Who we are
SMX LABS S.L., based in Barcelona, Spain, is the data controller for the processing described in this notice. This notice applies to the SMX Amazon Marketing Agent, an internal application used solely for SMX LABS' own authorised Amazon accounts.
Privacy contact: info@smxlabs.es
Information we access
The application may access, through Amazon's authorised APIs:
- Amazon account and advertising profile identifiers;
- campaigns, ad groups, targets, bids, budgets and performance metrics;
- search-term and attributed advertising performance data;
- product listings, offers, prices, inventory and fulfilment status;
- aggregated sales and product-performance information; and
- technical records needed to operate, secure and troubleshoot the connection.
The application is not designed to collect buyer names, postal addresses, payment-card details or Amazon customer login credentials.
How we use the information
We use this information only to:
- analyse advertising performance and product availability;
- prepare internal recommendations for campaigns, bids and budgets;
- monitor listings, inventory, pricing and advertising eligibility; and
- protect, maintain and audit the application.
During its initial phase, the application is read-only and does not change campaigns, bids, budgets, listings or inventory.
Legal basis and sharing
Processing is based on SMX LABS' legitimate interests in managing its own Amazon business and on the authorisation granted by the relevant Amazon account holder. We do not sell the information or use it to advertise to Amazon customers.
Information may be handled by Amazon and by carefully selected infrastructure providers acting under appropriate confidentiality, security and data-protection obligations. It is not disclosed to other parties unless required by law or necessary to protect legal rights.
Retention and security
Information is kept only for as long as necessary for the purposes above. Authorisation credentials are retained while the connection remains active and are deleted or invalidated when access is revoked. Operational records are retained according to necessity, security and legal requirements.
We apply access controls, least-privilege permissions, encryption in transit, protected secret storage and monitoring appropriate to the nature of the data. No internet transmission or storage system can be guaranteed to be completely secure.
Your choices and rights
The authorised Amazon account holder may revoke the application's access through Amazon at any time. Where applicable, individuals may request access, rectification, erasure, restriction, portability or objection, and may lodge a complaint with the Spanish Data Protection Agency or their local supervisory authority.
To make a privacy request or ask for deletion of information associated with an authorisation, contact info@smxlabs.es. We may need to verify the requester's identity and authority.
This page and updates
This page does not use advertising cookies, analytics or contact forms. We may update this notice when the application, applicable requirements or processing activities change. The latest revision date will appear above. Amazon's own processing is governed by Amazon's privacy notices.