Privacy Policy

1. Information We Collect

In Short: We collect personal information that you provide to us, information from your Amazon accounts (via APIs), and some data automatically when you use our Service.

Information You Provide. We collect personal information you voluntarily provide when registering for or using the Service, contacting us, or otherwise interacting with 1stPage. This may include:

• Contact Details: Your name, email address, company/brand name, and other contact information.
• Account Credentials: Amazon account identifiers and authentication information (such as Amazon SP-API keys or tokens, Amazon Seller ID, or other credentials) that you provide to enable us to access Amazon data on your behalf. We do not ask for or collect your Amazon account password; any authentication is done via secure API tokens.
• Payment Information: If you subscribe to a paid plan, you may provide billing information. We use a PCI-compliant third-party payment processor to handle payments, so we generally do not store your full payment card details on our systems.
• Communications: If you contact us (e.g. for support), we collect the information you choose to give us, such as your inquiry details or feedback.

All personal information that you provide must be true, complete, and up-to-date, and you should notify us of any changes.

Information from Amazon Services. With your authorization, our Service connects to Amazon’s APIs (including Brand Analytics and Advertising API) to retrieve data related to your Amazon seller account and brand. This data may include analytics and performance metrics for your products — search query volumes, impressions, clicks, add-to-cart data, sales data, advertising spend and results — and other information available via Amazon Brand Analytics and Advertising reports. While this Amazon-derived data is generally business performance data and not personal data about you or your customers, it may sometimes include or be linked to personal identifiers. We handle all data from Amazon in accordance with this Policy and Amazon’s data protection requirements.

Information Collected Automatically. When you use our website or Service, we may automatically collect certain technical information about your device and usage of our platform:

• Usage and Log Data: Details of your visits and use of the Service, including log files, pages or screens viewed, actions taken, and the dates and times of access.
• Device and Network Information: IP address, browser type, device type, operating system, internet service provider, and similar technical data, collected to maintain the security and proper functioning of the Service and for internal analytics.

We may use cookies or similar tracking technologies to remember your login session and preferences, and to gather analytic information about how users navigate our site. We do not knowingly collect sensitive personal data such as social security numbers, government ID numbers, financial account passwords, precise geolocation, or biometric identifiers, except as necessary for authentication or payment processing as described above.

2. How We Use Your Information

In Short: We use personal information to provide and improve our Service, process payments, communicate with you, ensure security, and comply with law. We rely on specific legal bases to process personal data under GDPR.

• To Provide the Service: To create and manage your account, authenticate you when you log in, retrieve Amazon data on your behalf, and display personalized analytics and reports. We also use your contact and payment information to process your subscription and provide customer support.
• To Communicate with You: Administrative or account-related communications, such as notices about billing, account security, product updates, or changes to terms and policies, and responses to your inquiries. We will only send marketing emails if you have opted in, and you can opt out at any time.
• Analytics and Improvements: We may analyze usage trends and performance of our Service in aggregated or de-identified form to understand how users interact with our platform and to improve it.
• Security and Fraud Prevention: Information such as IP addresses or log-ins may be used to monitor for suspicious or fraudulent activity and to detect, prevent, and address technical issues or unauthorized access.
• Legal Compliance: We may process personal data as necessary to comply with legal obligations, such as financial record-keeping for tax and accounting purposes or responding to lawful requests by public authorities.

Legal Bases for Processing (GDPR). If you are located in the European Economic Area or United Kingdom, we only process your personal information when we have a valid legal basis: performance of a contract; legitimate interests, provided those interests are not overridden by your data-protection rights; consent, which you may withdraw at any time; legal obligation; and, though unlikely, vital interests.

3. How We Share or Disclose Information

In Short: We do not sell your personal information. We only share it in limited situations, such as with trusted service providers to operate our Service, if required by law, or as part of a business transfer.

• Service Providers: Hosting providers (for example, Amazon Web Services for data storage and cloud infrastructure), database services, email service providers, payment processors, and analytics tools. These third parties process personal information on our behalf as data processors and are contractually obligated to handle data securely and only according to our instructions and applicable law.
• Business Transfers: In a merger, acquisition, sale of assets, financing, or transfer of all or a portion of our business, personal information may be transferred to the successor entity, which must handle it consistently with this Policy.
• Legal Requirements and Protection of Rights: Where we have a good-faith belief that disclosure is necessary to comply with a legal obligation or request, enforce our Terms, address fraud, security, or technical issues, or protect our rights, property, and safety or those of our users or the public.
• With Your Consent: We will share your personal information for purposes not covered above only if you specifically consent.

When our Service accesses your data from Amazon via SP-API, that data transfer is between our application and Amazon on your behalf. We do not disclose your Amazon-provided data to any third party other than as necessary to host it on our systems or as directed by you, and we do not allow our service providers to use it for their own purposes.

4. Data Retention

In Short: We keep your personal data only as long as needed for the purposes described, and as required by law. When it is no longer needed, we will delete or anonymize it.

We retain your personal information for as long as you maintain an account with us or as long as is necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. If you cancel your account or your subscription lapses, we will delete or anonymize your personal data upon your request, or after a defined period following the end of our relationship — for example, we may retain data for a short period in case you reactivate, or as needed for backup, audit, and legal purposes.

In determining retention periods, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure, the purposes of processing, and whether those purposes can be achieved by other means. Where we have no ongoing legitimate business need or legal requirement to process your personal information, we will either permanently delete it or render it anonymized. If immediate deletion is not feasible — for example, because the data is stored in secure backups — we will isolate and protect the data and then delete it as soon as possible.

5. Data Security

In Short: We use technical and organizational measures to secure your data. However, no system is 100% secure, so we cannot guarantee absolute security of information.

Our measures include encryption of sensitive data at rest and in transit (for example, we encrypt your Amazon API tokens and passwords in our database), secure protocols (HTTPS) for data transmission, access controls restricting who within our organization can access personal data, and regular monitoring for vulnerabilities. We also maintain policies and procedures to handle any suspected data breaches, including notifying you and/or authorities as required by law.

Despite our efforts, no method of electronic transmission or storage is completely secure. We cannot guarantee that unauthorized parties will never be able to defeat our security measures and access or misuse your data. We encourage you to use strong passwords, protect your login credentials, and use our Service in a secure environment. If we become aware of a data breach affecting your personal information, we will notify you and relevant regulators as legally required.

6. Children’s Privacy

In Short: Our Service is not intended for individuals under 18, and we do not knowingly collect data from minors.

1stPage’s Service is designed for business use by adult professionals. We do not knowingly solicit or collect personal information from children under 18 years of age. By using the Service, you represent that you are at least 18 years old, or the age of majority in your jurisdiction. If we learn that we have inadvertently collected personal information from someone under 18 without appropriate consent, we will take steps to delete that information promptly. If you believe we might have any information from or about a minor under 18, please contact us at privacy@1stpage.com.

7. Your Privacy Rights

In Short: Depending on your location, you have certain rights regarding your personal data. Users in the EEA/UK can exercise GDPR rights; California residents have CCPA rights. We provide channels for you to exercise these rights.

Rights for EEA, UK, and other regions

• Right of Access: Confirmation of whether we are processing your personal information, and a copy of the data we hold about you.
• Right of Rectification: Correction or updating of inaccurate or incomplete personal data.
• Right to Erasure: Deletion of your personal information, unless an exemption applies.
• Right to Restrict Processing: Limits on processing in certain circumstances, such as while a dispute about accuracy is resolved.
• Right to Data Portability: Receipt of your data in a structured, commonly used, machine-readable format, and transmission to another controller where technically feasible.
• Right to Object: Objection to processing in certain situations, including at any time to processing for direct marketing purposes.
• Right to Withdraw Consent: Withdrawal of consent at any time, without affecting the lawfulness of processing before withdrawal.

To exercise any of these rights, contact us at privacy@1stpage.com. We may need to verify your identity before fulfilling certain requests, and we will respond within the timeframes required by applicable law. If you are in the EEA or UK, you also have the right to lodge a complaint with your country’s data protection supervisory authority — though we would appreciate the chance to address your concerns directly first.

California privacy rights (CCPA)

• Right to Know: Request disclosure of what personal information we collect, use, disclose, and sell (if applicable) about you, up to twice in a 12-month period, free of charge.
• Right to Delete: Request deletion of personal information we collected from you, subject to certain exceptions.
• Right to Opt-Out of Sale/Sharing: 1stPage does not sell personal information to third parties, and we do not share personal information for cross-context behavioral advertising in a manner that would be considered a sale or share under CCPA.
• Right to Correct: Request correction of inaccurate personal information we maintain about you.
• Right to Limit Use of Sensitive Personal Information: We do not collect or use sensitive personal information beyond what is necessary to provide the Service, so this right is not applicable to our current practices.
• Right to Non-Discrimination: We will not deny you our Service, charge a different price, or provide a different level or quality of service because you exercised your CCPA rights.

Categories collected and disclosed. In the past 12 months we have collected identifiers (name, email address, IP address, account identifiers), customer records information (contact and payment details), commercial information (subscription plan, billing history, usage details), and internet or network activity (log and usage data). We have disclosed some of these categories to service providers such as cloud hosting and payment processors for business purposes. We have not sold any personal information in the preceding 12 months, and we do not sell personal information.

To exercise your California rights, email privacy@1stpage.com with the subject line “CCPA Request” and details of your request. We will verify your identity or your agent’s authority before processing, and will respond within 45 days as required by CCPA, or notify you if we need an extension.

8. Do-Not-Track Signals

Some browsers or devices include a “Do Not Track” (DNT) feature. At this time we do not respond to DNT signals or similar mechanisms, because there is no consistent industry standard for compliance. We treat all users’ data in accordance with this Privacy Policy and will continue to monitor developments around DNT technology.

9. International Data Transfers

1stPage LLC operates in the United States. If you access the Service from outside the U.S., your personal information will likely be transferred to and processed in the United States, stored on servers located in the U.S., and may be accessible by our staff and service providers there.

To ensure your personal information is protected when transferred internationally, we rely on appropriate safeguards as required by GDPR and other laws — in particular, for personal data originating from the EEA or UK, the European Commission’s Standard Contractual Clauses, alongside our security measures and operational policies. We may also rely on the transfer being necessary for the performance of our contract with you. For more information about our international data transfer practices, contact privacy@1stpage.com.

10. Updates to This Privacy Policy

We may update or revise this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or for other operational reasons. If we make material changes, we will notify you by email or by prominently posting a notice on our website or within the Service before the change becomes effective. The “Last Updated” date at the top of this Policy indicates when the latest changes were made. Your continued use of the Service after any updates become effective constitutes your acceptance of the changes.

11. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, contact us by email at privacy@1stpage.com or in writing at: 1stPage LLC – Privacy Office, 12175 Visionary Way, Fishers, IN 46038.