Cosimpex

Privacy & Data Protection

This policy explains how Cosimpex Ltd ("we", "us") collects, uses, stores, protects, shares, and deletes data through the Cosimpex website and the ClearAcos platform, including Amazon Information accessed via the Amazon Selling Partner API and Amazon Advertising API on behalf of authorized Amazon seller accounts.

Data We Collect

For each Amazon seller account that authorizes ClearAcos, we access only the data required to provide the service: advertising campaign, keyword and search term performance; Business Reports and sales data; FBA inventory levels; order data; and Search Query Performance (Brand Analytics) data. This data is retrieved exclusively through official Amazon APIs using OAuth tokens granted by the seller. We do not retrieve Amazon Information from any external, non-Amazon source.

How We Use It

Amazon Information is used solely to operate ClearAcos for the account that authorized access: calculating bid adjustments, applying inventory-aware ad spend controls, identifying keyword opportunities, and generating reporting for that account. It is not used for any other purpose, and not used to benefit any other seller account.

Data Isolation Between Sellers

Each authorized seller's data is stored separately and identified by a unique account identifier. Data belonging to one seller account is never visible, accessible, or used in relation to any other seller account.

How We Protect It

  • Amazon Information is encrypted in transit.
  • Network security controls are in place, including firewalls, intrusion detection/prevention, anti-malware protection, and network segmentation.
  • Access to Amazon Information is restricted according to job duties and business function.
  • Account access requires strong passwords (12+ characters with special characters) and multi-factor authentication, with periodic credential rotation.
  • Credentials, encryption keys, and access keys are never stored in public repositories, shared between staff, or hard-coded into applications.

Data Sharing

We do not share Amazon Information with any outside party. ClearAcos is operated in-house by Cosimpex Ltd. Authorized third-party seller accounts grant access via Amazon OAuth; their data is used only to manage that seller's own Amazon advertising campaigns and is never disclosed to any other party.

Data Retention & Deletion

Amazon Information is retained only for as long as an account remains authorized and is required to provide the service. A seller may revoke ClearAcos's authorization at any time from Seller Central; upon revocation, or on request, associated Amazon Information is deleted in accordance with Amazon's Data Protection Policy.

Incident Response

We maintain an incident response plan with defined roles and responsibilities, reviewed at least every six months. Any security incident involving Amazon Information is reported to security@amazon.com within 24 hours of detection.

Contact

For questions about this policy or to request deletion of your data, please contact us.