Last Updated: April 21, 2025
Introduction. 1stPage LLC (referred to as “1stPage,” “Company,” “we,” “us,” or “our”) is committed to protecting your personal information and respecting your privacy. This Privacy Policy describes how we collect, use, disclose, and safeguard your personal data when you use 1stPage’s Amazon seller analytics platform (the “Service”), which pulls Amazon Brand Analytics and Advertising API data via Amazon’s Selling Partner API (SP-API), stores data in Amazon Web Services (AWS) RDS, and presents insights through a Retool/React interface hosted on AWS. It also explains your rights under the EU General Data Protection Regulation (“GDPR”) and the California Consumer Privacy Act (“CCPA”), and other applicable laws. By using our Service or providing us with personal information, you agree to the practices described in this Privacy Policy. If you do not agree with this Policy, please do not use the Service.
This Privacy Policy applies to personal information collected through our website and Service, as well as related services, sales, or marketing communications. Please read it carefully to understand what information we collect, how we use it, and what rights you have (VendorJump (ProductJump LLC) Privacy Policy) (VendorJump (ProductJump LLC) Privacy Policy). If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at privacy@1stpage.com.
In Short: We collect personal information that you provide to us, information from your Amazon accounts (via APIs), and some data automatically when you use our Service.
Information You Provide. We collect personal information you voluntarily provide when registering for or using the Service, contacting us, or otherwise interacting with 1stPage. This may include:
All personal information that you provide must be true, complete, and up-to-date, and you should notify us of any changes.
Information from Amazon Services. With your authorization, our Service connects to Amazon’s APIs (including Brand Analytics and Advertising API) to retrieve data related to your Amazon seller account and brand. This data may include analytics and performance metrics for your products (such as search query volumes, impressions, clicks, add-to-cart data, sales data, advertising spend and results, etc.) and other information available via Amazon Brand Analytics and Advertising reports. We associate this data with your account on our platform to display it back to you in our analytics interface. While this Amazon-derived data is generally business performance data and not personal data about you or your customers, it may sometimes include or be linked to personal identifiers (for example, your Amazon account ID or, in certain reports, aggregated customer geographic or demographic information). We handle all data from Amazon in accordance with this Policy and Amazon’s data protection requirements.
Information Collected Automatically. When you use our website or Service, we may automatically collect certain technical information about your device and usage of our platform. This can include:
We may use cookies or similar tracking technologies to remember your login session and preferences, and to gather analytic information about how users navigate our site. (For more details, see our Cookie Notice, if applicable.) This automatically collected data typically does not reveal your identity directly, but may be paired with your account information such that it could be considered personal data in certain contexts.
We do not knowingly collect any sensitive personal data such as social security numbers, government ID numbers, financial account passwords, precise geolocation, or biometric identifiers, except as necessary for authentication or payment processing as described above. We also do not knowingly collect information from children (see Section 6 below).
In Short: We use personal information to provide and improve our Service, process payments, communicate with you, ensure security, and comply with law. We rely on specific legal bases to process personal data under GDPR.
We use the information we collect for the following purposes:
Legal Bases for Processing (GDPR): If you are located in the European Economic Area (“EEA”) or United Kingdom, we only process your personal information when we have a valid legal basis. The legal bases we rely on include: (a) Performance of a Contract – We process personal data to provide the Service you have requested (i.e. to fulfill our contractual obligations to you) (VendorJump (ProductJump LLC) Privacy Policy), such as using your information to set up your account and retrieve Amazon data as part of our Service. (b) Legitimate Interests – We may process data as necessary for our legitimate business interests, provided those interests are not overridden by your data-protection rights (VendorJump (ProductJump LLC) Privacy Policy). For instance, we have a legitimate interest in understanding usage of our Service, ensuring network security, and improving our platform. We only rely on this basis after considering the potential impact on your rights. (c) Consent – In some cases, we ask for your consent to process certain information, for example, if we want to send optional marketing emails. Where we rely on consent, you have the right to withdraw it at any time (VendorJump (ProductJump LLC) Privacy Policy) (withdrawing consent will not affect the lawfulness of processing before withdrawal). (d) Legal Obligation – We will process personal data where needed to comply with a legal obligation (VendorJump (ProductJump LLC) Privacy Policy) (such as retaining transaction records for tax law). (e) Vital Interests – Although unlikely, we may process data if necessary to protect someone’s vital interests (VendorJump (ProductJump LLC) Privacy Policy), for example in urgent situations involving potential harm.
In Short: We do not sell your personal information. We only share it in limited situations, such as with trusted service providers (processors) to operate our Service, if required by law, or as part of a business transfer.
We treat your personal data with care and confidentiality. We will never sell your personal information to third parties for their own marketing or profit (VendorJump (ProductJump LLC) Privacy Policy). We may disclose information to the following categories of recipients, and only for the purposes described:
Importantly, when our Service accesses your data from Amazon (via SP-API), that data transfer is between our application and Amazon on your behalf. We do not disclose your Amazon-provided data to any third party other than as necessary to host it on our systems (e.g., AWS) or as directed by you. We do not use your data for any purpose unrelated to providing the Service to you, and we do not allow our service providers to use it for their own purposes.
In Short: We keep your personal data only as long as needed for the purposes described, and as required by law. When it is no longer needed, we will delete or anonymize it.
We will retain your personal information for as long as you maintain an account with us or as long as is necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law (Privacy Policy – Network Readiness Index). This means we generally keep your profile, contact information, and Amazon-related data for the duration of your subscription or use of the Service. If you cancel your account or your subscription lapses, we will delete or anonymize your personal data upon your request, or after a defined period following the end of our relationship (for example, we may retain data for a short period to see if you reactivate, or as needed for our internal backup, audit, and legal purposes) (Privacy Policy – Network Readiness Index).
In determining retention periods, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure, the purposes of processing, and whether those purposes can be achieved by other means. For instance, we may retain certain transactional records (like invoices or payment records) for several years to comply with tax and accounting laws. Similarly, server logs and backup archives may be kept securely for a limited time before automated deletion.
When we have no ongoing legitimate business need or legal requirement to process your personal information, we will either permanently delete it or render it anonymized/unidentifiable. If immediate deletion is not feasible (for example, because the data is stored in secure backups), we will isolate and protect the data and then delete it as soon as possible (Privacy Policy – Network Readiness Index).
In Short: We use technical and organizational measures to secure your data. However, no system is 100% secure, so we cannot guarantee absolute security of information.
We have implemented appropriate physical, technical, and administrative security measures to protect the personal information we process. These measures include encryption of sensitive data at rest and in transit (for example, we encrypt your Amazon API tokens and passwords in our database), use of secure protocols (HTTPS) for data transmission, access controls to restrict who within our organization can access personal data, and regular monitoring for vulnerabilities. We also maintain policies and procedures to handle any suspected data breaches, including notifying you and/or authorities as required by law.
Despite our efforts, please note that no method of electronic transmission or storage is completely secure or foolproof. We cannot guarantee that unauthorized parties will never be able to defeat our security measures and access or misuse your data (VendorJump (ProductJump LLC) Privacy Policy). For example, Internet communications can be subject to interception, and software vulnerabilities may be exploited despite precautions. You use the Service and provide personal information at your own risk. We encourage you to use strong passwords, protect your login credentials, and use our Service in a secure environment (for instance, avoid using public Wi-Fi without security) (VendorJump (ProductJump LLC) Privacy Policy). If we become aware of a data breach affecting your personal information, we will notify you and relevant regulators as legally required.
In Short: Our Service is not intended for individuals under 18, and we do not knowingly collect data from minors.
1stPage’s Service is designed for business use by adult professionals (Amazon sellers and brand owners). We do not knowingly solicit or collect personal information from children under 18 years of age. If you are under 18, please do not use the Service or provide any information to us. By using the Service, you represent that you are at least 18 years old (or the age of majority in your jurisdiction) or that you are the parent/guardian of a minor who is using the Service with your consent (VendorJump (ProductJump LLC) Privacy Policy).
If we learn that we have inadvertently collected personal information from someone under 18 without appropriate consent, we will take steps to delete that information promptly. For example, if a minor is discovered to have created an account, we will deactivate the account and remove the data (VendorJump (ProductJump LLC) Privacy Policy). If you believe we might have any information from or about a minor under 18, please contact us immediately at privacy@1stpage.com so that we can investigate and address the issue.
In Short: Depending on your location, you have certain rights regarding your personal data. Users in the EEA/UK can exercise GDPR rights (access, correction, deletion, objection, etc.). California residents have CCPA rights (access, deletion, opt-out of sale, non-discrimination), as detailed below. We provide tools or channels for you to exercise these rights.
Rights for EEA, UK, and Other Regions
If you are located in the European Economic Area (EEA), United Kingdom, or other jurisdictions with similar data protection laws, you have specific rights under GDPR or equivalent laws. These rights may include:
To exercise any of these rights, please contact us at privacy@1stpage.com with your request. We may need to verify your identity before fulfilling certain requests (for example, by asking you to confirm information associated with your account). We will respond to your request within the timeframes required by applicable law and will let you know if any exceptions apply that prevent us from fulfilling the request in whole or in part. For example, if you request deletion, we might retain certain information if required for legal compliance.
If you are in the EEA or UK and have concerns about our data practices, you also have the right to lodge a complaint with your country’s data protection supervisory authority. You can find contact details for your data protection authority here: **http://ec.europa.eu/justice/data-protection/bodies/authorities/index_en.htm** (VendorJump (ProductJump LLC) Privacy Policy). We would, however, appreciate the chance to address your concerns directly before you approach a regulator, so please feel free to contact us first.
California Privacy Rights (CCPA)
If you are a California resident, you are protected by the California Consumer Privacy Act (CCPA) (as amended by the California Privacy Rights Act, “CPRA”). Under the CCPA, California residents have the following rights with respect to their personal information:
Categories of Personal Information Collected and Disclosed: In the past 12 months, we have collected the following categories of personal information (as defined by CCPA) from California consumers: Identifiers (such as name, email address, IP address, and account identifiers); Customer Records Information (contact details and payment information provided by users); Commercial Information (subscription plan, billing history, and usage details of our Service); and Internet or Network Activity (log and usage data as you interact with our website/application). We collect these categories of information directly from you or automatically through your interaction with the Service, and use them for the business purposes described in Sections 2 and 3 of this Policy (such as providing the Service, maintaining security, processing payments, and improving our platform). We have disclosed some of these categories of personal information to service providers (cloud hosting, payment processors, etc.) in the past 12 months for business purposes, as explained in Section 3. We have not sold any personal information in the preceding 12 months (VendorJump (ProductJump LLC) Privacy Policy), and we do not sell personal information. We also do not have actual knowledge of selling personal information of consumers under 16.
Exercising Your California Rights: If you are a California resident and wish to exercise your Right to Know, Right to Delete, Right to Correct, or to exercise any other CCPA rights, you (or an authorized agent acting on your behalf) may submit a request to us by emailing privacy@1stpage.com with the subject line “CCPA Request” and detailing your specific request. We will need to verify your identity (or your agent’s authority) before processing the request, which may involve asking you to provide certain information or to log into your account. For requests to know or delete, we will endeavor to verify identity to a “reasonable degree of certainty” or “high degree” depending on the sensitivity of the data involved, per CCPA regulations.
Upon receiving a verifiable request, we will respond within 45 days as required by CCPA (or notify you if we need an extension). For deletion requests, we will specify the manner in which we deleted your data or, if we must deny the request due to an exemption, the reason for denial. For access requests, we will provide either the specific pieces of personal data or the categories of data and additional information as required. For correction, we will confirm the correction or explain if we cannot comply. You also have the right, at any time, to direct us not to sell or share your personal information (though, as noted, we do not sell data). If we ever engaged in selling data, we would provide a “Do Not Sell or Share My Personal Information” link on our website to facilitate opt-out requests (VendorJump (ProductJump LLC) Privacy Policy).
We will not charge you for making any CCPA request, and we will not discriminate or retaliate against you for exercising these rights (VendorJump (ProductJump LLC) Privacy Policy).
Some web browsers or devices include a “Do Not Track” (“DNT”) feature that signals your preference for privacy and not having data about your online activities monitored and collected. At this time, we do not respond to DNT signals or similar mechanisms, because there is no consistent industry standard for compliance. We treat all users’ data in accordance with this Privacy Policy, and will continue to monitor developments around DNT browser technology and may re-evaluate our approach if standards emerge.
1stPage LLC is a company operating in the United States. If you are accessing the Service from outside the U.S. (such as from the European Union or other regions with data protection laws), please be aware that your personal information will likely be transferred to and processed in the United States. This means your data will be stored on servers located in the U.S. (for example, on AWS servers in a U.S. data center) and may be accessible by our staff and service providers in the U.S.
The U.S. may not have the same level of data protection as your home jurisdiction. To ensure that your personal information is protected when transferred internationally, we rely on appropriate safeguards as required by GDPR and other laws. In particular, for personal data originating from the EEA or UK, we implement measures such as the European Commission’s Standard Contractual Clauses (SCCs) for data transfers (Standard Contractual Clauses (SCCs) - TermsFeed), which are standard data protection clauses that contractually obligate recipients of the data outside the EEA to protect it according to EU standards. These SCCs, along with our security measures (encryption, access controls, etc.) and operational policies, are designed to ensure that your personal information remains protected and that your rights are preserved even when your data is transferred to a country with differing privacy laws. We may also rely on the fact that the transfer is necessary for the performance of our contract with you (the provision of the Service you requested) when applicable.
By using the Service or providing us with information, you explicitly consent to the transfer of your personal data to the United States (and to other jurisdictions where our service providers may be located, such as countries in which AWS operates) for the purposes described in this Policy. We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Policy. If you would like more information about our international data transfer practices or to obtain a copy of the relevant safeguards we have in place, you can contact us at privacy@1stpage.com.
We may update or revise this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or for other operational reasons. If we make material changes, we will notify you by email (sent to the address specified in your account) or by prominently posting a notice on our website or within the Service prior to the change becoming effective. The “Last Updated” date at the top of this Policy indicates when the latest changes were made.
Your continued use of the Service after any updates to this Privacy Policy become effective will constitute your acceptance of the changes. However, if any changes materially affect how your personal data is handled, we will obtain any required consent from you (if applicable under law). We encourage you to review this Policy periodically to stay informed about how we protect your information.
If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us by email at privacy@1stpage.com or in writing at: 1stPage LLC – Privacy Office, 12175 Visionary Way, Fishers, IN 46038. We will do our best to address your inquiry promptly and thoroughly.