Privacy Policy

0. Data Controller

The data controller for the personal data processed in connection with the Service is:

Miłosz Sobieniowski operating as Miłosz Sobieniowski (JDG)
Address: Jana Chryzostoma Paska 3a, 30-397 Kraków, Poland
Tax ID (NIP): 6792888865
Email: sobieniowski@gmail.com

A Data Protection Officer has not been appointed, as it is not required.

1. Introduction

FeedPilot ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Amazon feed processing application and related services (the "Service").

2. Information We Collect

When you use our Service (including integrations such as Amazon Selling Partner API (SP-API)), we may process:

• Account and contact data: email address, name (if provided), company name, billing details
• Amazon account information: seller identifiers, marketplace IDs, and store names
• Product data: SKUs, ASINs, titles, descriptions, and other listing attributes
• Feed submissions: records of feed submissions and their processing status
• Usage and technical data: log data related to authentication, security, and basic service analytics

3. How We Use Your Information

We use the information we process to:

• Provide and operate the Service
• Process and transform your Amazon product listings across marketplaces
• Generate AI-assisted content for your product listings (where enabled)
• Submit feeds to Amazon on your behalf (where configured)
• Track and report on feed submission status
• Maintain security, prevent abuse, and troubleshoot issues
• Communicate with you about your account and the Service
• Comply with legal obligations (e.g., accounting and tax)

4. Amazon SP-API Data Usage

In compliance with Amazon's Selling Partner API Developer Agreement and Data Protection Policy:

• We only access Amazon data necessary for the services you request
• We do not sell, rent, or share your Amazon data with third parties for their marketing purposes
• We do not use Amazon data for advertising or remarketing purposes
• We retain Amazon data only as long as necessary to provide our services
• We delete or anonymize Amazon data upon your request or when you disconnect your Amazon account (subject to legal retention requirements)
• We implement appropriate security measures to protect your Amazon data

5. Data Storage and Security

We apply reasonable technical and organizational measures designed to protect your information, including:

• Data is encrypted in transit using TLS 1.2 or higher
• Sensitive data is encrypted at rest where applicable
• Access to data is restricted to authorized personnel only
• We monitor for suspicious activity and apply abuse prevention measures
• API credentials are stored securely and never exposed in client applications

6. Cookies

We use cookies and similar technologies that are strictly necessary to operate the Service, including authentication, session management, and security. We do not use cookies for advertising purposes.

7. Data Retention

We retain data for as long as your account is active or as needed to provide the Service. Feed submission and processing logs may be retained for up to 90 days for troubleshooting and security purposes. Billing and accounting records may be retained for longer periods as required by applicable law.
You can request deletion of your data at any time by contacting us at sobieniowski@gmail.com.

8. Third-Party Services (Subprocessors)

Our Service integrates with and may use the following third-party providers to deliver functionality:

• Amazon Selling Partner API: to access and manage your Amazon seller data (only as authorized by you)
• OpenAI API: AI-assisted content generation (titles, descriptions, keywords) where enabled by you
• Render: cloud hosting and application infrastructure
• Cloudflare: DNS, CDN, and security services
• GitHub: source code hosting and version control

These providers process data only as necessary to provide the Service. A current list of subprocessors is available upon request.

9. International Data Transfers

Some of our service providers may process data outside the European Economic Area (EEA). Where applicable, we rely on appropriate safeguards, including the European Commission's Standard Contractual Clauses (SCCs), and we apply additional technical and organizational measures to protect the data.

10. Automated Decision-Making

The Service may generate suggestions and content using AI-assisted processing. These outputs are intended to support your work and require your review before use. We do not make decisions with legal or similarly significant effects solely by automated means.

11. Your Rights (GDPR)

You have the following rights regarding your personal data (subject to applicable law):

• Access: request a copy of the data we hold about you
• Correction: request correction of inaccurate data
• Deletion: request deletion of your data
• Restriction: request restriction of processing
• Portability: request your data in a machine-readable format
• Objection: object to processing based on legitimate interests
• Withdraw consent: withdraw consent at any time where processing is based on consent

You also have the right to lodge a complaint with the Polish data protection authority (UODO) or another competent supervisory authority in the EEA.

12. Legal Bases for Processing

We process personal data on the following legal bases under the GDPR:

• Article 6(1)(b) – performance of a contract (providing the Service)
• Article 6(1)(c) – compliance with legal obligations (accounting and tax)
• Article 6(1)(f) – legitimate interests (security, abuse prevention, system logs, and service improvement)
• Article 6(1)(a) – consent, where explicitly given (e.g., optional communications)

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. We encourage you to review this Privacy Policy periodically.

14. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

Email: sobieniowski@gmail.com

Application: FeedPilot – Amazon Feed Processing (B2B SaaS)