero uses only cookies needed to run the service: a session cookie, a security (CSRF) cookie and, if you tick “Remember me”, a sign-in cookie. We do not use advertising or analytics cookies.

7. Your rights

You can ask us to access, correct, export or delete your personal data, to restrict or object to its use, and you can withdraw a consent at any time. Write to [email protected]; we answer within 30 days. You can also complain to your data protection authority. You can revoke AcosZero’s access to your Amazon accounts at any time in Amazon Seller Central or the Amazon Ads console, or ask us to disconnect them.

If your agency manages your Amazon accounts through AcosZero, the agency decides how your data is used and we process it on its behalf; please contact the agency first.

8. Children

AcosZero is a business service and is not meant for anyone under 16.

9. Changes

If we change this policy, we will update the date above and, for significant changes, tell account owners by email before the change takes effect.