Privacy Notice for Purple Fyre.

1. Scope

This Privacy Notice applies to Purple Fyre websites, applications, dashboards, APIs, integrations, and services that support Amazon advertising management, keyword analysis, competitor ASIN monitoring, ACOS optimization, order performance analysis, and related account operations.

Purple Fyre is an independent software provider. Purple Fyre is not Amazon, is not owned by Amazon, and does not make decisions on behalf of Amazon. Amazon and Amazon Ads are trademarks of Amazon.com, Inc. or its affiliates.

2. Information We Collect

Information you provide directly

• Business contact information, such as name, company name, work email address, phone number, job role, and billing or account administration details.
• Support messages, onboarding details, configuration preferences, and any information you choose to provide when contacting us.

Information from Amazon advertising integrations

When you authorize Purple Fyre to connect to Amazon advertising accounts, we may receive or process data made available through Amazon Ads APIs, Login with Amazon authorization flows, or related Amazon developer tools, depending on the permissions you approve and the features you use.

• Authorization data, including access tokens, refresh tokens, scopes, token status, profile identifiers, advertiser identifiers, marketplace or region identifiers, and connected account metadata.
• Advertising account and campaign data, including portfolios, campaigns, ad groups, ads, bids, budgets, targeting, placements, negative targeting, and campaign configuration settings.
• Performance metrics, including impressions, clicks, cost, CPC, sales, orders, conversion rates, ROAS, ACOS, ACoAS, and other reporting metrics available through approved Amazon Ads API access.
• Keyword, search term, product targeting, and competitor ASIN data used for advertising analysis, optimization suggestions, and reporting.
• Operational logs related to synchronization status, API calls, errors, security events, account actions, and system performance.

Website and device information

• Basic technical information, such as IP address, browser type, device type, pages viewed, referring pages, and timestamps.
• Cookie or similar technology data used for site operation, session security, analytics, and preference management.

3. How We Use Information

We use information only for legitimate business and service purposes, including to:

• Provide, operate, maintain, and improve Purple Fyre products and services.
• Connect to Amazon advertising accounts only after authorization and only within the scope of permissions granted.
• Analyze advertising performance, ACOS, sales, orders, keywords, search terms, product targets, and competitor ASIN signals.
• Generate AI-assisted recommendations for budgets, bids, keyword expansion, negative keywords, campaign structure, and performance monitoring.
• Display dashboards, reports, alerts, audit history, and workflow records for authorized users.
• Provide customer support, troubleshoot errors, maintain security, prevent misuse, and comply with legal or contractual obligations.
• Develop aggregated or de-identified insights that do not identify a specific customer, advertiser, seller account, or individual.

We do not sell Amazon Ads data, authorization tokens, customer account data, or personal information. We do not use Amazon Ads API data to create unrelated advertising audiences, to target consumers outside the Purple Fyre service, or for purposes unrelated to providing and improving the customer-authorized service.

4. How We Share Information

We may share information only in the following limited circumstances:

• With authorized users in your organization according to your account permissions.
• With service providers that help us host, secure, operate, analyze, or support the service, subject to confidentiality and data protection obligations.
• With Amazon or Amazon affiliates when required for API operation, developer review, security, compliance, or issue resolution.
• When required by law, legal process, regulatory request, or to protect the rights, safety, security, and integrity of Purple Fyre, our customers, or others.
• In connection with a business transaction such as a merger, acquisition, financing, reorganization, or sale of assets, provided appropriate data protection measures remain in place.

We do not share Amazon Ads API data with third parties for their independent marketing or advertising purposes.

5. Amazon Ads API Data and Authorization

Purple Fyre accesses Amazon advertising data only after an authorized customer connects an account and grants required permissions. Amazon authorization may involve access tokens, refresh tokens, scopes, and redirect-based approval flows.

• We request only the permissions reasonably needed to provide the service features selected by the customer.
• We store authorization credentials securely and restrict access to personnel and systems with a business need.
• We use Amazon Ads API data only to provide, maintain, secure, troubleshoot, and improve Purple Fyre services for the authorized customer.
• We do not attempt to access Amazon data after authorization is revoked, the integration is disconnected, or account access is terminated, except as necessary for deletion, legal compliance, or security logging.

Customers may revoke access through their Amazon account authorization controls where available or by contacting us at hello@purplefyre.com.

6. Retention and Deletion

We retain information only for as long as needed to provide the service, maintain business records, support security, comply with legal obligations, resolve disputes, and enforce agreements. Retention periods may vary by data type and customer configuration.

• Connected account authorization tokens are retained while the integration remains active and are deleted or disabled after disconnection, revocation, or account termination unless retention is required for security or legal reasons.
• Amazon Ads API reporting and operational data is retained while your account is active and for a limited period afterward to support reporting, backups, audit logs, dispute resolution, and service continuity.
• Upon verified request, we will delete or de-identify customer-controlled data within a commercially reasonable period, generally within 30 days, unless a longer period is required by law, security, fraud prevention, dispute resolution, or contractual obligations.
• Backup copies may remain for a limited period before automatic rotation or deletion, but are isolated from active use.

7. Security Measures

We use administrative, technical, and organizational safeguards designed to protect information from unauthorized access, loss, misuse, alteration, or disclosure.

• Encryption in transit using HTTPS/TLS and encryption or equivalent protection for sensitive stored credentials.
• Role-based access controls, least-privilege access, authentication controls, and access review processes.
• Logging, monitoring, error tracking, and security event review for systems that process customer data.
• Vendor review and contractual restrictions for service providers that process data on our behalf.
• Internal policies intended to limit personnel access to customer and Amazon Ads data to authorized business purposes.

No system can be guaranteed completely secure. If we identify a security incident that affects customer data, we will take appropriate steps to investigate, contain, remediate, and notify affected parties as required.

8. Your Choices and Rights

Depending on your location and relationship with Purple Fyre, you may have rights to request access, correction, deletion, portability, restriction, objection, or withdrawal of consent regarding certain personal information.

• You may request access to or deletion of your Purple Fyre account information by contacting us.
• You may ask us to disconnect an Amazon advertising integration and delete associated authorization credentials.
• You may control Amazon authorization through Amazon account or developer authorization settings where available.
• You may opt out of non-essential marketing emails by using the unsubscribe instructions in those messages or by contacting us.

We may need to verify your identity or authority before fulfilling a request. If your account is managed by an organization, we may direct certain requests to that organization’s administrator.

9. International Data Transfers

Purple Fyre is based in the United States. Information may be processed in the United States or other locations where we or our service providers operate. When required, we use appropriate safeguards for cross-border transfers.

10. Children

Purple Fyre services are intended for business users and are not directed to children. We do not knowingly collect personal information from children.

11. Changes to This Notice

We may update this Privacy Notice from time to time. If we make material changes, we will update the effective date and provide additional notice where required.

12. Contact Us

For privacy, security, Amazon Ads API data, or account access questions, contact Purple Fyre: