Privacy Policy

Last Updated: June 1, 2026

Privacy Policy

Last Updated: June 1, 2026

AdPilot ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered Amazon advertising management platform (the "Service").

Company: Shenzhen Xunjian Quantitative Technology Co., Ltd. (Registered in Shenzhen, Guangdong Province, People's Republic of China)

Registered Office: Room 701, Honghua Center, No. 52 Heping Road, Longhua District, Shenzhen, Guangdong Province 518109, People's Republic of China


1. Information We Collect

1.1 Information You Provide

  • Account Information: Email address, password, name, and company details when you create an account.
  • Amazon Ads Authorization: OAuth tokens and profile information when you connect your Amazon Ads account.
  • Campaign Configuration: Business Goals, Playbooks, Target ACOS, execution modes, risk preferences, and protected keyword tags you configure.
  • Cost Model Data: Product costs, FBA fees, referral fees, and other financial data you manually input or import via CSV.
  • Approval Decisions: Your approvals, rejections, and rejection reasons for AI-suggested actions.
  • Communication Data: Feedback, support requests, and other communications you send to us.

1.2 Information Collected Automatically

  • Amazon Ads Data: Campaign structures, keyword performance, search term reports, ad performance metrics (spend, sales, ACOS, ROAS, clicks, orders, CTR, CVR, CPC) synced from your Amazon Ads account via the Amazon Advertising API.
  • Usage Data: Pages visited, features used, interaction patterns, and session duration within the Service.
  • Device and Log Data: IP address, browser type, operating system, access times, and referring URLs.

1.3 Information Generated by the Service

  • AI Decisions and Actions: Bid change recommendations, search term harvesting suggestions, keyword memory entries (Paradise, Nursery, Graveyard), and all AI-generated analysis.
  • Operation Logs: Records of all AI actions, approval outcomes, bid change events, and impact assessments.
  • Aggregate Analytics: Anonymized, aggregated statistics about platform usage and performance trends.

2. How We Use Your Information

We use the information we collect to:

  • Provide the Service: Operate and maintain the AdPilot platform, including AI analysis, bid optimization, search term mining, and reporting.
  • Improve AI Performance: Train and refine our AI models using aggregated and anonymized operational data to improve decision quality.
  • Communicate with You: Send service notifications, AI daily briefs, weekly reviews, alert notifications, and respond to your inquiries.
  • Ensure Security: Detect, prevent, and address fraud, unauthorized access, and other illegal activities.
  • Comply with Legal Obligations: Fulfill legal requirements, including data retention and disclosure obligations.

3. How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

3.1 Service Providers (Subprocessors)

We share information with third-party service providers (subprocessors) who perform services on our behalf, including:

SubprocessorPurposeData ProcessedLocation
Amazon Web Services (AWS)Cloud infrastructure, hosting, and storageAll customer dataUS (us-east-1)
AnthropicAI model inference for ad optimizationAnonymized/aggregated campaign data, no raw PIIUS
Amazon Advertising APIAmazon Ads data synchronization and bid managementCampaign, keyword, and performance dataUS
ResendEmail delivery and notification servicesEmail addresses, notification contentUS
SentryError monitoring and performance trackingAnonymized error logs, no PIIUS
VercelWeb application hosting and CDNWeb traffic, no customer ad dataUS

All subprocessors are contractually obligated to process your information only as directed by us and to maintain appropriate security measures. We will notify you of any material changes to our subprocessor list by updating this Privacy Policy.

3.2 Amazon Advertising API

When you connect your Amazon Ads account, we access your advertising data through the Amazon Advertising API in accordance with Amazon's API terms and your authorization. We only access data necessary to provide the Service and do not share your Amazon Ads data with third parties for their own purposes.

Specifically, we use your Amazon Ads data to:

  • Synchronize campaign structures, keyword data, and performance metrics (read operations).
  • Modify keyword bids for Sponsored Products campaigns when AI托管 is enabled (write operations, limited to bid changes only).
  • Generate AI-driven recommendations, operation logs, and performance reports.
  • Track bid change impacts and keyword memory (Paradise, Nursery, Graveyard).

We do not use your Amazon Ads data to train models that serve other customers. AI improvements are based on aggregated, anonymized patterns only.

3.3 Legal Requirements

We may disclose your information if required to do so by law, in response to a valid legal request, or when we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others.

3.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you via email or prominent notice on our Service of any change in ownership.


4. Data Security

We implement industry-standard security measures to protect your information, including:

  • Encryption: All data in transit is encrypted using TLS 1.2+. Sensitive data at rest (including Amazon OAuth tokens) is encrypted using AES-256.
  • Access Controls: Role-based access control (RBAC) with the principle of least privilege. Only authorized personnel can access production data.
  • Audit Logging: All access to sensitive data is logged and monitored.
  • Regular Reviews: We conduct periodic security assessments and penetration testing.

While we strive to protect your information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.


5. Data Retention

Data TypeRetention Period
Account informationDuration of account + 30 days after deletion
Amazon Ads performance data2 years from collection
AI operation logs2 years from creation
Approval records2 years from creation
Keyword memory entriesDuration of account
Cost model dataDuration of account + 30 days after deletion
Usage and log data90 days

You may request earlier deletion of your data by contacting us at the address below.


6. Your Rights and Choices

Depending on your jurisdiction, you may have the following rights:

  • Access: Request a copy of the personal information we hold about you.
  • Correction: Request correction of inaccurate personal information.
  • Deletion: Request deletion of your personal information, subject to legal retention requirements.
  • Portability: Request your data in a structured, commonly used, machine-readable format.
  • Restriction: Request restriction of processing in certain circumstances.
  • Objection: Object to processing of your personal information for specific purposes.

To exercise any of these rights, please contact us at privacy@useadpilot.app. We will respond to your request within 30 days.


7. Data Storage and Cross-Border Data Flow

7.1 Data Storage Location

All customer data is physically stored in AWS us-east-1 (N. Virginia, United States). No data is replicated, backed up, or transferred to any infrastructure in mainland China, regardless of the company's place of incorporation.

7.2 Cross-Border Data Flow

Customer data flows from Amazon's US infrastructure directly to AWS us-east-1 and is processed entirely within US-based cloud infrastructure. The company in China receives no raw customer data; access is limited to operational metadata necessary for service delivery.

7.3 Legal Framework

While the company is incorporated under PRC law, the data processing is governed by US laws and regulations applicable to AWS-hosted services. Customer data is not subject to PRC data disclosure requirements as it never enters PRC jurisdiction.

7.4 International Transfers

For customers outside the United States, your information may be transferred to and processed in the United States. These transfers are subject to US data protection laws. We ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the European Commission, for transfers from the EEA, UK, and other regions with data protection requirements.


8. Children's Privacy

The Service is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child, we will take steps to delete that information promptly.


9. Cookies and Tracking Technologies

We use cookies and similar tracking technologies for:

  • Essential Cookies: Required for the Service to function (authentication, session management).
  • Analytics Cookies: Help us understand how the Service is used (page views, feature usage).
  • Performance Cookies: Monitor and improve Service performance.

You can manage cookie preferences through your browser settings. Disabling essential cookies may affect the functionality of the Service.


10. Third-Party Links

The Service may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party services you access.


11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

  • Posting the updated policy on our website with a revised "Last Updated" date.
  • Sending an email notification for significant changes.

Your continued use of the Service after changes become effective constitutes your acceptance of the revised Privacy Policy.


12. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us:

  • Email: privacy@useadpilot.app
  • Address: Shenzhen Xunjian Quantitative Technology Co., Ltd., Room 701, Honghua Center, No. 52 Heping Road, Longhua District, Shenzhen, Guangdong Province 518109, People's Republic of China

For data subject access requests or privacy concerns, please use the email above with the subject line "Privacy Request."