Privacy Policy

1. Who we are

[COMPANY LEGAL NAME] ("Zarox", "we", "us") operates zarox.io, a platform that automates and optimizes Amazon Ads campaigns. We are registered at [COMPANY ADDRESS] in [JURISDICTION]. For any privacy question, contact us at [PRIVACY CONTACT EMAIL].

2. Data we collect

We collect and process the following categories of personal data:

• Account data — your name, email address, and account identifiers, handled through our authentication provider, Clerk.
• Billing data — subscription and payment metadata handled through Stripe. We do not store full card numbers; Stripe processes payment details directly.
• Amazon Ads data — the advertising account data you authorize us to access and manage on your behalf, including campaigns, keywords, and performance reports.
• Usage & support data — pages you visit and support-chat messages via Tawk.to, which loads only after you accept cookies.

3. How we use your data

We use your data to provide and operate the service (managing and optimizing your Amazon Ads campaigns), to bill you, to provide support, to secure the platform, and to comply with our legal obligations.

4. Legal bases (GDPR Article 6)

We rely on: performance of a contract to provide the service you signed up for; legitimate interests to secure and improve the platform; consent for non-essential cookies and live chat; and legal obligation where the law requires us to retain or disclose data.

5. Sharing & sub-processors

We share personal data only with the sub-processors needed to run the service. A current list is published on our Sub-processors page. We do not sell personal data.

6. International transfers

Some of our processors (including Clerk, Stripe, and Tawk.to) are based in the United States. Where personal data is transferred outside [JURISDICTION], we rely on appropriate safeguards such as Standard Contractual Clauses.

7. Retention

We keep personal data for as long as your account is active and as needed to provide the service. We apply an automated retention schedule per data category:

• Account erasure. When you delete your account, we wait a 30-day grace period (during which you can undo the request). After that we permanently delete your identity and cancel your subscription.
• Advertising & performance data. Your campaign, report, and bid data is not deleted on erasure but is anonymized — unlinked from you so it can no longer identify you.
• Category limits. Older operational data (such as raw reports and bid history) is automatically deleted once it passes its category retention period.
• Billing records. A minimal, pseudonymous billing record is retained to meet legal, accounting, and tax obligations.

8. Your rights

Under the GDPR you may access, rectify, erase, restrict, port, or object to the processing of your personal data, and withdraw consent at any time. You can download a copy of your data and delete your account directly from your account settings; for other requests contact [PRIVACY CONTACT EMAIL]. You also have the right to lodge a complaint with your local data protection authority.

9. Cookies

We use cookies and similar technologies as described in our Cookie Policy. You can accept or reject non-essential cookies via the banner shown on your first visit.

10. Contact

Questions about this policy or your data? Email [PRIVACY CONTACT EMAIL] or write to [COMPANY LEGAL NAME], [COMPANY ADDRESS].