Privacy Policy
AdSwarm Tools, Inc. (“AdSwarm,” “we,” “us,” or “our”) provides software that helps businesses analyze and optimize their advertising and selling performance on Amazon and Walmart. This Privacy Policy describes how we collect, use, share, and protect personal information when you use our website and platform (collectively, the “Service”).
This policy applies only to information we collect through the Service. It does not apply to information you provide to Amazon, Walmart, or any third party directly.
1. Who this policy is for
The Service is intended for use by businesses based in the United States. We do not knowingly direct the Service to residents of the European Economic Area, the United Kingdom, or Switzerland. We do not knowingly collect personal information from children under 16.
2. Information we collect
Information you provide
- Account information: name, business email, password (stored as a one-way hash), workspace name, and role.
- Connection credentials: OAuth refresh tokens you grant us when you connect your Amazon Advertising, Amazon Selling Partner, Walmart Advertising, or Walmart Marketplace accounts. Tokens are encrypted at rest.
- Communications: messages you send us via email or support.
Information we collect automatically
- Log data: IP address, browser type and version, operating system, referring URL, and timestamps of requests to the Service.
- Usage data: pages viewed, features used, actions taken inside the Service.
- Cookies and similar technologies: see Section 7.
Information from third parties
When you connect an Amazon or Walmart account, we receive data from those platforms on your behalf, including campaign performance, keyword/ASIN/SKU performance, inventory, sales, settlements, returns, and reimbursements. This data is about your business and your products, not consumer personal information.
We do not store buyer names, shipping addresses, or other buyer-level personal information except in transient form required to operate the Service. Where buyer-level data passes through our systems (for example, return processing), we scrub identifying fields in accordance with Amazon’s Data Protection Policy.
3. How we use information
We use information to:
- Provide, operate, and maintain the Service.
- Authenticate you and keep your account secure.
- Communicate with you about your account, the Service, and product updates.
- Detect and prevent fraud, abuse, and security incidents.
- Comply with legal obligations.
- Improve and develop new features.
4. How we share information
We do not sell or share your personal information for cross-context behavioral advertising, and we do not use it for targeted advertising.
We share information only with:
- Service providers (data hosting, transactional email, customer-support tooling) acting on our behalf under written contract.
- Amazon and Walmart APIs, when you instruct us to perform an action on your account (for example, updating a campaign bid).
- Legal and safety: when required by law, subpoena, or to protect rights, property, or safety.
- Business transfers: in the event of a merger, acquisition, or asset sale, subject to this policy.
5. Your choices and rights
Depending on where you live, you may have rights to:
- Know what personal information we collect and how we use it.
- Access a copy of your personal information.
- Correct inaccurate personal information.
- Delete your personal information (subject to legal-retention exceptions).
- Opt out of the sale or sharing of personal information (we do not sell or share, but you may still exercise this right).
- Limit the use of sensitive personal information (California).
- Be free from retaliation for exercising any of these rights.
To exercise these rights, email us at [email protected]. We will verify your identity before acting on a request. We respond within the timeframes required by applicable law (typically 45 days, extendable once by 45 days).
You may also designate an authorized agent to submit a request on your behalf.
Global Privacy Control
We honor the Global Privacy Control (“GPC”) signal as an opt-out of sale/sharing where applicable. Because we do not sell or share personal information, GPC signals do not trigger any change to our processing.
6. Data retention
We retain personal information for as long as your account is active and for a reasonable period afterward to comply with our legal obligations, resolve disputes, and enforce our agreements. Account data is deleted within 90 days of account closure unless we are required to retain it longer.
7. Cookies and similar technologies
We use a small number of first-party cookies, all of which are strictly necessary or functional — including one that counts unique visitors and groups page views into sessions so we can understand how the Service is used in aggregate. We do not use advertising or third-party tracking cookies, and we do not share usage data with any third party.
| Cookie | Purpose | Lifetime |
|---|---|---|
session_token | Keeps you signed in. | 30 days |
ph_<project>_posthog | Product analytics via our self-hosted PostHog instance — identifies returning visitors and groups page views into sessions. Set only when analytics is enabled. First-party. | 1 year |
adswarm_platform | Remembers which platform (Amazon / Walmart) you last used. | 1 year |
adswarm_language | Remembers your preferred language. | 1 year |
We also store a theme preference (adswarm_theme) in browser local storage. No information in local storage is sent to our servers automatically.
You can disable cookies through your browser settings, but the Service will not function without session_token.
8. Security
We protect personal information with industry-standard safeguards, including encryption in transit (TLS), encryption at rest for tokens and credentials, role-based access controls, audit logging, and the principle of least privilege. No system is perfectly secure; if a breach occurs, we will notify affected users as required by law.
9. International users
The Service is hosted in the United States. If you access the Service from outside the United States, you understand that your information is processed in the United States, which may have different data-protection laws than your jurisdiction.
10. Changes to this policy
We may update this policy from time to time. If we make material changes, we will notify you by email or by posting a prominent notice in the Service before the change takes effect. The “Last Updated” date at the top reflects the most recent revision.
11. Contact us
AdSwarm Tools, Inc.
Email: [email protected]
For California residents: you may also designate an authorized agent to submit requests, and you have the right to non-discrimination for exercising your rights.