Privacy
Privacy Policy
This page explains what data Arctavia collects, why it is used, who it is shared with, how long it is kept, and how to make a privacy request.
Overview
Arctavia handles operational Amazon Ads data, so it is important to be explicit about what we process and why. This page summarises our approach to collection, use, sharing, retention, and privacy rights.
1. Who this policy covers
This policy applies to Arctavia and related APIs, dashboards, analytics features, and support channels operated by Dandeleon Ltd. It explains how we handle information about customers, prospective customers, and people who contact us about the service.
2. Data we collect
We collect account details such as name, email, company name, and billing information; Amazon Ads data from linked accounts including campaign settings, bids, search terms, keywords, and performance metrics; usage logs; device and browser details; and support communications. Amazon credentials and tokens are encrypted at rest and handled on a least-privilege basis.
3. How we use data
We use data to authenticate users, manage contracts, provide Arctavia, prepare Amazon Ads review workflows, generate bid and keyword drafts, generate reporting, process billing, deliver support, monitor security, investigate incidents, improve the product, and comply with law and Amazon Ads policies.
4. Lawful bases
We process personal data on the basis of contract performance, legitimate interests, legal obligation, or consent where consent is required. For example, account administration and billing are processed to deliver the service, while security logging and abuse prevention rely on legitimate interests.
5. Sharing and processors
We share data only where necessary with trusted processors such as payment providers, email delivery vendors, observability tools, hosting providers, and customer support tooling. We do this under contractual and legal controls. We do not sell personal data and we do not provide one customer with another customer’s account data.
6. Amazon Ads integrations
Arctavia connects to the Amazon Ads API to read and update advertising data. Tokens and credentials are encrypted and used with limited scopes. Changes to Amazon’s API, throttling, outages, or policy requirements may affect the service. We disconnect accounts on request or when required by Amazon.
7. Retention
We keep data for as long as needed to provide the service and administer the customer relationship. After termination we delete or anonymise data within about 90 days unless law, billing, audit, or legitimate business needs require longer retention for specific records.
8. Security controls
We apply encryption in transit, encryption at rest, access controls, role-based permissions, audit logging, backups, monitoring, and vulnerability response processes across our infrastructure, which is primarily hosted in UK/EU regions. No internet-connected service can be guaranteed to be perfectly secure, but we work to reduce risk materially.
9. International transfers
If personal data is processed outside the UK or EEA, we rely on Standard Contractual Clauses or equivalent safeguards and assess the security of the transfer where required.
10. Cookies and analytics
We use cookies and event analytics to maintain sessions, keep the service secure, diagnose issues, and understand product usage. We do not use cross-site advertising trackers as a core part of the service. Browser settings may allow you to block cookies, but some parts of the app may not work correctly if you do.
11. Your rights
Where UK GDPR or GDPR applies, you may request access, correction, deletion, restriction, portability, or object to certain processing. Email [email protected] and we will usually respond within 30 days. We may ask you to verify your identity before acting on a request.
12. Children
Arctavia is not intended for children under 16, and we do not knowingly collect their personal data. If we learn that such data has been collected, we will delete it promptly.
13. Updates and contact
We may update this policy to reflect legal, operational, or product changes. Material updates will be communicated in the app or by email. Questions or complaints can be sent to [email protected]. You may also contact the UK Information Commissioner’s Office (ICO).
Quick facts
Operator
Dandeleon Ltd.
UK company operating Arctavia.
Main data categories
Account, billing, and Amazon Ads data
Includes campaign settings, performance logs, usage signals, and support history.
Contact
General questions are answered within 72 hours. Formal rights requests are handled within 30 days.
Requests and contact
Requests for access, correction, deletion, restriction, portability, or objection can be sent by email.
[email protected]