Controller
YGIC Limited operates Adzentro and is the controller of customer account and service data.
- Company number
- 79837167
- Registered address
- Room 2013, 20/F., Perfect Industrial Building, 31 Tai Yau Street, San Po Kong, Hong Kong
- Privacy contact
- Email: privacy@adzentro.com
Information we collect
- Business-account identity, authorised users and access records.
- Amazon Ads seller profiles and Sponsored Products campaign, ad group, advertised-product, keyword, product-target, search-term, placement and performance data authorised by the customer.
- Non-restricted marketplace participation, listing, catalogue identity and FBA inventory data authorised through the Selling Partner API.
- Subscription status, invoices, billing contact and tax information needed to administer the service.
- Support, privacy, security and general-enquiry messages sent to Adzentro.
- Limited technical information needed for security and delivery, such as IP address, browser or device type, request time and authentication events.
- Security events, customer approvals, execution evidence and operational audit records.
Information comes from the customer and its authorised users, from Amazon after the seller grants the relevant authorisation, from Stripe for subscription administration, and automatically from the limited technical operation of the service.
Adzentro does not request an Amazon password, Orders data, buyer personal information or Restricted Data Token access. It does not collect product COGS for this scope. Stripe-hosted checkout processes payment-card and tax details; Adzentro does not store full payment-card numbers.
How and why we use it
- Authenticate users and administer one advertiser business.
- Discover seller profiles and active marketplaces authorised by the customer.
- Present Sponsored Products performance and deterministic recommendations.
- Apply listing and inventory safeguards before an advertising action is eligible.
- Execute only actions covered by the customer's current authority and approval state.
- Provide support, bill the subscription, prevent misuse and preserve security and audit evidence.
Processing is necessary to provide the customer's subscription, meet legal duties and protect the legitimate security interests of Adzentro and its customers. Consent is used where applicable law requires it. Adzentro does not sell customer or Amazon data.
Decision and enrichment boundary
Amazon-derived data is evaluated by versioned deterministic rules. OpenAI and other generative-AI providers do not receive Amazon-derived data and are not part of the decision or execution path. DataForSEO and other external keyword-enrichment providers do not receive Amazon-derived data.
Where we store and how we protect information
The authenticated service is designed to keep primary data in London-region infrastructure. Before Adzentro accepts authenticated customer or Amazon data, YGIC Limited will provision and verify HTTPS using TLS, tenant- and purpose-bound managed encryption for stored Amazon refresh tokens, non-persistence of Amazon access tokens, tenant isolation, least-privilege service identities, multi-factor checks for privileged actions, restricted administrative access, input validation, audit evidence, backup controls and deletion jobs. A missing or failed control blocks the affected connection or action.
No technical measure removes every risk. Adzentro limits access to personnel and service providers who need it for the defined service role, reviews security reports through the published incident process and blocks a connection or action when a required security or authority check fails.
Retention and deletion
Retention is limited by data type and purpose:
- OAuth attempt records
- Deleted within 24 hours
- Amazon access tokens
- Used in server memory and not persisted
- Amazon refresh tokens
- Retained while authorised; deleted within 24 hours after disconnect
- Advertising performance
- Rolling 95 days
- Inventory observations
- 7 days
- Application logs
- 30 days
- Decision and approval audit records
- 13 months, limited to security and action metadata rather than raw report payloads
- Backups
- 7 days
On account deletion, disconnect or loss of authorisation, new Amazon collection stops and primary Amazon data is deleted within 7 days unless a specific legal obligation requires a limited record. Expiring backups remove deleted data within the stated backup period. A legally required record is isolated, used only for that obligation and permanently deleted when the obligation ends.
When we share information
Adzentro shares information only with the service providers needed to deliver the customer's service, with professional advisers under confidentiality where necessary, or where law validly requires disclosure. Amazon-derived data is not sold, licensed, published, syndicated or shared with another advertiser. The selected production provider roles are listed below; authenticated customer or Amazon data will not be sent to them until the relevant YGIC-owned account and stated safeguards are provisioned and verified.
- Cloudflare
- Delivery and protection of the public website; no authenticated customer or Amazon data
- Vercel
- Authenticated customer web application in London; request and response fields needed to serve the application
- Supabase
- Authentication and primary PostgreSQL storage in London
- Amazon Web Services
- Scheduled processing, queues and managed encryption keys in the London region
- Stripe
- Hosted checkout, invoices, subscription status, billing contact and tax details; no Amazon-derived data
Provider support and payment processing may involve other locations under the provider's contractual safeguards. Providers receive only the data required for their role and may not use Amazon-derived data for their own advertising, enrichment or model training. Adzentro does not permit a service provider to combine Amazon-derived data with unrelated third-party data.
Cookies and tracking
The public website uses no advertising trackers. The customer application uses only authentication, security and preference technologies needed to operate the service. Any optional analytics requiring consent will remain disabled until the relevant consent is obtained.
Your choices and rights
Authorised users can revoke either Amazon authorisation, request correction or deletion, close the business account and exercise rights available under applicable privacy law. Identity and authority may be verified before a request is completed. Email privacy@adzentro.com for a privacy or deletion request.