Privacy Policy
This Privacy Policy explains how the Just Toys ORBIT Advertising integration (the “Application”) accesses and handles data from the Amazon Ads API. The Application is a private, internal tool used solely for advertising and supply-chain analytics. It is not offered to the general public, has no end-user interface, and does not collect data from consumers.
Who we are
Just Toys LLC is the owner of the Amazon Advertising data accessed by the Application and acts as the data controller. HorizonLabs develops and operates the Application and acts as the data processor, handling data only on the documented instructions of Just Toys LLC.
What data the Application accesses
Through the Amazon Ads API, and only after explicit authorization via Login with Amazon, the Application reads data from the connected advertising profile, including:
- campaign, ad group, and targeting structure and settings;
- aggregated performance metrics (impressions, clicks, spend, attributed sales, orders, and units) at the campaign, ad group, target, and ASIN level;
- advertising profile and account metadata required to scope API requests.
The Application accesses data on a strict read-only basis. It does not create, modify, pause, or delete campaigns, budgets, bids, or any other object in the connected account. It requests only the read-only scopes required for the analytics described below, and no more.
Personal information
The Application does not access, request, store, or process personal information about shoppers or end consumers. It does not receive customer names, addresses, order-level identifiers, or any other consumer-identifying data. All performance data it retrieves is aggregated at the campaign, ad group, target, or ASIN level.
How and why we use the data
The data is used exclusively for internal advertising and supply-chain analytics on behalf of Just Toys LLC — specifically, to measure advertising efficiency and to relate advertising activity to inventory and demand planning. The data is not sold, rented, or shared with any third party, is not combined with data from other advertisers, and is not used for retargeting, profiling, or any advertising purpose outside Just Toys LLC’s own account.
Storage and security
Accessed data is stored in a secured database with access controls, encrypted in transit (TLS) and at rest. Authentication credentials (including OAuth refresh tokens) are stored in encrypted secret storage and are never committed to source control. Access is limited to personnel who operate the Application on behalf of Just Toys LLC.
Data retention and disconnection
Authorization can be revoked at any time from the Amazon account’s Login with Amazon application permissions, which immediately invalidates the Application’s refresh token and ends its access to the advertising profile. Upon revocation, or on request from Just Toys LLC at any time, data derived from the Amazon Ads API is deleted or de-identified in accordance with Just Toys LLC’s instructions and applicable law.
Compliance with Amazon requirements
The Application handles Amazon Advertising data in accordance with the Amazon Ads API Terms of Use and the Amazon Ads API Acceptable Use Policy. It accesses only the data necessary for its stated purpose, honors revocation, and does not repurpose Amazon Advertising data beyond the analytics described in this policy.
Your rights
As the data controller, Just Toys LLC may request access to, correction of, or deletion of data processed by the Application at any time. Requests are handled by the contact below.
Changes to this policy
This policy may be updated from time to time. Material changes will be reflected by updating the “Last updated” date above.
Contact
Questions about this Privacy Policy or the Application’s data handling may be directed to javo@justtoysint.com.