Legal
Privacy Policy
EK Affinity Ltd operates SellerSigma, a service that creates and manages Amazon Sponsored Products advertising campaigns on behalf of Amazon sellers.EK Affinity Ltd is the data controller for the information described here.
What we access, and what we deliberately do not
SellerSigma connects to your Amazon Selling Partner API and Amazon Ads API accounts with your explicit authorisation. Through those connections we read:
- Product listing data — SKU, ASIN, title, price, stock, fulfilment channel, brand, bullet points, product description, backend search terms, images and category attributes.
- Advertising data — campaigns, ad groups, keywords, bids, budgets, and daily performance (impressions, clicks, spend, orders, sales) including the search terms shoppers used.
- Account data — your name and email address, used to sign you in.
We do not access customer or buyer information. We do not read your orders, buyer names, shipping addresses, contact details, or payment data. The Amazon permissions we request do not include them. Everything we hold describes your products and your advertising, not the people who buy from you.
Why we process it
To provide the service you subscribed to: generating campaign structures, setting and adjusting bids, diagnosing why campaigns under-perform, and reporting results back to you. Product listing text is sent to our AI provider to generate keyword suggestions and written explanations. Performance data is used to price bids and produce the analysis shown in your account.
The lawful basis is performance of our contract with you. Where we rely on legitimate interests — for example, aggregate service monitoring — you may object using the contact address below.
Amazon credentials
Authorisation tokens for the Amazon Ads API and Selling Partner API are encrypted at rest with AES-256-GCM. They are never written to logs, never displayed in the interface, and never returned by our API. You can revoke our access at any time from Amazon Seller Central, which immediately ends our ability to read or change anything in your account.
Who else processes your data
| Processor | Purpose | Location |
|---|---|---|
| Hetzner Online GmbH | Application and database hosting | Germany (EU) |
| Anthropic | AI generation of campaign keywords and plans from product listing text | United States |
| Amazon (Ads API, Selling Partner API) | Source of listing and advertising data; destination for campaign changes | Seller's marketplace region |
| Stripe | Subscription billing and payment processing | United States / Ireland |
We do not sell your data, and we do not share it with anyone outside this list. We do not use one seller's data to advantage another. Transfers outside the UK/EEA rely on Standard Contractual Clauses.
How long we keep it
While your account is active, and for 30 days after you disconnect Amazon or cancel your subscription. After that, your listing, campaign and performance data is deleted. Encrypted Amazon tokens are destroyed as soon as you disconnect, not at the end of that window. We may retain billing records for longer where tax law requires it.
Your rights
Under UK and EU data protection law you may request a copy of your data, correct it, delete it, restrict or object to processing, or receive it in a portable format. Write to fa247sales@gmail.com and we will respond within one month. You may also complain to the UK Information Commissioner's Office.
Security and changes
Data is held on servers in Germany, encrypted in transit over TLS, with credentials encrypted at rest. Access is limited to those who need it to run the service. If this policy changes materially we will notify subscribers by email before the change takes effect.