Privacy policy — Clarobid

The short version

Clarobid is a web service. We keep your Amazon campaign data, product costs and settings in your own private account so Clarobid can work for you, and we never sell or share them. Amazon sign-ins, API keys and email passwords are stored encrypted.

1. Controller

[COMPANY NAME], org. no. [NUMBER], [ADDRESS], Sweden. Contact: [SUPPORT EMAIL].

2. What we process

Purchase data: name, email, country, company and VAT number, handled by our merchant of record [PAYMENT PROVIDER], which acts as an independent controller for payments. We receive your email, plan and subscription status. Legal basis: contract and legal obligations (bookkeeping).
Your account: name, email address, a securely hashed password, time zone, plan and trial dates. Legal basis: contract.
Your Clarobid data: Amazon Ads data (campaigns, keywords, search terms, reports), product costs, inventory imports, listings, budgets, rules, schedules and settings that you add or that Clarobid fetches from Amazon for you. Legal basis: contract.
Support emails: what you send us. Legal basis: contract and legitimate interest.
Website: this site uses no tracking cookies and no analytics. [If you add analytics, describe it here.]

3. How we store and use your Clarobid data

Your data is kept in your own private account; other customers can never see it. Amazon sign-ins, API secrets and your email password are stored encrypted. Clarobid sends Amazon data only to Amazon, to your own email recipients when you send a summary, and to Anthropic when you use the AI Assistant with your own key (your question and the numbers needed to answer it, never your Amazon sign-in or keys).

4. Amazon data protection

We follow Amazon’s data protection requirements for Amazon Ads API partners. We do not sell, share or use your Amazon data for any other purpose. [Confirm against Amazon’s current Data Protection Policy before launch.]

5. Processors

Render Services, Inc. hosts the website and runs Clarobid, in Frankfurt (EU).
Supabase, Inc. provides sign-in and stores your account data and Clarobid data, in [SUPABASE REGION].
Resend, Inc. sends account emails (sign-up confirmation, password reset), from Ireland (EU).
Anthropic, only when you use the AI Assistant with your own API key.

6. How long we keep data

Customer and invoice data: as long as your subscription runs and then as Swedish bookkeeping law requires (7 years). Your Clarobid data: while your account is open, and deleted within [30] days after you close it. Support emails: 2 years.

7. Your rights

You can ask for a copy of your data, correction, deletion, restriction or portability, and object to processing. Write to [SUPPORT EMAIL]. You can complain to the Swedish Authority for Privacy Protection (IMY), imy.se.