Privacy Policy

1.1 Information from Login with Amazon

When you authenticate using Login with Amazon, we collect the following information from your Amazon account:

• Email address: Your primary email associated with your Amazon account
• Name: Your full name as registered with Amazon
• User ID: A unique identifier provided by Amazon to identify your account
• Profile information: Basic profile data such as your Amazon customer ID

This information is provided to us by Amazon with your explicit consent during the login process. We only request the minimum permissions necessary to provide our services.

1.2 Information You Provide

• Account Information: Business details, company name, and billing information
• Amazon PPC Data: Advertising campaign data, keywords, bid strategies, and performance metrics you choose to connect
• Communication Data: Messages, support requests, and feedback you send to us
• Payment Information: Billing details processed securely through our payment processors (we do not store full credit card numbers)

1.3 Automatically Collected Information

• Usage Data: How you interact with our platform, features used, and time spent
• Device Information: Browser type, operating system, IP address, and device identifiers
• Log Data: Server logs including access times, pages viewed, and system activity
• Cookies and Tracking: Information collected through cookies and similar technologies (see Section 5)

1.4 Amazon Advertising API Data

When you connect your Amazon Advertising account, we access campaign performance data, keyword metrics, and advertising reports through the Amazon Advertising API. This data is used solely to provide PPC optimization services.

2.1 Service Delivery

• Authenticate your identity and provide secure access to your account
• Deliver AI-powered Amazon PPC optimization and bid management
• Generate SEO content and automation recommendations
• Analyze your advertising performance and provide insights
• Process your payments and maintain billing records

2.2 Communication

• Send service-related notifications and account updates
• Respond to your inquiries and provide customer support
• Send marketing communications (with your consent, and you may opt-out)
• Notify you about new features, updates, and promotional offers

2.3 Platform Improvement

• Analyze usage patterns to improve our AI algorithms and platform features
• Conduct research and development for new services
• Monitor and analyze platform performance and user experience
• Detect, prevent, and address technical issues and security threats

2.4 Legal Compliance

• Comply with legal obligations and regulatory requirements
• Enforce our Terms of Service and protect our legal rights
• Prevent fraud, abuse, and unauthorized access
• Respond to legal requests and prevent harm

3.1 Data Storage

Your data is stored on secure servers located in the United States and may be transferred to and processed in other countries where our service providers operate. We ensure appropriate safeguards are in place for international data transfers in compliance with applicable data protection laws.

3.2 Security Measures

We implement industry-standard security measures to protect your information:

• Encryption: All data transmission is encrypted using TLS/SSL protocols
• Access Controls: Strict access controls and authentication mechanisms
• Database Security: Encrypted databases with regular security audits
• Secure Authentication: OAuth 2.0 protocol for Login with Amazon integration
• Regular Backups: Automated backups with secure storage and retention policies
• Monitoring: 24/7 security monitoring and intrusion detection systems
• Employee Training: Regular security training for all team members

3.3 Data Breach Notification

In the unlikely event of a data breach that affects your personal information, we will notify you and relevant authorities as required by applicable law, typically within 72 hours of discovering the breach.

4.1 Login with Amazon

We use Amazon's Login with Amazon (LWA) service for user authentication. When you log in using this service, Amazon provides us with your profile information based on the permissions you grant. Amazon's use of your information is governed by the Amazon Privacy Notice.

4.2 Amazon Advertising API

We access your Amazon Advertising data through the official Amazon Advertising API to provide PPC optimization services. This integration is subject to Amazon's API Terms of Service and data usage policies.

4.3 Other Third-Party Services

• Payment Processors: Stripe or similar services for secure payment processing
• Cloud Infrastructure: AWS, Google Cloud, or similar providers for hosting and storage
• Analytics Services: Google Analytics and similar tools to understand user behavior
• Email Services: Email service providers for transactional and marketing communications
• Customer Support: Support platforms to manage customer inquiries

4.4 No Selling of Personal Information

We do not sell, rent, or trade your personal information to third parties for their marketing purposes. We only share data with service providers necessary to deliver our services, and they are contractually obligated to protect your information.

5.1 Types of Cookies We Use

5.2 Third-Party Cookies

Some cookies are placed by third-party services that appear on our pages, including:

• Google Analytics for website analytics
• Login with Amazon for authentication
• Social media platforms for sharing functionality

5.3 Managing Cookies

You can control cookies through your browser settings. Most browsers allow you to:

• View and delete cookies
• Block third-party cookies
• Block all cookies from specific websites
• Block all cookies entirely
• Delete all cookies when you close your browser

Note: Disabling essential cookies may prevent you from using certain features of our platform.

5.4 Do Not Track

Some browsers support "Do Not Track" (DNT) signals. We currently do not respond to DNT signals as there is no industry standard for how to handle them.

6.1 Your Data Protection Rights

• Right to Access: Request a copy of the personal information we hold about you
• Right to Rectification: Request correction of inaccurate or incomplete information
• Right to Erasure (Right to be Forgotten): Request deletion of your personal information, subject to legal obligations
• Right to Restriction: Request that we limit how we use your information
• Right to Data Portability: Request your data in a structured, machine-readable format
• Right to Object: Object to processing of your information for certain purposes
• Right to Withdraw Consent: Withdraw consent for data processing at any time (where processing is based on consent)

6.2 Exercising Your Rights

To exercise any of these rights, you can:

• Email us at info@mirox.pt
• Access your account settings to update or delete certain information
• Use the contact form on our Contact page

We will respond to your request within 30 days (or as required by applicable law). We may need to verify your identity before processing your request.

6.3 Opting Out of Communications

You can opt out of marketing communications by:

• Clicking the "unsubscribe" link in any marketing email
• Updating your communication preferences in your account settings
• Contacting us directly at info@mirox.pt

Note: You cannot opt out of essential service communications (e.g., account security alerts, billing notifications).

6.4 Revoking Amazon Login Access

You can revoke our access to your Amazon account information at any time through your Amazon account settings. This will prevent us from accessing your Login with Amazon profile, but your account data on our platform will remain until you request deletion.

6.5 Filing a Complaint

If you believe we have not adequately addressed your privacy concerns, you have the right to lodge a complaint with your local data protection authority.

7.1 Retention Periods

• Active Account Data: Retained for the duration of your account activity plus a reasonable period for account recovery
• Closed Account Data: Deleted within 90 days of account closure, except as required for legal compliance
• Financial Records: Retained for 7 years as required by tax and accounting regulations
• Marketing Data: Retained until you withdraw consent or we no longer have a legitimate interest
• Server Logs: Retained for up to 90 days for security and debugging purposes
• Support Communications: Retained for 3 years to maintain service quality and resolve disputes

7.2 Anonymized Data

We may retain anonymized or aggregated data indefinitely for analytics, research, and service improvement purposes. This data cannot be used to identify you personally.

7.3 Legal Obligations

In some cases, we may be required to retain your information to comply with legal obligations, resolve disputes, enforce our agreements, or as otherwise permitted by law.

8.1 Children's Privacy

Our services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us immediately, and we will delete it.

8.2 International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. We ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the European Commission.

8.3 California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected, used, shared, or sold
• Right to delete personal information held by businesses
• Right to opt-out of the sale of personal information (we do not sell personal information)
• Right to non-discrimination for exercising CCPA rights

8.4 European Privacy Rights (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have rights under the General Data Protection Regulation (GDPR) as outlined in Section 6. Our legal basis for processing your data includes:

• Contract Performance: Processing necessary to provide services you've requested
• Legitimate Interests: Processing for business operations, security, and service improvement
• Consent: Processing based on your explicit consent (e.g., marketing communications)
• Legal Obligation: Processing required to comply with legal requirements

8.5 Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by:

• Posting the updated policy on this page with a new "Last Updated" date
• Sending an email notification to your registered email address
• Displaying a prominent notice on our platform

Your continued use of our services after changes become effective constitutes acceptance of the updated Privacy Policy.

8.6 Links to Other Websites

Our platform may contain links to third-party websites. We are not responsible for the privacy practices or content of these external sites. We encourage you to review their privacy policies before providing any personal information.