Legal

Privacy Policy

Last updated
Effective
On publication

Draft pending legal review. This document has not been reviewed or approved by legal counsel and is not yet in effect. Items marked “TBD” are awaiting confirmation.

This Privacy Policy explains how KeenEdge (“we”, “us”) handles information when you visit our website or use the KeenEdge repricing service (the “Service”). It covers the public website and the signed-in application.

KeenEdge is a business tool for Amazon sellers. Much of what you trust us with is confidential business information, such as product costs, supplier terms and pricing strategy, rather than personal information. This policy covers both. Where the rules differ, we say so.

The short version

  • Your business data stays yours. We use it to run the Service for you and for the other purposes described here, and we never sell it or give it to other sellers or advertisers.
  • Data we get from Amazon through your seller account is used only to provide the Service to you, and we don’t use it to train AI models.
  • We plan to use eligible data that you provide to us directly, such as costs and pricing settings, to develop and improve KeenEdge’s own models and features. We describe the limits on that use in Product development and AI.
  • We don’t sell personal information, and our website doesn’t use advertising or analytics trackers.

Scope and roles

This policy applies to information we collect through:

  • The website, including the KeenEdge marketing pages.
  • The Service, including the sandbox, the connection to your Amazon seller account, and the KeenEdge app.
  • Our communications with you, such as support conversations and account emails.

KeenEdge is used by businesses. The company or person that signs up for KeenEdge (the “Customer”) controls the account and decides who can use it. For personal information that we use to run our own business, such as account and billing details, KeenEdge decides how it is used. For information we process to perform the Service for a Customer, we act on that Customer’s behalf and under our agreement with them.

Your use of the Service is also governed by our Terms and Conditions (the “Terms”). The Terms set out the contractual rights in your business data, including the rights described in this policy. If the Terms and this policy conflict on those rights, the Terms control.

Information we collect

We group the information we handle into the types below. Business data and Amazon data are handled differently, and the difference matters throughout this policy.

Account and contact information

When you create an account, we collect your email address and password. Your password is handled by our sign-in provider, and KeenEdge does not store it. You can choose to add your name, phone number, job title and time zone to your profile. We also keep your account role and the organization you belong to. If you contact us, we keep the content of your message and our reply.

Website contact requests

When you use the contact form on our website, we collect your name, your email address, your company if you give it, the reason for your inquiry and your message. The form sends them to our contact service, which records your request in our internal request tracker so our team can reply to you by email. We use this information to respond to you and to keep a record of your request. A contact request does not create a KeenEdge account.

Billing and subscription information

KeenEdge doesn’t sell paid plans or collect payment information today. [TBD: once paid plans exist, describe the plan, billing and subscription records kept, name the payment processor and confirm what payment details it collects. KeenEdge should not receive or store full card numbers.]

Your business data

“Your business data” is information that you or your team provide to the Service directly, including:

  • product costs and cost history, including cost spreadsheets you upload (CSV or Excel files)
  • supplier and vendor details, and how vendor SKUs map to your products
  • pricing policies, strategy choices, price floors and ceilings, change limits, margin targets and other settings
  • schedules, freezes, pause and approval actions, and other instructions you give the Service
  • messages you send to the KeenEdge Assistant

Amazon information

“Amazon information” is information we receive from Amazon through the seller account you connect. It also includes information derived from it. Depending on your setup, this can include:

  • your listings and catalog details, such as SKUs, ASINs and titles
  • current prices, competing offers, Buy Box status and pricing notifications
  • FBA inventory levels
  • Amazon fee estimates and storage-cost data
  • sales history from Amazon order reports, which we use to calculate how quickly each product sells

When you upload a file that contains values from Amazon, such as Amazon fees or sales figures, we treat those values as Amazon information too.

Service records

As the Service runs, it creates records for your account. These include pricing decisions and the reasons behind them, market snapshots, price updates sent to Amazon and their results, alerts, run history, replays and simulation results. Service records often combine your business data with Amazon information. Any part that comes from Amazon is handled as Amazon information.

Usage, device and security information

When you use the website or the Service, our systems record technical information, such as:

  • your IP address
  • your browser type
  • requests made to our servers
  • error and performance data
  • which account and user took each action, and when

We use this information to operate, secure and troubleshoot the Service. See Cookies and similar technologies for what is stored in your browser.

Sandbox data

The sandbox runs on a sample store that we generate, with simulated products, costs and competitors. It does not use Amazon credentials or live Amazon data. The settings you choose and the simulations you run in the sandbox are part of your business data and service records.

Information we don’t collect

We collect only what the Service needs. In particular:

  • We don’t request Amazon’s restricted access to buyer names, addresses or contact details.
  • Amazon order reports can contain order IDs and shipping locations. We use them only to count sales per product, and we keep only a minimized record: the SKU, quantity and order status.
  • We don’t collect precise location data.
  • We don’t intentionally collect sensitive categories of personal information.

How we use information

We use information to:

  • Provide the Service. This includes creating and securing your account, importing your catalog, calculating margins and price floors, running your pricing strategies, sending price updates to Amazon when you enable repricing, and showing you the reasons behind each decision.
  • Run simulations and replays. You can test strategies in the sandbox and replay past decisions.
  • Show analytics and reports. This includes margin, pricing and inventory reporting for your account.
  • Support you. We use information to answer questions, investigate problems you report, and help you configure the Service.
  • Keep the Service secure and reliable. This includes detecting abuse, preventing unauthorized access, monitoring performance, and fixing errors.
  • Administer accounts. This includes sending service and account messages, such as verification codes and important changes, and, once paid plans exist, managing subscriptions and billing.
  • Respond to inquiries. We use what you send through our contact form or by email to reply to you and keep a record of your request.
  • Improve the Service and develop new features, within the limits in Product development and AI.
  • Meet legal obligations. We use information to comply with law, enforce our Terms, and protect the rights and safety of KeenEdge, our customers and others.

Amazon information is subject to stricter limits than the list above. See Your Amazon seller account.

Automated pricing decisions

When you enable repricing, the Service changes your Amazon prices automatically.

  • How decisions are made. Today, the rules and limits you configure decide each price, applied to your costs and current market data. AI models do not make these decisions.
  • What you can check and control. Each decision records the inputs, the strategy and the constraints that produced it. You can review decisions, simulate them before going live, and pause or freeze repricing at any time.
  • Accuracy. Decisions depend on the accuracy and freshness of your costs and Amazon’s data, and margin figures are estimates.

These decisions concern your products and prices, not individuals.

The KeenEdge Assistant

The in-app Assistant answers questions about your account using a large language model. We run the model through Amazon Bedrock, a service of Amazon Web Services.

  • What the model receives. To answer, it gets your question plus relevant details from your account, which may include business data and Amazon information.
  • What we keep. Conversations are saved in your account so you can continue them, and they may appear in our operational logs.
  • Training. We don’t use Assistant conversations that contain Amazon information to train models.
  • Accuracy. Assistant answers can be wrong. Check important figures in the app before acting on them.

Your Amazon seller account

How you authorize access

You connect KeenEdge to your Amazon seller account by entering Selling Partner API authorization credentials in the Service. These include a Login with Amazon refresh token. We may later offer Amazon’s own authorization pages for this instead.

Either way, you decide whether to connect. The sandbox works without a connection.

What we access and why

With your authorization, KeenEdge uses Amazon’s Selling Partner API to:

  • import your listings and catalog
  • read prices, competing offers, fees, inventory and sales data
  • receive pricing notifications
  • update the prices of your listings when you enable repricing

We request only the access we need to provide those features. We use Amazon information only to provide the Service to you.

How we protect your Amazon credentials

  • Storage. Your Amazon authorization credentials are stored in a dedicated secrets store with encryption. They are kept separate from our application databases.
  • Use. Only the Service’s backend systems use the credentials, to call Amazon on your behalf.
  • Display and logging. They are never shown back in the app, and we remove them from our logs.

How Amazon’s rules limit our use

Amazon information is also governed by Amazon’s agreements and policies for Selling Partner API developers. Under those rules:

  • Your account only. We use Amazon information only to provide the Service to you.
  • No cross-seller use. We don’t combine Amazon information across sellers to provide or sell to anyone, and we don’t disclose it to other sellers or outside parties.
  • No AI training. We don’t use Amazon information to train, develop or improve machine learning or AI models. This applies directly and indirectly, and includes Amazon information that has been aggregated, de-identified or transformed.
  • Retention. We keep Amazon information only as long as needed to provide the Service to you or to meet legal obligations.

We will follow these rules even where this policy would otherwise allow a broader use.

Disconnecting and revoking access

You can disconnect a seller account in the KeenEdge app at any time. You can also revoke KeenEdge’s access from the apps settings in Amazon Seller Central.

When you disconnect in the app, we delete your stored Amazon credentials immediately and stop calling Amazon for that account.

When you revoke access in Seller Central, our access stops working. We detect this the next time we contact Amazon and mark the connection as needing to be reconnected.

Other Amazon information. Disconnecting deletes your credentials. It does not by itself delete other Amazon information already stored for that account, such as catalog details, market data and pricing records.

  • [TBD: state when and how stored Amazon information is deleted after disconnection, revocation, account closure or an Amazon request, once that deletion is implemented and verified.]
  • Your business data, such as uploaded costs and settings, stays in your account until you delete it or close your account.

Ownership and confidentiality of your business data

You own your business data. We don’t claim ownership of the costs, supplier information, pricing settings or files you provide. Amazon information remains subject to your agreements with Amazon and to Amazon’s agreements with us.

What you permit us to do. Under the Terms, you give KeenEdge permission to:

  • host, process and use your business data to provide, secure and support the Service
  • use it for the other purposes described in this policy, including the product development described in the next section

The Terms define the exact scope of that permission. This policy doesn’t grant it on its own.

What KeenEdge owns. KeenEdge owns the Service and what it develops independently. That includes our software, models and aggregated or de-identified insights created from eligible data in line with this policy and the Terms.

We keep your business data confidential. We don’t sell it, and we don’t disclose it to other sellers, competitors, advertisers or data brokers. Access within KeenEdge is limited to people who need it to run, support or develop the Service. We share it outside KeenEdge only as described in How we share information.

Product development and AI

KeenEdge is building toward more advanced pricing and inventory intelligence. This section explains how data you provide may be used for that work. It also sets out the limits we follow.

What we do today

KeenEdge does not currently train AI or machine learning models on customer data. Our repricing engine runs on rules that you configure.

We are telling you about our plans now so that our future use doesn’t come as a surprise. Before we begin, our Terms will include the rights this section describes.

What we may use

Subject to the Terms and the limits below, KeenEdge may use eligible customer data to develop, train, test, evaluate and improve its own models, features and services. Eligible customer data is limited to:

  • Your business data. This includes product costs and cost history, supplier and vendor information, pricing policies, strategy settings, margin targets and profitability settings.
  • The parts of service records that don’t come from Amazon. This includes the choices you make and how you configure, approve, pause or override pricing.

What we may use it for

Eligible data may be used to:

  • improve repricing strategies
  • build predictive pricing, demand and margin models
  • identify inventory and profitability risks
  • develop forecasting and inventory intelligence
  • build new KeenEdge features, applications and services
  • carry out internal research, testing and quality checks

What we won’t use

We won’t use Amazon information for any of this, as described in Your Amazon seller account. That includes Amazon information that has been aggregated, de-identified or otherwise transformed, and values from Amazon that appear inside files you upload.

We also won’t use data derived from Amazon information to get around that rule. Before any customer data is used for model development, we will remove or exclude fields that come from Amazon.

Safeguards we will apply

  • De-identification. We remove or replace names, contact details and other direct identifiers that aren’t needed for the purpose. Where practical, we use data that is aggregated across many customers or de-identified.
  • No disclosure through outputs. We won’t build or offer features that reveal one customer’s confidential business data to another customer. We will take reasonable steps to reduce the risk that a model output could expose or reconstruct it.
  • Access controls. Training data is protected with the same safeguards as the rest of the Service, and only staff who need it can access it.
  • Outside AI providers. We may use outside providers’ computing or AI services for this work. They must process eligible data only on our behalf, under contracts that require confidentiality and security. Those contracts must also prohibit them from using the data to train or improve their own models.

Your choices

[TBD: state whether customers can opt out of, or must opt in to, model development use, and how. This needs a business and legal decision and a working control before publication.]

After you leave

If you close your account or delete data, we stop using that data for new model development. Some effects of past training can’t be undone:

  • Models that were already trained may keep what they learned from de-identified or aggregated data.
  • We don’t promise to delete or retrain those models.
  • We won’t use those models in a way that identifies you or your business, or discloses your business data.

Changes to how we use data

If we materially expand how we use customer data for AI or product development, we will notify you in advance. We won’t apply the change to data collected before the change without your consent. See Changes to this policy.

How we share information

We don’t sell your business data, and we don’t sell personal information. We share information only as follows.

  • With Amazon, as you instruct. When you enable repricing, we send price updates for your listings to Amazon. Amazon handles that information under its own policies.
  • With service providers. These companies host and operate parts of the Service on our behalf. They may use the information only to provide their services to us, under contracts that require confidentiality and security. See the list below.
  • Within your organization. Other users in your KeenEdge account can see your account’s data, according to their role.
  • With KeenEdge staff and contractors. Our employees and contractors can access customer data only when needed to operate, secure, support or develop the Service. They are bound by confidentiality obligations.
  • For legal reasons. We may disclose information when we believe in good faith that it is required by law, a court order or a valid legal process. We may also disclose it to protect the rights, property or safety of KeenEdge, our customers or others.
  • In a business transfer. If KeenEdge is involved in a merger, acquisition, financing or sale of assets, information may be transferred as part of that transaction. It will remain subject to this policy and to applicable Amazon requirements.
  • With your consent. We share information when you ask us to or agree that we may.

Service providers

Provider What they do for us
Amazon Web Services (AWS) Cloud hosting and storage for the Service, including the secrets store for Amazon credentials. Also hosts our website (AWS Amplify) and the contact service behind the website’s contact form, provides sign-in and verification emails (Amazon Cognito), and runs the language model behind the KeenEdge Assistant (Amazon Bedrock).
Notion Stores contact requests sent through our website, and our internal customer-relationship and support records.
Microsoft 365 Business email, which we use to reply to inquiries.
Google Fonts Delivers the typefaces on some website pages. See Cookies and similar technologies.
[TBD: payment processor, once paid plans exist] Subscription billing and payments.
[TBD: other tools] [TBD: confirm whether any other support, email or communication tools are in use.]

Amazon Web Services is part of Amazon. When we use AWS, it acts as our service provider. That is separate from the Amazon marketplace you connect to the Service.

How we protect information

We use administrative, technical and physical safeguards that are appropriate to the data we handle. They include:

  • Cloud infrastructure. The Service runs on Amazon Web Services.
  • Encryption. Connections to the website, the Service and Amazon use HTTPS. Our databases, file storage and secrets store encrypt data at rest.
  • Account separation. Every record is tied to the account it belongs to. The Service determines which account you are working in from your signed-in session, and automated tests check that one customer can’t reach another customer’s data.
  • Access control. Users have roles within an account, and our backend services receive only the permissions they need.
  • Sign-in security. Passwords are handled by our sign-in provider. Session cookies can’t be read by scripts in the browser, and they are sent only over secure connections.
  • Credential protection. Amazon credentials are kept in a separate secrets store and removed from logs (see Your Amazon seller account).
  • Records and monitoring. We keep records of who created or changed data in your account, and we monitor the Service’s health and errors.
  • Secure development. Our development process includes automated security scanning of code and secrets.

No system is completely secure, and we can’t guarantee that information will never be accessed without authorization.

If we learn of a security incident affecting your information, we will investigate. We will notify you, and authorities or Amazon where required, as the law and our agreements require.

You can help by keeping your password private and limiting account access to people who need it. Our Security & Trust page describes these safeguards and the controls you have in plain language.

How long we keep information

We keep information only as long as we need it for the purposes in this policy, or as long as the law requires.

Information How long we keep it
Account and profile information While your account is open. After closure, we delete or de-identify it within [TBD: period], except what we must keep for legal, tax or security reasons.
Billing records As long as tax and accounting law requires.
Your business data and service records While your account is open, unless you delete them. After closure, we delete them within [TBD: period].
Uploaded cost files Original files are deleted automatically within 30 days of upload. The costs extracted from them stay in your account as business data.
Amazon information Only as long as needed to provide the Service to you or to meet legal obligations. Disconnecting deletes your Amazon credentials immediately. [TBD: deletion timing for other Amazon information after disconnection, revocation, account closure or an Amazon request, once implemented and verified.]
Website contact requests [TBD: retention period for contact requests and related correspondence.]
Sandbox data While your account is open. You can reset the sandbox at any time.
Assistant conversations While your account is open, unless you delete them. [TBD: confirm whether users can delete Assistant conversations.]
Usage, operational and security logs [TBD: retention period for operational and security logs.]
Backups [TBD: describe backup coverage and how long deleted data can remain in backups.]

Models and de-identified or aggregated data created as described in Product development and AI may be kept after your account closes.

Your choices and rights

Controls in the Service

You can:

  • update your profile information in the app
  • change or delete costs, pricing settings and other business data
  • export some data
  • reset your sandbox
  • disconnect your Amazon seller account at any time

Your personal information

Depending on where you live, you may have the right to:

  • access the personal information we hold about you and get a copy in a portable format
  • correct information that is inaccurate
  • delete your personal information
  • withdraw consent where we rely on it
  • object to or restrict some processing
  • appeal a decision we make about your request

To make a request, contact us at [TBD: privacy contact email].

  • Verification. We will confirm your identity before acting. Usually we do this by matching the request to the email address on your account.
  • Authorized agents. An agent can make a request for you if we can verify their authority and your identity.
  • When we can’t comply. We may decline or limit a request where the law allows, for example to keep records we are legally required to keep. If we do, we will explain why.
  • No penalty. We won’t treat you differently for exercising your rights.

Access to your business data

Access to and export of business data is mainly governed by the Terms. Business data isn’t personal information about you, so it falls outside the requests above.

You can export some data from the app. Contact us for help with data you can’t export yourself. If you are a user in someone else’s KeenEdge account, the account owner controls that account’s business data. We may refer requests about it to them.

Marketing emails

We don’t currently send marketing emails. If we do, every marketing email will include a way to unsubscribe. Service and account messages, such as security notices, will still be sent while you have an account.

Personal information from Amazon buyers

If Amazon buyer information reaches the Service, we process it only for the seller it belongs to. Buyers should send privacy requests to that seller, and we will help the seller respond.

California privacy notice

This section applies to California residents and supplements the rest of this policy. It covers the 12 months before the “Last updated” date.

Categories of personal information we collect:

  • Identifiers. Name, email address, phone number, account IDs and IP address.
  • Customer records. Contact, account and billing details.
  • Commercial information. Plan and subscription history.
  • Internet or other electronic network activity. Usage, device and log data.
  • Professional information. Job title and your organization.
  • Sensitive personal information. Account sign-in credentials. We use them only to authenticate you, and not to infer characteristics about you.

Sources. We collect this information from you, from your use of the Service and our website, from Amazon when you connect a seller account, and from our service providers. [TBD: confirm whether business contact information is obtained from other sources, such as referrals or purchased lead lists, and list those sources.]

Purposes. We use it for the purposes in How we use information.

Disclosures. We disclose each category to our service providers for business purposes, and to the other recipients described in How we share information.

No sale or sharing. We don’t sell personal information, and we don’t share it for cross-context behavioral advertising, as California law defines those terms. We have no actual knowledge of selling or sharing the personal information of anyone under 16.

Retention. See How long we keep information.

Your rights. California residents can ask to know, access, correct and delete their personal information, and can’t be retaliated against for doing so. See Your personal information for how to make a request.

Visitors outside the United States

The Service is hosted in the United States. If you access it from elsewhere, your information will be transferred to, stored and processed in the United States. Data protection law there may differ from where you live.

Legal bases. If you are in the European Economic Area, the United Kingdom or Switzerland, we process personal information on these legal bases:

  • Contract. To provide the Service you signed up for.
  • Legitimate interests. To secure, support and improve the Service, to develop products as described in this policy, and to run our business.
  • Legal obligation. Where the law requires us to process information.
  • Consent. Where we ask for it.

Your rights. You may complain to your local data protection authority.

[TBD: decide whether KeenEdge offers the Service to sellers in the EEA, UK or Switzerland. If so, confirm the transfer safeguards and whether an EU or UK representative is required.]

Cookies and similar technologies

On our website, we don’t use advertising or analytics cookies, tracking pixels or similar technologies. The pricing page loads typefaces from Google Fonts. To deliver them, Google receives your IP address and browser details. If we add analytics or advertising tools, we will update this section first and ask for consent where the law requires it.

In the KeenEdge app, we use these essential cookies:

  • Sign-in cookies keep you signed in. They can’t be read by page scripts and are sent only over secure connections. They are cleared when you sign out and otherwise expire after a set period.
  • A preferences cookie remembers display settings.

The app also uses your browser’s local storage to remember interface choices, such as the last store you viewed and dismissed notices. It doesn’t keep sign-in tokens there.

The app doesn’t use advertising or analytics cookies. [TBD: confirm that no tag manager or analytics service is enabled in any deployed version of the app.]

Your controls. You can block or delete cookies in your browser settings. If you block essential cookies, you won’t be able to sign in.

Browser privacy signals. We don’t track you across other websites, and we don’t sell or share personal information. That means there is nothing for “Do Not Track” or Global Privacy Control signals to switch off. If that changes, we will honor Global Privacy Control as an opt-out of sale and sharing.

Children

KeenEdge is a business service. It isn’t directed to children, and we don’t knowingly collect personal information from anyone under 16. If you think a child has given us personal information, contact us and we will delete it.

Changes to this policy

We will update this policy as the Service and the law change, and we review it at least once a year. The “Last updated” date shows when it last changed.

If we make a material change, we will tell you before it takes effect. We will notify you by email or in the Service. A material change includes a new use of your business data, such as an expansion of the product development described above.

We won’t apply a material change to information collected before the change without your consent where the law or our commitments require it.

Contact us

The company responsible for your information is:

KeenEdge

For questions about this policy or to make a privacy request, email legal@keenedge.ai. [TBD: confirm that this mailbox is monitored and is the approved channel for privacy requests, and use the same channel in the “Your personal information” section.]