Privacy Policy

Ignitabull provides Amazon Ads management, Amazon growth strategy, and a secure client workspace for connected reporting and service delivery. This policy explains what information we collect, why we use it, how we protect it, when we share it, and how you can request access or deletion.

Information we collect

• Account and contact information: Name, business email, organization, seller name, marketplace, role, and authentication records needed to create and secure your workspace.
• Amazon Selling Partner data: Seller and marketplace identifiers, marketplace participation, listings, prices, fulfillment, FBA inventory, non-PII order and operational facts, reports, and Finance transaction records permitted by the roles you authorize.
• Amazon Advertising data: Advertiser profiles, campaign and search-term reports, spend, sales, bids, budgets, targeting, and related performance facts permitted by your separate Advertising authorization.
• Business inputs: Seller-provided landed costs, annotations, reports, goals, approval decisions, and other information you choose to add for analysis or service delivery.
• Billing and communications: Stripe customer, subscription, invoice, and checkout references; onboarding notes; support messages; and reviewed communication drafts.
• Technical and security records: Session, connection, sync, error, audit, device, and usage records needed to secure, operate, and troubleshoot the service.

Ignitabull does not ask for or store your Amazon password. The client workspace's core SP-API integration does not request Restricted Data Tokens and is designed not to retain restricted buyer names, addresses, telephone numbers, email addresses, or payment-card data.

How we use information

• Provide, secure, maintain, and support the Ignitabull client workspace and the service you select.
• Connect seller-authorized Amazon accounts, import permitted reports and API records, and display marketplace, inventory, order, advertising, finance, and profitability evidence.
• Prepare reports, recommendations, reconciliations, exception queues, and client updates without inventing missing source data.
• Process billing, communicate about the service, prevent fraud or misuse, troubleshoot failures, and meet contractual or legal obligations.
• Improve reliability and user experience using aggregated or de-identified operational information.

We do not sell seller data or personal information, use Amazon data for unrelated advertising, or share it except as described below and as permitted by Amazon's agreements and applicable law.

Amazon authorization and control

Amazon Selling Partner API and Amazon Advertising access use separate OAuth consent flows. Connecting one does not grant the other, and purchasing a service grants neither. Access is limited to the connected organization and the roles and marketplaces authorized by the seller. The current Ignitabull client-workspace SP-API path is read-only and does not perform Amazon writes.

You can revoke an Amazon authorization from the applicable Amazon permission surface. Revocation stops new collection through that connection; it does not automatically erase records we must retain for security, contractual, or legal purposes. You may separately request deletion as described below.

Service providers and disclosure

We disclose only the information needed for providers to perform services for Ignitabull. Current categories include Cloudflare for hosting, application runtime, database, private report storage, security, and delivery; Amazon for authorized API access; Stripe for checkout and billing; and Composio and Google only for separately authorized, reviewed Gmail draft workflows. The Ignitabull client workspace does not automatically send Gmail messages.

We may also disclose information to professional advisers, regulators, law enforcement, or another party when required by law, necessary to protect rights and security, or involved in a business transaction subject to appropriate confidentiality safeguards. Data may be processed in Canada, the United States, or other locations where these providers operate.

Storage, security, and isolation

Data is transmitted over HTTPS. Amazon OAuth credentials are encrypted at rest with server-only key material and are not exposed to browser code. OAuth state is organization-bound, provider-bound, single-use, and time-limited. Application records, connections, reports, and permissions are scoped to the authorized organization. Access is role-based, security events are logged, and raw Amazon report download URLs are not retained.

No system can guarantee absolute security. We review access boundaries and incident evidence and will provide required notifications if a qualifying breach occurs.

Retention and deletion

We retain connected data and service records while the workspace or engagement is active and ordinarily for up to 90 days after cancellation to support handoff, dispute resolution, and recent decision history. Short-lived authorization state expires in minutes. Some billing, audit, fraud-prevention, backup, contractual, or legal records may be retained longer where reasonably necessary or required by law.

You may request access, correction, export, or deletion. After verifying the requester and organization, we will delete or de-identify eligible active records and instruct applicable processors as required. Deletion may be limited where retention is legally required, needed to establish or defend legal claims, or technically pending within secured backup rotation.

Your choices

• Do not connect an Amazon account unless you want the authorized data used for the agreed Ignitabull service and client workspace.
• Revoke Amazon access from the applicable Amazon console and contact us to close the workspace or request deletion.
• Request a copy, correction, export, or deletion of eligible information through the Ignitabull contact form.

Children

Ignitabull's client workspace and business services are not directed to children, and we do not knowingly collect children's personal information through them.

Policy changes

We may update this policy when the product, providers, or legal requirements change. We will post the revised date here and provide additional notice when a material change requires it.

Contact

For privacy questions or requests, use the secure contact form at ignitabull.com. Identify the organization and request type, but do not send passwords, API keys, access tokens, or Amazon secrets.

Last updated: July 17, 2026

Back to Ignitabull