How we protect your Amazon API credentials, advertising data, and ensure compliance with Amazon's developer requirements.
Amazon API credentials are treated as the most sensitive data in our system. Multiple layers of protection ensure they remain secure.
All API tokens, refresh tokens, and client secrets are encrypted using AES-256 encryption before storage. Encryption keys are managed separately from application data.
API credentials never leave the server environment. They are not transmitted to browsers, mobile apps, or any client-side code. All API calls are made server-to-server.
Application logs are sanitised to ensure API tokens, refresh tokens, and credentials are never written to log files, error reports, or monitoring systems.
Token refresh is handled entirely server-side with automatic rotation. Expired tokens are securely overwritten when refreshed.
Four distinct role levels ensure users only have access to the functionality they need.
Full platform access including API connections, user management, and system configuration.
Campaign management, rule configuration, and approval of optimisation recommendations.
Day-to-day campaign operations and execution of pre-approved rule sets.
Read-only access to dashboards, reports, and audit logs. No execution capability.
Complete visibility into every action, with the ability to halt all operations instantly.
Every action is recorded: who did what, when, and why. Includes API calls made, recommendations generated, approvals given, and changes executed. Logs are immutable and retained for 12 months.
Instantly halt all automation at account, campaign, or product level. One-click emergency stop immediately pauses all pending and scheduled operations. No cooldown period — takes effect immediately.
Before any write operation reaches Amazon's API, it passes through 17 validation checks including bid caps, budget limits, rate limiting, inventory verification, and sanity checks on change magnitude.
Every modification includes before/after values, the rule that triggered it, the user who approved it, and the timestamp. Full traceability from recommendation to execution.
Your data is protected at every level — in transit, at rest, and in how we handle it.
We never access Amazon buyer data. No Restricted Data Tokens are requested. Your customers' personal information never enters our system.
All data transmission between your browser, our servers, and Amazon's APIs uses TLS 1.2 or higher. No unencrypted connections are permitted.
All stored data including API tokens, performance metrics, and configuration is encrypted at rest using AES-256 encryption.
We comply with GDPR and UK Data Protection Act 2018. Data is hosted in the UK/EU. You have full rights to access, export, and delete your data.
API keys and secrets are stored in encrypted secrets management, separate from application data. Access is restricted to application service accounts only.
We comply fully with Amazon's Ads API Terms of Service, SP-API Developer Agreement, and Acceptable Use Policies. Regular audits ensure ongoing compliance.
We're happy to discuss our data handling in more detail.
Contact Us