Your account data, handled with care

We access and process Amazon Advertising data only on behalf of clients who have explicitly authorized us to do so — either by granting our agency account access through Amazon Seller Central and Amazon Ads account management, or by connecting us through the Amazon Advertising API. We never touch an advertising account without that authorization, and we act purely as a service provider to the client, who remains the owner and controller of the data.

What we access is limited to what campaign management actually requires:

• Campaign, ad group, and portfolio structure, names, budgets, and status.
• Keyword and product targets, match types, bids, and bid adjustments.
• Search-term reports — the queries that triggered a client’s ads.
• Performance metrics: impressions, clicks, spend, cost-per-click, orders, sales, ACoS, ROAS, conversion rate, and placement-level performance.
• Advertised product identifiers (ASINs, SKUs), and where the client provides them, listing and inventory attributes used for campaign decisions.
• Business reports and Search Query Performance data where the client grants access to them.

Separately from client advertising data, our website collects a small amount of information:

• Contact and enquiry details you submit voluntarily — name, business email, company or brand name, and anything you choose to tell us about your account.
• Booking details when you schedule a strategy call, handled by our scheduling provider.
• Registration details for our free tools, where an email address is required to unlock a tool.
• Standard analytics and server data — pages viewed, referring source, approximate region, device and browser type, and IP address, used to understand site usage and keep the site secure.

Files you upload to our free tools are processed in your browser. The bulk sheet, search-term, and report analysis tools parse your spreadsheet locally on your own device to produce the on-screen output. We do not store those files on our servers or retain their contents after you leave the page.

We use everything described above for these purposes and no others:

• To deliver the advertising services the client engaged us for — campaign build, bid and budget management, keyword and negative keyword work, and reporting.
• To produce performance reports and recommendations for that client, about that client’s account.
• To diagnose issues, investigate anomalies, and support the client’s account.
• To respond to enquiries and to operate, secure, and improve our website and free tools.
• To meet our legal, tax, and accounting obligations.

We do not use client advertising data to train third-party AI models, to build advertising audiences, or for any purpose the client has not engaged us for.

Client advertising data is stored on managed cloud infrastructure located in the United States, operated by reputable providers under their own security and compliance programs. Working copies of reports may also sit in our business Google Workspace environment, access-controlled to the specific team members assigned to that client.

When an engagement ends, our access to the client’s Amazon Advertising account stops immediately. A client may request deletion of stored data at any time by emailing accelerate@adsacceleration.com; we complete verified deletion requests within 30 days, excluding records we are legally required to keep.

The following safeguards apply to all client data:

• Encryption in transit. Every connection to our website, our systems, and the Amazon Advertising API uses TLS 1.2 or higher.
• Encryption at rest. Stored data is encrypted using AES-256 or the equivalent provided by our cloud and workspace providers.
• Least-privilege access. Access is granted per client and per role. Only the account strategist assigned to your account, the founder, and — where a specific issue requires it — a named technical operator can view your data. Nobody else on the team has access.
• Authentication controls. Multi-factor authentication is enforced on every account that can reach client data, including Amazon Ads, our cloud provider, and our workspace.
• Offboarding. Access is revoked immediately when a team member leaves or changes role, and when an engagement ends.
• No credential storage. We never ask for, store, or use Amazon Seller Central passwords. Access runs through Amazon’s own user-permission and API authorization systems.

We do not publish client data in case studies, benchmarks, or marketing material without that client’s prior written permission. Where a client has approved a case study, the figures are used exactly as agreed with them.

The only parties who process data on our behalf are the service providers running our infrastructure — cloud hosting, business email and document storage, scheduling, billing, and website analytics. Each is bound by its own contractual confidentiality and data protection obligations, processes data only on our instructions, and never receives it for its own marketing. We will name our current providers on request.

We may disclose data where we are legally compelled to — a valid court order, subpoena, or regulatory demand — and will tell the affected client wherever we are permitted to.

To remove our access to your Amazon Advertising account:

• Open Amazon Seller Central, go to Settings → User Permissions (or Account Access), find the Ads Acceleration user, and remove or revoke the permission.
• In the Amazon Ads console, open Account settings → Account access / Manage users and remove our agency access.
• If you connected us through the Amazon Advertising API, revoke the authorization for our application from the same account settings screen.

Revocation takes effect on Amazon’s side immediately. Email accelerate@adsacceleration.com if you would also like the data we have already stored deleted, and we will confirm once it is done.

If you are in the European Economic Area, the United Kingdom, or Switzerland, the GDPR and UK GDPR apply to your personal data. Where we handle a client’s advertising data we act as a processor on that client’s instructions; the client is the controller. For our own business contact and website data, we are the controller.

Our lawful bases are contract, to deliver services you engaged us for; legitimate interests, to operate and secure our website and respond to business enquiries; consent, for optional analytics and marketing email, withdrawable at any time; and legal obligation, for financial records.

You have the right to:

• Access the personal data we hold about you and receive a copy of it.
• Have inaccurate data corrected.
• Have your data erased where we have no overriding legal reason to keep it.
• Restrict or object to our processing, including anything based on legitimate interests.
• Receive your data in a portable, machine-readable format.
• Withdraw consent at any time, without affecting processing carried out before withdrawal.
• Lodge a complaint with your national supervisory authority, or with the UK Information Commissioner’s Office.

Exercise any of these by emailing accelerate@adsacceleration.com. We respond within 30 days, free of charge.

International transfers. We are based in the United States and our infrastructure is US-hosted, so data from the EEA or UK is transferred to the US. Those transfers are made under the European Commission’s Standard Contractual Clauses (and the UK Addendum where applicable), alongside the technical safeguards described in the security section above.

If you are a California resident, the California Consumer Privacy Act as amended by the CPRA gives you the right to know what personal information we collect and why, to request a copy of it, to request its deletion, to request correction of inaccurate information, and to limit the use of sensitive personal information.

We have not sold or shared personal information in the preceding twelve months, and we do not do so. “Sale” and “sharing” carry their CCPA meanings here, including sharing for cross-context behavioral advertising. We do not knowingly collect personal information from anyone under 16.

We will never discriminate against you for exercising these rights — no denial of service, no different pricing, no reduced quality. To make a request, email accelerate@adsacceleration.com with “CCPA Request” in the subject line. We may need to verify your identity before acting, and we respond within 45 days.

We use a small number of cookies and similar technologies: strictly necessary ones that keep the site working and remember your theme and tool-access preferences, and analytics cookies that tell us in aggregate how the site is used.

You can block or delete cookies through your browser settings at any time. Blocking the strictly necessary ones may stop parts of the site working as intended. We do not run third-party advertising or retargeting pixels that build a profile of you across other websites.

We may update this policy as our services, providers, or legal obligations change. The “last updated” date at the top of this page always reflects the current version. Where a change materially affects how we handle client data, we notify active clients by email before it takes effect.

Questions about this policy, a data request, or a privacy concern — write to us and a person will answer.

For the commercial terms of working with us, read our Terms of Service.