Privacy Policy

1. Introduction

Adstore AI ("Adstore", "we", "us", or "our") is a service operated by Fanverde S.A. de C.V., a company incorporated in Mexico, together with its affiliate Adstore IA Ltda., incorporated in Brazil (collectively, "Adstore"). We operate the website adstore.ai and provide a software service that automates the creation and optimization of Amazon advertising campaigns (Sponsored Products, Sponsored Brands, and Sponsored Display) for sellers and vendors on Amazon ("the Service").

This Privacy Policy explains what information we collect, how we use it, how we protect it, and the rights you have regarding your information. By using the Service, you agree to the practices described in this policy.

2. Information We Collect

We collect the following categories of information:

Account information. When you create an account, we collect your name, email address, and authentication credentials managed through Amazon Cognito.

Amazon account data. When you connect your Amazon Seller or Vendor account through Login with Amazon and authorize access to the Amazon Selling Partner API and Amazon Advertising API, we access and process data necessary to provide the Service, including: product catalog and listing data, inventory data, sales and financial metrics, advertising campaign structures, keywords, and advertising performance reports.

Usage data. We collect technical information about how you interact with the Service, such as log data, device information, and event activity, to operate, secure, and improve the Service.

3. How We Use Your Information

We use the information we collect solely to provide and improve the Service, including to:

• Authenticate you and manage your account.
• Connect to your authorized Amazon Seller/Vendor account and retrieve the data needed to analyze, create, and optimize advertising campaigns.
• Generate diagnostics, budget recommendations, and campaign optimizations.
• Provide natural-language explanations of recommendations.
• Communicate with you about your account, including transactional notifications.
• Monitor, secure, and improve the performance and reliability of the Service.

We do not use Amazon data for any purpose other than providing the Service to you.

4. How We Share Your Information

We do not sell your information, and we do not share Amazon data with third parties for their own purposes.

Data flows exclusively between Amazon, Adstore AI's infrastructure (hosted on Amazon Web Services), and you, the account owner. We do not share your Amazon Selling Partner or Advertising data with any external third party.

We use trusted infrastructure subprocessors strictly to operate the Service (for example, Amazon Web Services for hosting, computing, and storage; and Vercel for the web frontend). These providers process data only to deliver the Service on our behalf and under contractual confidentiality obligations. They do not receive Amazon data for their own use.

We may use a large language model provider (Anthropic) to generate natural-language explanations on demand; only the minimum data necessary to produce an explanation is sent, and it is not used to train third-party models.

We may disclose information if required by law, regulation, legal process, or to protect the rights, safety, and security of our users or the Service.

5. Data Security

We implement industry-standard security measures to protect your information, including:

• Encryption in transit (HTTPS/TLS) across all environments, without exception.
• Encryption at rest for stored data.
• Storage of Amazon credentials and tokens in AWS Secrets Manager, never hardcoded.
• Access to Amazon Advertising data restricted to a private network (VPC), with API Gateway as the sole public entry point.
• Least-privilege access controls, with strict separation between read and write permissions.
• Multi-factor authentication for administrator accounts and strong password requirements.
• Continuous monitoring for anomalous access and critical errors.

In the event of a security incident involving Amazon data, we will notify Amazon and affected parties in accordance with applicable requirements and timelines.

6. Data Retention

We retain your information only for as long as necessary to provide the Service and to comply with our legal obligations. When you close your account or disconnect your Amazon account, we delete or de-identify the associated Amazon data within a commercially reasonable period, except where retention is required by law.

7. Your Rights

Depending on your jurisdiction (including Mexico's LFPDPPP, Brazil's LGPD, and applicable U.S. laws), you may have the right to access, correct, delete, or restrict the processing of your personal information, and to withdraw consent. You may revoke Adstore AI's access to your Amazon account at any time through your Amazon account settings or by contacting us.

To exercise any of these rights, contact us at ro@adstore.ai

8. International Data Transfers

The Service operates on infrastructure that may process data in regions outside your country of residence. Where required, we implement appropriate safeguards for international data transfers.

9. Children's Privacy

The Service is intended for businesses and is not directed to individuals under the age of 18. We do not knowingly collect personal information from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated version on this page and revise the "Last updated" date above. Material changes will be communicated through the Service or by email.

11. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at:

Email: ro@adstore.ai

Mexico
Fanverde, S.A. de C.V.
Calle 21 7622, Conkal, Yucatán, 97345.

Brazil
Adstore IA Ltda.
R. Dr. Tomás Carvalhal, 198, 1403 - Paraíso, São Paulo - SP, 04006-000