Privacy policy — Clarobid

The short version

Clarobid is a web service. We keep your Amazon campaign data, product costs and settings in your own private account so Clarobid can work for you, and we never sell or share them. Amazon sign-ins, API keys and email passwords are stored encrypted.

1. Controller

[COMPANY NAME], org. no. [NUMBER], [ADDRESS], Sweden. Contact: [SUPPORT EMAIL].

2. What we process

Purchase data: name, email, country, company and VAT number, handled by our merchant of record [PAYMENT PROVIDER], which acts as an independent controller for payments. We receive your email, plan and subscription status. Legal basis: contract and legal obligations (bookkeeping).
Your account: name, email address, a securely hashed password, time zone, plan and trial dates. Legal basis: contract.
Your Clarobid data: Amazon Ads data (campaigns, keywords, search terms, reports), product costs, inventory imports, listings, budgets, rules, schedules and settings that you add or that Clarobid fetches from Amazon for you. Legal basis: contract.
Free PPC audit: your name, email address, and optionally phone number and store name, plus a summary of the audit (score, spend, ACoS). The report file you upload is analysed and then discarded, not stored. Legal basis: your request, and our legitimate interest in following up once about the audit; marketing emails only if you tick the box, and you can unsubscribe at any time.
Support emails: what you send us. Legal basis: contract and legitimate interest.
Usage statistics, only if you allow them: which pages of the website and the dashboard you open, which buttons lead to a trial, your screen size and the website that sent you. Stored with a random ID in your browser; no cookies, no names, no email addresses, no location. Sent through our server to PostHog. Legal basis: your consent, which you can withdraw at any time by clearing this site’s data in your browser. Without it, nothing is collected.

3. How we store and use your Clarobid data

Your data is kept in your own private account; other customers can never see it. Amazon sign-ins, API secrets and your email password are stored encrypted. Clarobid sends Amazon data only to Amazon, to your own email recipients when you send a summary, and to Anthropic when you use the AI Assistant with your own key (your question and the numbers needed to answer it, never your Amazon sign-in or keys).

4. Amazon data protection

We follow Amazon’s data protection requirements for Amazon Ads API partners. We do not sell, share or use your Amazon data for any other purpose. [Confirm against Amazon’s current Data Protection Policy before launch.]

5. Processors

Render Services, Inc. hosts the website and runs Clarobid, in Frankfurt (EU).
Supabase, Inc. provides sign-in and stores your account data and Clarobid data, in [SUPABASE REGION].
Resend, Inc. sends account emails (sign-up confirmation, password reset), from Ireland (EU).
Anthropic, only when you use the AI Assistant with your own API key.
PostHog, Inc. stores usage statistics (only with your consent), in the EU.
Functional Software, Inc. (Sentry) receives error reports so we can fix problems; email addresses and keys are removed first.

6. How long we keep data

Customer and invoice data: as long as your subscription runs and then as Swedish bookkeeping law requires (7 years). Your Clarobid data: while your account is open, and deleted within [30] days after you close it. Support emails: 2 years.

7. Your rights

You can ask for a copy of your data, correction, deletion, restriction or portability, and object to processing. Write to [SUPPORT EMAIL]. You can complain to the Swedish Authority for Privacy Protection (IMY), imy.se.