Privacy Policy

Last updated: August 3, 2026

This Privacy Policy describes how Adwynx ("we", "us", or "our") collects, uses, and protects information when you use our Chrome extension and related backend service.

1. What we collect

We collect only what is necessary to provide the service:

• Account information — your email address and a hashed (bcrypt) password when you register.
• Amazon Ads campaign data — campaign names, bids, spend, ACoS, impressions, clicks, and related metrics that the extension reads from your advertising.amazon.com session. This data is captured only while you are actively using the extension on that page.
• Usage data — token counts to track your monthly quota and enforce plan limits. No message content is stored long-term.
• Conversation context — messages you send to the AI assistant are held in a short-term session cache (Redis) and expire automatically. They are not stored in a permanent database.

2. What we do not collect

• Your Amazon seller account credentials or passwords
• Browsing history outside of advertising.amazon.com
• Payment card details (handled entirely by Stripe — see Section 5)
• Any data from pages other than advertising.amazon.com

3. How we use your data

• To provide the service — campaign data is sent to our backend to generate AI-powered recommendations.
• To authenticate you — your email and hashed password are used for login and to associate your data with your account.
• To enforce plan limits — token usage counts are tracked to apply monthly quotas.
• To improve the service — we may review anonymized, aggregated usage patterns. We do not use your Amazon Ads data to train AI models.

4. AI processing

Your campaign data and chat messages are sent to Anthropic (anthropic.com) to generate AI responses. Anthropic's data usage policies apply to data processed through their API. We do not send your Amazon account credentials to Anthropic.

5. Payments

Subscription payments are processed by Stripe (stripe.com). We do not store or have access to your payment card details. Stripe's Privacy Policy governs payment data.

6. Data sharing

We do not sell, rent, or share your personal data with third parties for marketing purposes. Data is shared only with:

• Anthropic — for AI response generation (campaign data and chat messages)
• Stripe — for payment processing (email address and subscription status)
• Render — our cloud hosting provider, which stores the database and processes backend requests

7. Data retention

• Account data — retained while your account is active. Deleted within 30 days of account deletion on request.
• Campaign data — stored in our database and associated with your account. You can request deletion at any time.
• Session/chat data — expires automatically (typically within 24 hours) from the Redis session cache.

8. Security

We use industry-standard measures: HTTPS for all data in transit, bcrypt password hashing, JWT-based authentication with short expiry, and rate limiting on authentication endpoints. No system is perfectly secure, but we take reasonable precautions to protect your data.

9. Your rights

You may request access to, correction of, or deletion of your personal data at any time by contacting us at the email below. We will respond within 30 days.

10. Children

This service is not directed at children under 13. We do not knowingly collect data from children.

11. Changes to this policy

We may update this policy from time to time. We will notify registered users of material changes by email. Continued use of the service after changes constitutes acceptance.

12. Contact

For privacy questions or data deletion requests, email us at team@adwynx.ai.