Privacy Policy

Who we are

Vantwyn is a tool for Amazon sellers and the people who manage their advertising. You give it your Amazon advertising data and your product costs, and it works out which bids to change, which search terms to add or negate, and where your ad spend is helping or hurting — anchored to your real profit margins.

The business responsible for your data (the “data controller”) is NTC Inc. [A mailing address will be added here before launch.] Where this policy says “we” or “us”, that is who it means.

The two ways you use the tool, and why it matters

How we handle your data depends entirely on which one you are using.

What we collect, and why

The reports and costs you give us

Without an account, you upload your Amazon advertising reports (such as the Sponsored Products bulk file and the search-term report) and a cost sheet; we use them only to compute your analysis, then erase them within about thirty minutes. With an account, your reports come from your connected Amazon account through Amazon’s API, and you enter your costs in the Cost tab. From those we keep the daily figures — impressions, clicks, orders, units, spend, sales and the like, per day per campaign, keyword, search term, or product — so your history builds up over time, along with the costs you entered so your profit figures stay accurate. We do not store raw report files.

Your account identity

When you create an account, sign-in is handled by Clerk, a specialist authentication service (see section 7). Clerk holds your email address and password; we never see or store your password. We store the account identifier Clerk gives us and your verified email address, so we can attach your history to you and no one else.

Technical records we keep to run the service

To keep the service working and safe, we record a small amount of operational information that contains none of your business data and does not identify you:

• Counts and timings — how many reports were run in an hour, how long a request took — with no personal or business detail attached.
• Error records for fixing faults: the type of error and a scrubbed message, with anything email-, key-, or token-shaped stripped out first.
• A random request identifier, so a single request can be traced through a fault without naming who made it.

We deliberately do not write your IP address, your email, any access token, or anything you uploaded or typed into our logs. Your IP address is used only in the moment, to enforce fair-use limits, and is not stored by us afterwards.

Your Amazon advertising data

Amazon requires anyone handling advertising data to treat it carefully, and we hold ourselves to that. When you have an account, your data reaches us through Amazon’s official Advertising API — only after you sign in to Amazon and grant permission, and only for your own account or an account you were given access to. Specifically:

• We only ever read your Amazon data. We do not make any changes to your Amazon account — we send no bid changes and nothing else back to Amazon. (If that ever changes, it will be something you switch on deliberately, and this policy will say so first.)
• We use your Amazon data only to provide the analysis and history features you asked for. We do not use it to build products about you, and we never sell or share it.
• We keep the daily performance figures for as long as your account needs them, and no longer than 18 months unless fresh data keeps arriving, in line with Amazon’s Data Protection Policy. Any personal information is kept no longer than 30 days.
• You can ask us to delete your Amazon data at any time, and we act on it (see section 10). You can also disconnect your Amazon account at any time to stop the tool pulling new data.

The AI-written summary

The tool can add a written, plain-English summary on top of the tables it computes. That one feature — and only that feature — sends data to Anthropic, the company behind the Claude AI model, to write the words.

• We send Anthropic a compact summary of the already-computed results — account-level totals, the top flagged items, campaign summaries. We do not send your raw report rows.
• Anthropic does not use data sent through its business API to train its models.
• Every number in your report is computed by our own software, not by the AI. The AI only explains and prioritises; it never invents or changes a figure.
• If this feature is switched off or unavailable, your full analysis and every download still work — only the written paragraph is missing.

Cookies

We use only the cookies the service needs to function. We do not use advertising cookies or third-party tracking cookies, and we do not follow you around the web.

• A sign-in cookie, so that once you have signed in you stay signed in for a short while. It is tied to your session and cannot be read by other sites.
• Clerk’s sign-in cookies, set on the account screens to keep you securely signed in.

If we ever add simple, privacy-respecting usage measurement to see which pages are most useful — so we can improve them — we will update this policy first, it will only ever be to improve the product for you, and it will never be shared or sold.

Who we share data with

We share data only with the small set of service providers that make the product run. Each one handles data on our instructions, under a contract, and for no purpose of its own. We do not sell data, and we do not share it with advertisers, data brokers, or other companies for their use.

We may also disclose information if the law requires it, or to protect the safety and rights of our users or the service. If our business is ever sold or merged, we will tell you before your data becomes subject to a different privacy policy.

How long we keep it

• Without an account: about thirty minutes, then erased automatically. Nothing is written to disk.
• Your account history: kept until you delete it or close your account. Amazon performance figures are kept no longer than 18 months of history unless fresh data keeps arriving; any personal information, no longer than 30 days.
• Technical records: operational metadata only (no personal or business data), kept up to 12 months, partly because Amazon requires operational logs to be retained.
• AI usage records: counts of usage and cost only, with no business content.

How we protect it

• Everything travels over an encrypted https connection.
• Passwords are never handled by us — Clerk holds them, and sign-in is checked on every request.
• One person can only ever see the accounts they are entitled to; every stored record is read behind an access check, and that guarantee is enforced by automated tests.
• Secrets and keys are never stored in our code, and never written to logs.
• Before launch, the service goes through a full security review and an independent penetration test by outside professionals.

Your choices and rights

Because your data is yours, you can:

• See it — your history is on your dashboard whenever you are signed in.
• Export it — download your data in ordinary spreadsheet and file formats.
• Delete it — remove your history, or close your account and have its data deleted.
• Withdraw — simply stop using the tool; with no account, there is nothing of yours to remove.

Depending on where you live, you may have additional rights under laws such as the GDPR (Europe) or the CCPA (California) — including the right to access, correct, delete, or object to certain uses of your data, and the right to complain to a regulator. To exercise any of these, contact us (section 14) and we will respond within the time the law allows. We will never charge you for making a request or treat you differently for making one.

Where your data is held

Your account data is stored on Amazon Web Services servers in the United States (currently the Ohio region). If you use the tool from outside the United States, your data is transferred to and processed in the United States. By using an account, you understand that this transfer takes place; where the law requires it, we rely on recognised safeguards for that transfer.

Children

Vantwyn is a business tool and is not intended for anyone under 18. We do not knowingly collect information from children. If you believe a child has given us information, contact us and we will delete it.

Changes to this policy

As the product grows — for example, when paid plans or the Amazon API connection arrive, or when we move to our permanent web address — we may update this policy. When we make a meaningful change, we will update the date at the top and, for significant changes, tell account holders directly. Using the service after a change means you accept the updated policy.

How to reach us

For any privacy question or request, contact NTC Inc at ntc@ntc321.com. [A postal address will be added here before launch.] We read and answer every privacy request.