Privacy Policy

01 Information We Collect

We collect only what is necessary to deliver the Services and communicate with you:

• Application Data. Name, business email, brand name, product category, Amazon storefront or ASIN URL, annual revenue range, and product/challenge descriptions you submit via our application or Free Recommendation Share Check forms.
• Newsletter Data. Email address (and optionally your name) when you subscribe to the newsletter. You can unsubscribe at any time via the link in every email.
• First-Party Amazon Data. Data exports you provide from your own Seller Central account (e.g., Search Query Performance, Business Reports, Search Term Reports). Where exports are sufficient for the agreed scope, this data is provided directly by you and we take no access to your Amazon account.
• Delegated Account Data. Where the agreed scope requires delegated access granted through Amazon’s official mechanisms (Seller Central User Permissions and/or authorized SP-API connections), we process the account data necessary to deliver the agreed scope (e.g., advertising, pricing, and inventory data). We never request, transmit, or store your Seller Central login credentials or passwords. API tokens are stored encrypted and revoked when the engagement ends.
• Product Information. Specifications, ingredient lists, certifications, and other product facts you supply for listing content drafting.
• Payment Data. Payments are processed by Stripe, Inc. We receive transaction confirmations and billing details (name, email, amount); we do not receive or store full payment card numbers. Stripe's processing is governed by its own privacy policy.
• Analytics Data. Aggregated visit counts collected by Umami, which we host ourselves. No cookie is set and no identifier is stored on your device, so a visit cannot be tied back to you or followed to another site.
• Communications. Email correspondence related to your application or project.

02 How We Use Your Information

Uses are strictly limited to:

• Service Delivery. Producing your Competitive Angle Analysis, Recommendation Share measurements, the workflow agreed in your scope, and — for ongoing work — operating the agreed supervision and reporting systems.
• AI-Assisted Processing. Portions of the Services are produced with the assistance of third-party large-language-model providers (see Section 03). Product and listing data may be submitted to these providers' APIs solely to generate your deliverables. We do not permit these providers to use your data to train their models where the provider offers that control, and we submit only the data necessary for the task.
• Communication. Responding to applications, scheduling calls, delivering work, and — if you subscribed — sending the newsletter.
• Quality & Improvement. Improving our Recommendation Share methodology using anonymized data only; any use of client-identifiable data requires your explicit written consent.
• Billing & Legal Compliance. Processing payments, maintaining accounting records, meeting legal obligations, and enforcing our Terms.

Advertising. We do not sell personal data, and nothing you send us — an application, an email, a signup — is used for advertising or profiling. One exception is worth stating plainly rather than burying: the Meta pixel on this Site reports the pages you visit to Meta, which builds audiences from them. Section 08 says how to switch it off, and doing so is the only thing you need to do to be out of it entirely.

03 Data Sharing and Disclosure

We share data only with the service providers needed to operate, each bound by confidentiality and data-protection obligations:

• Form submission provider (e.g., Formspree) — application and contact forms.
• Email provider — correspondence and newsletter delivery.
• Cloud storage / workspace providers (e.g., Google Drive, Notion) — project files.
• Payment processor — Stripe, Inc.
• AI model providers — Anthropic (Claude), Google (Gemini API), and hosted deployments of Meta Llama models, used to assist in producing deliverables as described in Section 02.
• Analytics — none. Umami runs on our own infrastructure, so visit data is not shared with any third party.
• Advertising — Meta Platforms, Inc. The pixel on this Site reports pages viewed, your IP address and its own cookie identifier. Meta is an independent controller for that data, not our processor. It receives nothing if the pixel has not loaded — see Cookie Policy, section 03.
• Legal requirements — where required by law, court order, or to protect rights, property, or safety.

A current list of sub-processors for paid engagements is maintained in our Data Processing Addendum.

04 Data Security

We apply appropriate technical and organizational measures to protect your data against unauthorized access, alteration, disclosure, or destruction: TLS encryption in transit, encrypted cloud infrastructure at rest, and access restricted to personnel working on your engagement. No Seller Central login credentials or passwords are ever requested or stored; where delegated API access is used, tokens are held encrypted and revoked at engagement end.

05 Data Retention

Project data is retained for up to 12 months following completion of your service, to support the revision period and follow-on questions, after which it is securely deleted unless a legal obligation requires longer retention or you request earlier deletion. Billing records are retained as required by tax and accounting law. Newsletter data is retained until you unsubscribe.

06 Your Rights and Choices

You may: access, correct, or request deletion of your personal and business data; receive a copy of the data we hold about you in a portable format; unsubscribe from the newsletter at any time; and object to the use of your data for methodology improvement. To exercise any right, contact us via agenticfba.com/contact.

07 International Users (GDPR & CCPA)

If you are in the EEA, UK, or California, you have additional rights under the GDPR, UK GDPR, or CCPA/CPRA. Our legal bases for processing are performance of a contract (Services), consent (newsletter), and legitimate interest (service improvement using anonymized data, security, and fraud prevention). We do not sell personal data. The Meta pixel described in Section 08 does constitute "sharing" for cross-context behavioural advertising within the meaning of the CCPA/CPRA, and California residents have the right to opt out of it: the switch in section 03 of our Cookie Policy is that opt-out, and it takes effect immediately on the browser you use it from. Data may be processed in the United States; where required, we rely on appropriate safeguards (including Standard Contractual Clauses with relevant providers). EEA/UK clients engaging paid Services may execute our Data Processing Addendum.

08 Cookies

Audience measurement is cookieless and self-hosted. Two cookies exist beyond it, and both are described in the Cookie Policy: the Meta advertising pixel, which visitors in the UK and the EEA are asked about before it loads and which loads on arrival elsewhere, and a language cookie set by the embedded form on the contact page. Both are listed there, with a switch that turns the pixel off. A few first-party entries are kept in your browser’s own storage for the Site to behave sensibly; they are listed in the Cookie Policy.

09 Changes to This Policy

We may update this Policy to reflect changes in the Services or legal requirements. The effective date at the top shows the current version; active clients are notified of significant changes via their engagement email.

10 Contact Us