Privacy Policy

Who we are

Aide ("we", "us") is a software service operated by AIDE LTD, a company registered in England and Wales (company number 15154235), registered office Building 18, Gateway 1000, Whittle Way, Stevenage, England, SG1 2FP. VAT registration number GB 452008428. Contact privacy@aide.services. We provide Amazon sellers with a private analytics dashboard of their own Amazon selling data.

What data we access and why

With the seller's explicit authorization, we access — read-only — the seller's own Amazon data through Amazon's SP-API and Advertising API, solely to display analytics back to that seller:

• Sales & traffic (units, revenue, sessions) — to show performance.
• Advertising (campaigns, spend, clicks, sales) — to show ad performance (ACOS/TACOS/ROAS).
• Orders (order line items, ASIN, quantity, price, date) — for order and revenue analysis.
• Inventory (FBA stock levels) — for inventory health.
• Settlement/fees (where authorized) — for accurate profit.

We do not modify anything in the seller's Amazon account (no writes to bids, campaigns, listings, or settings). We do not access other sellers' data. We are not an Amazon PPC-automation tool.

Our role, and our lawful basis

For your own account details (your name, email, sign-in credentials and billing record) we are the data controller. For the Amazon data we read on your instruction — your orders, sales, advertising, inventory and settlements, including any buyer information Amazon includes — you are the controller and we act as your processor, handling it only to produce your analytics and only as long as you ask us to.

Where we are the controller, we rely on:

• Performance of a contract (UK GDPR Art. 6(1)(b)) — to give you the service you signed up for: connecting your Amazon account, pulling your data and showing your analytics.
• Legitimate interests (Art. 6(1)(f)) — to keep the service secure and working: rate limiting, fraud and abuse prevention, error diagnosis, and audit logging of operator actions. We have balanced these against your rights and use the minimum data needed.
• Legal obligation (Art. 6(1)(c)) — to keep the accounting and tax records UK law requires us to keep.

We do not use your data for automated decision-making that produces legal or similarly significant effects, and we do not profile you.

Personally Identifiable Information (PII)

We minimise PII. We do not use buyer PII for marketing and never sell data. Any order-level PII returned by Amazon is used only to render the authorizing seller's own analytics, is access-controlled per tenant, and is handled per Amazon's Data Protection Policy and Acceptable Use Policy.

How we store and protect it

• Isolation: each seller's data is stored in a multi-tenant database with row-level security so a seller can only ever access their own data (enforced in application code and by the database).
• Where your data is held: your Amazon data and your account records are stored and processed entirely in the United Kingdom (Google Cloud, London region) and are never transferred outside the UK. The one exception is email you choose to send us: that is handled by our mail provider (see Sharing) and may be processed outside the UK.
• Encryption in transit: all connections use HTTPS/TLS.
• Encryption at rest: Amazon authorization tokens are encrypted at rest with keys held outside the database; tokens are never logged or displayed.
• Access control: administrative access is limited to authorized operators, authenticated, and actions such as support impersonation are logged.
• Retention: we retain a seller's analytics data for the life of their account; on account closure or written request we delete their data and revoke stored tokens within 30 days.

Cookies

We use six cookies, all strictly necessary to sign you in and keep you safe — session and admin_session (keeping you signed in), oauth_state, oauth_mkt and ads_state (protecting the Amazon connection flow against cross-site request forgery), and pending_admin_2fa (holding the two-factor step). They are HttpOnly and, in production, Secure.

We run no analytics, advertising or tracking cookies of any kind, and load no third-party scripts, pixels or fonts. Because every cookie we set is strictly necessary to provide a service you asked for, no consent banner is required under PECR — and there is nothing to opt out of.

Sharing

We do not sell personal data. We use two sub-processors, both under contract and only as needed to run the service:

• Google Cloud — hosting and infrastructure, London, United Kingdom. This is where all your Amazon and account data lives. Our database is self-hosted on that infrastructure; it is not a third-party managed database service.
• Zoho Mail — email delivery for our support, privacy and security addresses. If you email us, Zoho processes that message on servers outside the UK under standard contractual clauses. Your Amazon data is never sent through email.

If we add another sub-processor — for example payment processing — we will update this page before doing so.

Your rights

Sellers may disconnect Amazon at any time from inside Aide (Billing & Connection → Disconnect Amazon). Disconnecting immediately deletes the stored Amazon authorization tokens and stops all further data access; analytics already collected are retained unless deletion is also requested. Access can equally be revoked from Amazon Seller Central (Apps & Services → Manage Your Apps). Sellers may also request a copy of their data, or its deletion, by contacting privacy@aide.services; we action deletion requests and revoke stored tokens within 30 days.

Under UK GDPR you also have the right to access the personal data we hold about you, to have inaccurate data corrected, to have it erased, to restrict or object to our processing of it, and to receive it in a portable, machine-readable form (data portability). Where we rely on consent you may withdraw it at any time. Email us at the address above and we will respond within one month. Exercising these rights is free.

Complaints

If you are unhappy with how we handle your personal data, please tell us first at privacy@aide.services. Under section 103 of the Data (Use and Access) Act 2025 you have a statutory right to complain directly to us; we will acknowledge your complaint within 30 days and respond substantively without undue delay.

You also have the right to complain to the UK's supervisory authority, the Information Commissioner's Office — ico.org.uk, helpline 0303 123 1113, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF. You do not have to contact us first, though it is usually quicker.

We are not required to appoint a Data Protection Officer. Privacy questions go to the contact address above.

Reporting a security issue

Report suspected vulnerabilities or security incidents to security@aide.services. We triage on discovery and, where an incident affects selling-partner data, notify the sellers concerned and Amazon in line with Amazon's Data Protection Policy timelines. Please give us a reasonable chance to fix an issue before disclosing it publicly.

Children

Aide is a business tool for Amazon sellers and is not directed at children. We do not knowingly collect personal data from anyone under 18. If you believe a child has provided us with personal data, contact us and we will delete it.

Changes to this policy

We will post any changes on this page with an updated date. If a change materially affects how we handle your data — for example adding a new sub-processor — we will update this page before the change takes effect.