PRIVACY POLICY
 

Effective Date: 27 August 2026
Last Updated: 27 August 2026

Ecomceptive Solutions Private Limited (“Ecomceptive”, “we”, “us”, or “our”) respects the privacy and security of our clients, users, website visitors, sellers, advertisers, and other individuals who interact with our services.

This Privacy Policy explains how we collect, access, use, process, store, disclose, protect, retain, and delete information when you use our website, services, applications, integrations, or software platforms, including Ecomceptive Command Center.

It also explains how we handle information received through third-party platforms and APIs, including Amazon Selling Partner API (SP-API), Amazon Ads API, Login with Amazon (LWA), Meta Platforms, Facebook, Instagram, and Meta Marketing API.
 

By using our website or services, authorizing one of our applications, or providing information to us, you acknowledge the practices described in this Privacy Policy.

1. Scope of This Privacy Policy

This Privacy Policy applies to information processed through:

• Our public website and enquiry forms;

• Ecomceptive services provided to clients;

• Ecomceptive Command Center and related software applications;

• Amazon Selling Partner API integrations;

• Amazon Ads API integrations;

• Login with Amazon authorization;

• Meta, Facebook and Instagram integrations;

• Meta Marketing API and authorized advertising accounts;

• Email, telephone, WhatsApp or other business communications;

• Billing, subscriptions and payment-related activities; and

• Other integrations or services operated by Ecomceptive.

Third-party websites and platforms may have their own privacy policies and terms, which also apply when you use their services.

2. Information We Collect

We collect only information that is reasonably required to provide, operate, secure, support and improve our services.

2.1 Information You Provide Directly

Depending on how you interact with us, we may collect:

• Name;

• Business or company name;

• Email address;

• Telephone number;

• Business address;

• Billing information;

• GST or tax-related information where required;

• Account or service requirements;

• Support requests;

• Information submitted through forms;

• Communications with our team; and

• Any other information you voluntarily provide.

2.2 Website and Technical Information

When you access our website or applications, certain information may be collected automatically, including:

• IP address;

• Browser type;

• Device type;

• Operating system;

• Referring URL;

• Pages visited;

• Date and time of access;

• Session information;

• Application events;

• Error and diagnostic information; and

• Security and audit logs.

We use this information for application security, troubleshooting, analytics, fraud prevention and service improvement.

2.3 Cookies and Similar Technologies

We may use cookies and similar technologies to:

• Maintain sessions;

• Remember preferences;

• Secure authentication;

• Understand website usage;

• Improve performance;

• Measure engagement; and

• Provide relevant functionality.

You may manage cookies through your browser settings. Disabling certain cookies may affect website or application functionality.

2.4 Billing and Payment Information

Where paid services or subscriptions are offered, payments may be processed through third-party payment service providers.

Ecomceptive may receive information such as:

• Transaction status;

• Payment reference;

• Amount;

• Billing name;

• Invoice information; and

• Subscription status.

Payment card, banking or other sensitive payment credentials may be processed directly by the relevant payment provider and are subject to that provider’s privacy and security practices.

3. How We Use Information

We may use information for the following purposes:

3.1 Providing Our Services

To:

• Provide contracted services;

• Operate Ecomceptive Command Center;

• Connect authorized marketplace and advertising accounts;

• Provide account-management services;

• Generate reports and dashboards;

• Provide analytics and business insights;

• Monitor account performance;

• Provide inventory and operational monitoring;

• Assist with advertising management and optimization;

• Support clients;

• Process subscriptions and billing; and

• Maintain service functionality.

3.2 Communications

We may use contact information to:

• Respond to enquiries;

• Provide service updates;

• Communicate regarding accounts;

• Send operational notifications;

• Provide support;

• Send invoices or billing communications; and

• Send marketing communications where permitted.

You may opt out of promotional communications at any time.

Essential operational, billing, security or account-related communications may continue where necessary to provide the service.

3.3 Product and Service Improvement

We may use aggregated, statistical or operational information to:

• Diagnose technical issues;

• Improve functionality;

• Measure system performance;

• Improve user experience;

• Develop new features; and

• Enhance security.

We do not use third-party platform data in ways prohibited by the applicable platform provider.

3.4 Legal, Fraud Prevention and Security

Information may be processed where necessary to:

• Comply with applicable law;

• Respond to lawful requests;

• Protect Ecomceptive, our clients and users;

• Detect fraud or unauthorized access;

• Investigate suspected misuse;

• Enforce our agreements;

• Maintain application security; and

• Respond to security incidents.

4. Amazon Selling Partner API Information

Ecomceptive Command Center may access information from an Amazon selling partner account through the Amazon Selling Partner API (SP-API) only after the relevant selling partner has expressly authorized our application through Amazon’s official authorization process.

We do not request or collect the seller’s Amazon password.

Authorization is handled through Amazon-approved authentication mechanisms, including Login with Amazon where applicable.

4.1 Amazon Information We May Access

Depending on the permissions and roles granted by Amazon and authorized by the seller, information may include:

• Seller and marketplace account information;

• Marketplace identifiers;

• Product and catalog information;

• SKU, ASIN and listing information;

• Inventory information;

• Pricing information where authorized;

• Orders;

• Order-item information;

• Fulfilment information;

• Sales and Traffic reports;

• Returns;

• Reimbursements;

• Financial events;

• Fees and transaction information;

• Account-performance information;

• Operational reports;

• Shipping information where permitted; and

• Other information made available through authorized SP-API roles.

We access only the Amazon information required for the functionality we provide.

4.2 How We Use Amazon SP-API Information

Amazon information may be used to provide:

• Marketplace account management;

• Sales reporting;

• Business-performance analysis;

• Inventory monitoring;

• Order monitoring;

• Fulfilment monitoring;

• Financial analysis;

• Returns and reimbursement monitoring;

• Listing and catalog management where authorized;

• Account-health and operational monitoring;

• Automated alerts;

• Business insights; and

• Other functionality expressly authorized by the selling partner.

5. Amazon Ads API Information

Ecomceptive may access Amazon advertising information through the Amazon Ads API only for advertisers or sellers who have provided appropriate authorization.

Amazon Ads information may include:

• Advertising account and profile identifiers;

• Marketplace and country information;

• Campaigns;

• Ad groups;

• Keywords;

• Product targeting;

• Search terms;

• Advertised products;

• Placements;

• Creative-related information where available;

• Impressions;

• Clicks;

• Advertising spend;

• Attributed sales;

• Attributed orders;

• Attributed units;

• Advertising-performance metrics; and

• Other information permitted through the Amazon Ads API.

5.1 Purpose of Amazon Ads Data Processing

Amazon Ads information may be used for:

• Advertising reporting;

• Advertising-performance monitoring;

• Campaign analysis;

• ACOS and ROAS analysis;

• TACOS analysis where permitted;

• Spend analysis;

• Keyword and targeting analysis;

• Search-term analysis;

• Placement analysis;

• Advertising optimization;

• Budget monitoring;

• Opportunity identification;

• Campaign-management functionality where authorized; and

• Related services provided to the authorizing advertiser.

5.2 Restrictions on Amazon Information

Amazon information is handled only for authorized and permitted business purposes.

Ecomceptive does not:

• Sell Amazon information;

• Rent Amazon information;

• Publish Amazon information publicly;

• Provide Amazon information to unrelated third parties;

• Display one seller’s confidential Amazon information to another seller;

• Use Amazon information for unauthorized surveillance or profiling;

• Use Amazon login credentials obtained directly from sellers;

• Use Amazon information for purposes unrelated to the authorized service; or

• Combine or use Amazon Data with unrelated third-party data in a manner prohibited by Amazon’s applicable policies.

Access to Amazon information is limited to authorized personnel and systems with a legitimate business need.

6. Amazon Account Separation and Access Controls

Information belonging to each Amazon selling partner or advertiser is logically restricted to the relevant authorized client account.

We implement controls designed to prevent:

• One client accessing another client’s confidential information;

• Unauthorized employee access;

• Unnecessary administrative access;

• Exposure of API credentials; and

• Unauthorized sharing of Amazon information.

Employee and system access is granted according to job responsibilities, permissions and business requirements.

7. Amazon Authentication Credentials

We do not request sellers or advertisers to provide their Amazon account passwords.

Amazon authorization is performed through Amazon-supported authorization mechanisms.

Authentication credentials, API secrets, access tokens, refresh tokens and encryption keys are treated as confidential security information.

Such credentials are:

• Restricted to authorized systems;

• Not intentionally placed in public repositories;

• Not intentionally hard-coded into publicly accessible application code;

• Not shared with unauthorized persons; and

• Stored using appropriate security controls.

8. Meta, Facebook and Instagram Platform Data

Ecomceptive may provide integrations with Meta Platforms, including Facebook, Instagram and the Meta Marketing API.

Access occurs only after an authorized user grants permissions through Meta’s official authorization process.

Depending on the permissions granted and services used, Meta Platform Data may include:

• Meta business or business-portfolio identifiers;

• Facebook Page information;

• Instagram professional account information;

• Advertising-account identifiers;

• Campaign information;

• Ad-set information;

• Advertising information;

• Creative metadata;

• Advertising insights and performance metrics;

• Spend;

• Reach;

• Impressions;

• Clicks;

• Conversions and related metrics where available;

• Basic account information made available by Meta;

• Business-management information; and

• Other information permitted through the Meta APIs and expressly authorized by the user.

8.1 How We Use Meta Platform Data

Meta Platform Data may be used to:

• Connect authorized advertising accounts;

• Display advertising performance;

• Provide dashboards and reports;

• Manage advertising services where authorized;

• Monitor campaign performance;

• Analyze advertising results;

• Identify optimization opportunities;

• Provide client account-management services;

• Troubleshoot integrations; and

• Provide functionality requested by the authorizing user.

8.2 Meta Data Restrictions

Ecomceptive does not sell Meta Platform Data or disclose it to unrelated third parties.

Meta Platform Data belonging to one client will not be intentionally displayed to another unrelated client.

Access is limited to authorized personnel, systems and service providers required to operate the applicable service.

We process Meta Platform Data in accordance with applicable Meta platform requirements and the permissions granted by the authorizing user.

9. Third-Party Infrastructure and Service Providers

We use third-party infrastructure and service providers where reasonably required to operate our website, applications and services.

These may include:

Supabase

Used for secured database, backend, authentication and related application infrastructure.

Vercel

Used for application hosting, deployment, runtime and delivery infrastructure.

Amazon

Used for Amazon marketplace, Login with Amazon, Selling Partner API and Amazon Ads API functionality.

Meta Platforms

Used for Facebook, Instagram and advertising integrations authorized by users.

Payment, Email and Communication Providers

We may use payment-processing, transactional email, communication, monitoring or other service providers where necessary to operate our services.

Service providers receive access only to information reasonably necessary to perform the services for which they are engaged and are expected to handle information subject to appropriate confidentiality, security and contractual requirements.

We do not sell personal information or platform data to these providers.

10. Data Storage and Retention

We retain information only for as long as reasonably necessary to:

• Provide the requested service;

• Maintain active integrations;

• Perform legitimate operational functions;

• Meet contractual obligations;

• Resolve disputes;

• Maintain security records;

• Prevent fraud;

• Comply with platform requirements; or

• Comply with applicable legal obligations.

Data that is no longer necessary for an authorized purpose will be deleted, anonymized or otherwise securely disposed of as appropriate.

10.1 Amazon Data Retention

Amazon information is retained only for the period necessary to provide approved functionality or as otherwise permitted by Amazon and applicable law.

Where Amazon authorization is revoked, our services are terminated, Amazon requests deletion, or the information is no longer necessary for a permitted purpose, we will discontinue use and delete eligible Amazon information within the applicable period required by Amazon, law or our contractual obligations.

Amazon’s current Partner Network policy requires Amazon Data to be deleted when it is no longer required for the permitted integration, subject to limited legally required retention. 

10.2 Meta Platform Data Retention

Meta Platform Data is retained only while necessary to provide the authorized functionality or satisfy applicable legal and security obligations.

Where an integration is disconnected or a valid deletion request is received, eligible Meta Platform Data associated with the requesting user or business will be deleted or anonymized as appropriate, subject to applicable legal retention requirements.

10.3 Backups

Information may temporarily remain in encrypted or controlled backups after deletion from active systems.

Such backup information will not be restored for normal operational use except where required for disaster recovery, security or legal purposes and will expire according to applicable backup-retention practices.

11. Data Security

We maintain administrative, technical and organizational safeguards designed to protect information against:

• Unauthorized access;

• Unauthorized disclosure;

• Accidental loss;

• Destruction;

• Modification;

• Misuse; and

• Security compromise.

Depending on the system and information involved, safeguards may include:

• HTTPS/TLS encryption for data in transit;

• Access controls;

• Authentication controls;

• Role-based permissions;

• Secure credential handling;

• Environment-based secret management;

• Network and application controls;

• Database security controls;

• Logging and monitoring;

• Security reviews;

• Incident-response procedures; and

• Restricted administrative access.

No internet-connected service can guarantee absolute security, but we maintain controls appropriate to the nature of the information processed.

12. Security Incident and Vulnerability Reporting

Ecomceptive maintains procedures for identifying, monitoring, investigating, containing, responding to and resolving suspected security or privacy incidents.

Amazon currently requires Partner Network participants to maintain a documented and publicly accessible process for security/privacy vulnerability and incident reporting. 

If you believe you have identified:

• Unauthorized access;

• A data-security incident;

• A privacy incident;

• Exposure of confidential information;

• A vulnerability in an Ecomceptive application;

• Misuse of Amazon Data;

• Misuse of Meta Platform Data; or

• Other suspicious security activity,

please contact:

Email: info@ecomceptive.in
Subject: Security Incident / Vulnerability Report

Where possible, include:

• A description of the issue;

• The affected service or page;

• Date and approximate time identified;

• Steps required to reproduce the issue, if applicable;

• Supporting screenshots or evidence; and

• Contact information for follow-up.

Please do not intentionally access, copy, alter or disclose information belonging to another user while investigating a suspected vulnerability.

We will evaluate reported matters, take appropriate containment and remediation measures, and notify affected parties, platform providers or regulatory authorities where required.

Where an incident involves Amazon information, Ecomceptive will follow applicable Amazon incident-reporting requirements, including notification to security@amazon.com where required.

13. Sharing and Disclosure of Information

We may disclose information only where reasonably necessary for the following purposes:

13.1 Service Providers

To infrastructure, hosting, payment, communications or other providers necessary to operate our services.

13.2 Client-Authorized Activities

Where disclosure is necessary to perform services expressly requested or authorized by the client.

13.3 Legal Requirements

Where required by applicable law, court order, regulatory authority or valid legal process.

13.4 Security and Protection

Where reasonably necessary to investigate fraud, abuse, threats, security incidents or violations of our agreements.

13.5 Corporate Transactions

Information may be transferred as part of a merger, acquisition, restructuring or sale of business assets, subject to applicable confidentiality and legal requirements.

We do not sell Amazon Data, Meta Platform Data or personal information to unrelated third parties.

14. Your Rights and Choices

Subject to applicable law, you may request:

• Access to personal information associated with you;

• Correction of inaccurate information;

• Updating of personal information;

• Deletion of eligible information;

• Withdrawal of consent where processing is based on consent;

• Restriction of certain processing where applicable;

• Information about how your data is being used; and

• Assistance disconnecting an authorized platform integration.

Requests may be sent to:

info@ecomceptive.in

We may need to verify your identity or authority over the relevant business/account before processing certain requests.

15. Platform Authorization and Revocation

15.1 Amazon

A selling partner or advertiser may revoke Ecomceptive’s authorization through the applicable Amazon authorization/account settings.

After revocation, Ecomceptive will no longer be able to obtain new information through the revoked authorization.

You may also contact info@ecomceptive.in for assistance with disconnecting an Amazon integration or requesting deletion of eligible Amazon information.

15.2 Meta, Facebook and Instagram

Users may revoke Ecomceptive’s Meta authorization through the relevant Meta, Facebook, Instagram, Business Portfolio, Business Integration or application settings provided by Meta.

Revoking an integration prevents future authorized access through that integration.

You may additionally request deletion of eligible Meta Platform Data by following the process described below.

16. Data Deletion Instructions

This section applies to users requesting deletion of personal information or third-party platform data associated with Ecomceptive.

16.1 Requesting Deletion Directly From Ecomceptive

Send an email to:

info@ecomceptive.in

Use the subject:

Data Deletion Request

Please provide sufficient information to identify the relevant:

• Individual;

• Company or business;

• Amazon seller account;

• Amazon advertiser account;

• Facebook Page;

• Meta Business Portfolio;

• Meta advertising account;

• Instagram account; or

• Ecomceptive account or integration.

Do not send passwords, access tokens, API secrets or other authentication credentials by email.

We may request reasonable verification to ensure the requester is authorized to request deletion.

After verification, eligible data will be deleted or anonymized within the period required by applicable law and platform requirements.

Certain information may be retained where required for:

• Legal compliance;

• Tax or accounting requirements;

• Fraud prevention;

• Security investigations;

• Enforcement of contractual rights; or

• Other legally permitted purposes.

Any retained information will remain restricted to the applicable retention purpose.

16.2 Meta Data Deletion

If you have connected a Facebook, Instagram or Meta business/advertising account to an Ecomceptive application, you may:

1. Remove or revoke the Ecomceptive application from your applicable Meta/Facebook Business Integration or account settings; and/or

2. Email info@ecomceptive.in with the subject “Meta Data Deletion Request.”

Include the relevant business, Page or advertising-account information needed for us to locate the integration.

After verifying the request, we will delete eligible Meta Platform Data associated with the integration, subject to applicable legal and security-retention requirements.

16.3 Amazon Data Deletion

An Amazon selling partner or advertiser may revoke application authorization through Amazon and may also email:

info@ecomceptive.in

with the subject:

Amazon Data Deletion Request

Following verification, we will delete eligible Amazon information that is no longer required for a permitted purpose, subject to applicable Amazon requirements and legal retention obligations.

17. Marketing Communications

Where permitted, we may send information about our services, products, updates and offers.

You may unsubscribe using the unsubscribe option contained in the communication or by contacting us.

Opting out of marketing does not prevent us from sending essential service, billing, account, security or legal communications.

18. International Data Processing

Our services may rely on cloud infrastructure or service providers that process information in locations different from the country in which you are located.

Where cross-border processing occurs, we take reasonable measures to ensure information is handled in accordance with applicable data-protection requirements and contractual obligations.

19. Children’s Privacy

Our business services are intended for businesses and authorized adult users.

We do not knowingly design Ecomceptive Command Center or our marketplace and advertising-management services for children.

If we learn that personal information from a child has been collected in violation of applicable law, we will take appropriate steps to delete it.

20. Third-Party Websites and Platforms

Our website or applications may contain links to Amazon, Meta, payment providers or other third-party services.

We do not control the independent privacy practices of those third parties.

Your use of those services is subject to their respective privacy policies, terms and platform requirements.

21. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect:

• Changes to our services;

• New integrations;

• Changes to technology;

• Platform-policy changes;

• Security requirements; or

• Applicable legal requirements.

The updated Privacy Policy will be published on this page with a revised Last Updated date.

Material changes may be communicated through additional means where appropriate or legally required.

22. Contact Us

For questions, privacy requests, data-deletion requests, security concerns or complaints regarding this Privacy Policy, please contact:

Ecomceptive Solutions Private Limited

Email: info@ecomceptive.in

For security or vulnerability reports, please use the subject:

Security Incident / Vulnerability Report

For privacy or deletion requests, please use the subject:

Data Deletion Request

Thank you for trusting Ecomceptive with your information.