Privacy Policy

Official resources

Effective date and operator

Effective July 19, 2026. AmazonIQ by NAVINES is operated by NAVINES ISRAEL LTD. This Privacy Policy explains how we collect, use, disclose, protect, retain, and delete information when you use the AmazonIQ website, dashboard, Amazon seller connection, and GPT integrations.

Information we collect

We may collect account and profile details, business and contact information, authentication and security events, subscription or Free Limited Access status, service usage, support communications, device and log information, and records needed to operate, secure, and improve AmazonIQ.

Authorized Amazon seller data

When a user authorizes an Amazon seller account, AmazonIQ may retrieve approved Amazon Selling Partner API data in read-only mode. Depending on granted roles and implemented endpoints, this may include account and marketplace participation, finance and transaction data, pricing, inventory, orders without restricted buyer details, fulfillment and FBA information, seller-performance and order metrics, and product listing information.

Read-only service limitations

AmazonIQ does not edit listings, prices, inventory, fulfillment plans, orders, or buyer messages. It does not perform buyer communication or feedback solicitation. AmazonIQ does not access restricted buyer personally identifiable information unless that access is separately approved by Amazon, explicitly implemented, and covered by an updated product and privacy review.

How Amazon data is used

Amazon seller data is used to provide current account visibility, financial and operational summaries, pricing and inventory context, fulfillment and listing analysis, issue detection, grounded priorities, explanations, and recommended investigations. AmazonIQ does not sell Amazon seller data or other user data.

On-demand processing

AmazonIQ is designed to retrieve task-relevant Amazon data on demand rather than build an unnecessary long-term warehouse of seller operations. Some transient processing, caching, logs, connection metadata, and service records may be retained when needed for performance, security, reliability, support, or legal obligations.

Amazon connection and refresh tokens

To maintain a seller-authorized connection, AmazonIQ stores necessary connection metadata and an Amazon refresh token. Stored Amazon refresh tokens are encrypted at the application level before storage, are restricted to server-side use, are not returned by AmazonIQ data endpoints, and are never intentionally exposed to the browser or to other users.

GPT Actions and AI processing

A user may separately authorize the AmazonIQ GPT to retrieve that user's read-only AmazonIQ data. AmazonIQ stores only hashes of its GPT OAuth access and refresh tokens. Selected, task-relevant information may be processed by OpenAI or other necessary AI infrastructure to answer the user's request, explain returned signals, and recommend investigations. These integrations do not authorize account changes.

Purposes of processing

We use information to provide and authenticate the service, maintain authorized Amazon connections, answer user requests, operate Free Limited Access and subscriptions, prevent abuse, enforce rate limits, troubleshoot errors, provide support, communicate service information, meet legal obligations, and protect AmazonIQ, NAVINES, users, and third parties.

Third-party service providers

AmazonIQ may use Supabase for database and authentication infrastructure, Vercel for hosting and delivery, OpenAI for user-requested AI functionality, Amazon for seller authorization and SP-API data, and other necessary providers for email, monitoring, analytics, payments, security, and support. Providers receive only information reasonably needed to perform their services and process it under their own applicable terms and privacy commitments.

International processing

NAVINES and its infrastructure providers may process or store information in Israel, the United States, the European Union, and other locations where they operate. Data protection laws in those locations may differ from the laws where the user resides. We use contractual, technical, and organizational safeguards appropriate to the service and the information involved.

Data retention

We retain account, subscription, connection, consent, security, support, and operational records only for as long as reasonably necessary to provide and secure the service, comply with law, resolve disputes, prevent abuse, and enforce agreements. Retention periods vary by record type. Amazon connection credentials are removed or rendered unusable when no longer needed, subject to limited legal or security retention requirements.

Disconnecting Amazon access

Users can disconnect Amazon access through the available AmazonIQ workflow or revoke authorization in Amazon Seller Central. Disconnecting stops future Amazon SP-API retrieval for that connection and removes the active encrypted refresh-token credential from normal service use. GPT access can be revoked separately without changing the Amazon connection.

Deletion requests

Users may request deletion of their AmazonIQ account and associated personal or Amazon connection data by emailing hello@navines.com. We will verify the request and delete or de-identify eligible data, including stored connection credentials, unless limited retention is required for law, fraud prevention, security, billing, dispute resolution, or enforcement.

Security

AmazonIQ uses safeguards such as encrypted transport, application-level encryption for stored Amazon refresh tokens, restricted server-side credentials, access controls, short-lived tokens where applicable, logging controls, rate limits, and monitoring. No online service can guarantee absolute security, and users should protect their credentials and notify NAVINES of suspected unauthorized access.

Cookies and session technologies

AmazonIQ may use cookies and similar technologies that are necessary for authentication, session continuity, security, preferences, analytics, and service operation. Browser settings may restrict cookies, but essential features may then stop working.

User rights

Depending on applicable law and location, users may request access to, correction of, export of, restriction of, objection to, or deletion of personal information. Users may also withdraw a consent-based authorization by disconnecting the relevant integration. Rights may be subject to identity verification and lawful exceptions.

Changes to this policy

We may update this Privacy Policy as AmazonIQ, legal requirements, or infrastructure change. The updated policy will be posted at this URL with a revised effective date. Material changes may also be communicated through the service or by email when appropriate.

Contact

For privacy questions, security concerns, Amazon data requests, or deletion requests, contact NAVINES ISRAEL LTD at hello@navines.com.