Last updated: 14 August 2026
This Privacy Policy explains how AMZTarget (“we”, “us”), a service operated from Ireland (European Union), processes personal data when you use https://www.amztarget.com and related apps.
We process personal data in line with the EU General Data Protection Regulation (GDPR) and applicable Irish law. For privacy requests contact support@amztarget.com.
1. Data controller
AMZTarget is the controller for account, product-monitoring, and support data.
Payments: paid orders are processed by Paddle.com Market Ltd (and its affiliates). Paddle is the Merchant of Record and acts as an independent controller (or as described in Paddle’s own privacy notice) for payment card, tax, and invoice data. We do not store full card numbers.
Paddle privacy information: https://www.paddle.com/legal/privacy
2. Data we collect
- Account — email, name, password hash, marketplace, timezone (to create and secure your account).
- Usage — products (ASINs), keywords, schedules, alert settings, tracking history (to provide the Service).
- Technical — IP address, browser/user-agent, approximate location from IP, server logs (security, abuse prevention, debugging).
- Communications — support emails (help and refunds).
- Amazon (optional) — SP-API tokens / seller identifiers when you connect a seller account (repricer and webhook features; stored encrypted).
- Payments (via Paddle) — email, country, and tax identifiers as collected by Paddle; we store Paddle customer/subscription ids (billing, invoices, tax). Full card numbers are not stored by AMZTarget.
We also use Google reCAPTCHA on login and registration (IP and device signals sent to Google) and optional Google OAuth if you sign in with Google. See Google Privacy Policy.
Cookies: session cookie (essential), language preference (app_locale), CSRF/auth cookies, and reCAPTCHA/Google cookies on login and registration. When the homepage rotates between feature landings, a necessary cookie (amz_home, 90 days) remembers which landing you were shown. AMZTarget's visitor/session analytics cookies (amz_vid, amz_sid) are set only after statistics opt-in. Advertising cookies (Google Ads / Tag Manager, Meta Pixel, Reddit Pixel) are controlled separately by marketing consent.
2a. Cookies, Cookiebot, and ads
We use Cookiebot (Usercentrics A/S) as our consent management platform. The banner lets you accept, reject, or customise categories (necessary, preferences, statistics, marketing). Cookiebot stores your choice and keeps a consent log. Cookiebot’s privacy notice: https://www.cookiebot.com/en/privacy-policy/.
For every public-page request we keep an anonymous daily aggregate by page, named call-to-action, language, landing variant, and campaign tags. This aggregate has no visitor/session identifier and does not store IP address, user agent, full URL, query string, email, ASIN, or clicked text.
If you allow statistics cookies, AMZTarget additionally creates random visitor and 30-minute session identifiers. Only HMAC hashes of those identifiers are stored with page views and explicitly named call-to-action clicks. If you then create an account, the visitor may be linked to that account so we can measure the path from campaign to registration and product activation. Withdrawing statistics consent deletes the browser identifiers and stops new detailed events; anonymous totals continue.
If you allow marketing cookies we may load:
- Google Ads / Google Tag Manager (Google Ireland / Google LLC) — conversion and remarketing; Google Consent Mode v2 defaults to denied until you opt in. Google Privacy Policy
- Meta Pixel and Conversions API (Facebook) (Meta Platforms Ireland) — ads measurement and remarketing. The pixel is initialised with consent revoked, and server conversion events are not sent, until Cookiebot reports marketing opt-in. When enabled, conversion data may include a one-way hashed email/account identifier, IP address, browser user agent, Meta click/browser identifiers, and purchase value/currency. Browser and server copies share an event ID so one action is not counted twice. Meta Privacy Policy
- Reddit Pixel and Conversions API (Reddit, Inc.) — ads measurement. The pixel and the server event run only after Cookiebot marketing opt-in, and only when a new account is attributed to Reddit. Conversion data may include a one-way hashed email and account identifier, IP address, browser user agent, and the Reddit click id. Browser and server copies share a conversion ID so one registration is not counted twice. Reddit Privacy Policy
You can reopen the banner via Cookie settings in the footer. An up-to-date list of cookies detected on this site appears in the Cookiebot declaration below (when Cookiebot is configured).
3. Legal bases (GDPR Art. 6)
- Contract — to provide the Service you requested (account, monitoring, paid subscription).
- Legitimate interests — security, fraud prevention, improving reliability, and anonymous aggregate traffic measurement.
- Consent — visitor/session analytics under the statistics category and advertising (Google Ads, Meta Pixel, Meta Conversions API, Reddit Pixel, Reddit Conversions API) under marketing. You can change or withdraw this at any time (footer Cookie settings).
- Legal obligation — tax and accounting records (often held by Paddle as MoR).
4. Sharing with third parties
We do not sell personal data. We share data with processors/controllers who help run the Service:
- Paddle.com Market Ltd — to run checkout, subscriptions, invoices, VAT/sales tax, refunds, and fraud checks. Transaction data is transferred to Paddle for this purpose.
- Hosting, email, Redis/MySQL infrastructure — to operate the app.
- Google — reCAPTCHA, optional OAuth, and (with marketing consent) Google Ads / Tag Manager.
- Meta / Facebook — Meta Pixel and Conversions API, only with marketing consent.
- Reddit — Reddit Pixel and Conversions API, only with marketing consent, and only for a registration attributed to Reddit.
- Cookiebot (Usercentrics) — consent banner and cookie scan.
- Telegram — if you connect a chat/channel for alerts (chat id and message content you configure).
- Amazon — if you connect SP-API (calls on your behalf).
Transfers outside the EEA (if any) use appropriate safeguards (e.g. Standard Contractual Clauses) as provided by those vendors.
5. Retention
We keep account and monitoring data while the account is active. Detailed first-party analytics events and visitor links are retained for up to 395 days; anonymous daily aggregates for up to 790 days. After account deletion or long inactivity we delete or anonymise data within a reasonable period unless law (or Paddle’s tax retention) requires longer. Payment records may be retained by Paddle as required for tax.
6. Your rights (GDPR)
You may request access, rectification, erasure, restriction, portability, and objection, and you may withdraw consent where processing is based on consent. Email support@amztarget.com. You may lodge a complaint with the Irish Data Protection Commission (dataprotection.ie) or your local EU supervisory authority.
7. Security
Passwords are hashed. Seller credentials are stored encrypted. Access to production systems is restricted. No method of transmission is 100% secure.
8. Children
The Service is for businesses and adults. We do not knowingly collect data from children under 16.
9. Changes
We will post updates on this page (/privacy). Material changes may also be notified by email.