Privacy Policy

1. Introduction

WisePPC is a software-as-a-service (“Service”) provided by Crystal Logistics Corporation (“Company,” “we,” “us,” or “our”). This Privacy Policy explains what information we collect, how we use and protect it, who we share it with, how long we keep it, and how you can have it deleted.

WisePPC connects to the marketplace and advertising accounts you choose (Sections 6 and 7). If you turn it on, tools you choose can reach your data through MCP or API keys (Section 8). This policy covers our website, the WisePPC app and those connections.

2. Information We Collect

Account information: your name, email address, company details and the members of your business profile.
Billing information: your plan and billing details. Payments are processed by Stripe, which handles your card details.
Data from connected accounts: the data of the marketplace and advertising accounts you connect, described in Sections 6 and 7.
Buyer and customer data: where a channel provides it to you as the seller, details of your own buyers and customers, such as name, shipping address, email address and phone number (Section 6).
Change and access records: a record of each change requested for your connected accounts, whether it needed approval, who approved it and the result, and a record of the requests made with your API keys and connected tools.
Usage data: log files, IP addresses, browser details and analytics about how you use our website and the app.
Cookies and similar technologies: used for sign-in, preferences, analytics and advertising measurement. On our website, analytics and advertising cookies run only with your consent where the law requires it.

3. How We Use Your Information

To provide the Service: reports, dashboards and alerts built from the data of your connected accounts.
To run the rules you set up and to make the changes to your connected accounts that you request or approve (Section 6).
To answer your support requests and send you service updates and notices.
To bill you and manage your subscription.
To keep the Service secure and to prevent fraud and abuse.
To understand how our website and app are used, and to improve them.
To meet our legal obligations and the terms of the platforms you connect.

We do not sell data from your connected accounts or use it for advertising.

4. Where We Store Data and How We Protect It

We store and process data on Amazon Web Services (AWS).
Data is encrypted in transit (TLS) and at rest, including our databases and backups.
The authorization tokens for your connected accounts stay on our servers. They are never sent to your browser.
Only authorized staff can reach our production systems, through private networks.
No system is completely secure. You are responsible for keeping your WisePPC sign-in details confidential.
If a security incident affects your data, we will notify you, and the platforms whose data is affected, as the law and those platforms’ terms require.

We do not sell your personal data or the data of your connected accounts. We share data only:

With service providers that process it for us under contract and may use it only to provide their service to us: Amazon Web Services (hosting, storage, backups, email delivery and sign-in), Stripe (payments), Sentry and LogRocket (error and session monitoring, which can record what was on screen when an error happened), Chatwoot (in-app support chat), Slack (internal alerts), and Google and Meta (analytics and advertising measurement on our website and app, subject to your cookie choices).
With the platforms you connect, when WisePPC sends a change you requested or approved, or when a platform’s terms require us to report to it.
With tools you connect through MCP or API keys, at your direction (Section 8).
For legal reasons: when the law requires it, or to protect our rights, our users or the public.

6. Connected Marketplace and Advertising Accounts

This section applies to every channel you connect. Section 7 adds what differs for each channel.

How you connect: you sign in with the platform and approve the permissions WisePPC asks for or, where a platform works that way, you give us API credentials you created for WisePPC. You choose which accounts, stores or profiles to connect.
What we use the data for: only to provide the Service to your business profile: reports, dashboards, alerts, rules, and the changes you request or approve. Data from your channels is shown next to each other in your own account.
Who can see it: the members of the business profile that made the connection, and the tools they connect (Section 8). People at WisePPC look at your channel data only to give you support you ask for, to investigate security problems or abuse, or to comply with the law.
What we never do with it: sell it; use it for advertising or share it with other advertising services; combine it with other customers’ data or use it for benchmarks across customers; or use it to train, fine-tune or otherwise develop artificial-intelligence or machine-learning models.
Changes to your accounts: some connections let WisePPC make changes, such as to bids, budgets, campaigns or listings. WisePPC makes a change only when you request it, when a rule you set up calls for it, or when a tool you authorized requests it. Every change goes through a change queue and is applied with your authorization. For each API key you choose whether its changes wait for approval by a person in your business profile or are applied automatically. A read-only connection never changes anything.
Buyer and customer data: where a channel gives you, as the seller, details of your own buyers and customers, we process them only on your behalf, to show you your orders, returns and messages. Connected tools get them only if you explicitly allow it for a key, and every such read is logged. We keep them no longer than Section 7 states, and delete them sooner when the channel asks us to.
Our role: for the data in your connected accounts, including your buyers’ and customers’ personal data, we act as your service provider (processor). We process it only to provide the Service to you, as this policy and our Terms of Service describe. If you need a data processing agreement, contact us.
When access ends: access stops at once, and we delete the stored data of that account 30 days later, when any of these happens: you remove the connection in WisePPC; the authorization expires or is revoked on the platform; your WisePPC account or business profile is closed or its subscription ends; or the person who made the connection is removed from your business profile. If you reconnect within those 30 days, access and history return. Where a channel requires faster deletion, we follow it (Section 7). We keep an account’s data only while a business profile still has a live connection to that account.
Disconnecting: you can remove a connection in WisePPC at any time. To also remove WisePPC’s access on the platform, see Delete your data.

7. Channel-Specific Details

WisePPC adds channels over time. Each part below applies when you connect that channel.

7.1 Amazon

Amazon Ads and Amazon Attribution: you sign in with Amazon and allow WisePPC to manage your advertising. We receive and keep your advertising profiles, campaigns, ad groups, ads, keywords, targets, search terms, budgets, bids, performance reports and change history, and your Amazon Attribution tags and their results. With your authorization (Section 6), WisePPC can change campaigns, bids, budgets, keywords and targets. If you request an Amazon Attribution link for an advertiser account that does not use Amazon Attribution yet, Amazon enrolls that account in Amazon Attribution.
Amazon Seller Central: you authorize WisePPC in Seller Central. We receive your marketplaces, listings, inventory, orders, sales, fees, settlements, returns and the reports your account can access, including Brand Analytics. Some reports include order shipping details and, in some cases, the buyer’s name, address, email address and phone number. We keep those buyer details no longer than 30 days after the order is delivered, as Amazon requires. With your authorization, WisePPC can create, update and delete listings and cancel Multi-Channel Fulfillment orders.
Removing access on Amazon: in Seller Central, under Apps and Services, Manage Your Apps; for Amazon Ads, in your Amazon account’s settings for apps you have authorized.

7.2 Google

Which services: Google Ads and, when you connect them, Google Analytics 4, Google Search Console and Google Merchant Center.
How you connect: you sign in with Google and approve WisePPC’s access to the accounts, properties, sites or merchant accounts you choose.
What we receive and keep: for Google Ads, your accounts, campaign structure, ads, keywords, search terms, budgets, bids and performance metrics. For Google Analytics 4, Google Search Console and Google Merchant Center, the reports, search performance and product data of what you connected. WisePPC reads Google Ads data only and does not change your Google Ads accounts.
Limited Use: WisePPC’s use of information received from Google APIs will adhere to Google API Services User Data Policy, including the Limited Use requirements.
External access: Google data is not available through MCP or API keys.
Removing access: when the last connection to a Google account is removed in WisePPC, we revoke WisePPC’s access at Google. You can also remove WisePPC at any time in your Google Account permissions.

7.3 Meta (Facebook and Instagram ads)

How you connect: you sign in with Facebook and choose the business and ad accounts to connect. WisePPC asks for permission to read your ads data and, only if you allow WisePPC to make changes, to manage your ads.
What we receive and keep: your ad accounts, campaigns, ad sets, ads, budgets and performance insights. We use this data only to report on and manage your own campaigns, and we keep each advertiser’s data separate.
Deletion: if you remove WisePPC in your Facebook settings or ask Facebook to delete your data, Facebook tells us. We then stop access, remove your Facebook identifiers at once and delete the remaining data within 30 days. See Delete your data.
External access: Meta data is not available through MCP or API keys.

7.4 Microsoft Advertising

How you connect: you sign in with your Microsoft account and allow WisePPC to manage your Microsoft Advertising accounts.
What we receive and keep: your accounts, campaigns, ad groups, ads, keywords, budgets, bids and performance reports. Any change follows Section 6.
Removing access: you can withdraw WisePPC’s access at any time at account.live.com/consent/Manage (personal Microsoft accounts) or myapps.microsoft.com (work or school accounts).
External access: Microsoft Advertising data is not available through MCP or API keys.

7.5 TikTok

How you connect: you sign in with TikTok for Business and allow WisePPC to access your ad accounts, ads management and reporting.
What we receive and keep: your advertiser accounts, campaigns, ad groups, ads, budgets and reporting data. Any change follows Section 6.
Sharing: we act as your service provider for TikTok data and share it with others only for your own advertiser account or with TikTok’s permission.
External access: TikTok data is not available through MCP or API keys.

7.6 Pinterest

How you connect: you sign in with Pinterest and approve WisePPC’s read-only access to your ads data (Pinterest permissions “ads:read” and “user_accounts:read”). WisePPC cannot create, change or publish Pins, boards or ads, and does not read your Pins, boards or followers.
What we receive and keep: your Pinterest user ID, username and account type; the ad accounts you can access (ID, name, currency, country, time zone and your role on each); and campaign analytics for the ad accounts you choose to connect, such as spend, impressions, clicks and conversions, with the campaign, ad group and ad identifiers and names that come with those reports. We also keep the authorization tokens that let us refresh this data on a schedule.
How we use it: only to show you reports and dashboards for your own account, next to your other connected channels.
Deletion: we delete Pinterest data no later than 28 days after our access ends for any reason listed in Section 6, and within 30 days if Pinterest asks us to. To remove WisePPC’s access on Pinterest’s side, go to your Pinterest settings, Security, and remove WisePPC.
External access: Pinterest data is not available through MCP or API keys.

7.7 eBay

How you connect: you sign in with eBay and approve WisePPC’s access to your listings, inventory, Promoted Listings, orders, finances, account and messages. We never ask for your eBay password.
What we receive and keep: your listings and inventory, Promoted Listings campaigns, ads and reports, orders, payouts and finance transactions, traffic and seller standards, and your buyer messages and the replies you send.
Buyer details: a buyer’s name, address, phone number and email address are kept only for orders from the last 120 days, then cleared. Buyer messages follow eBay: a message deleted on eBay is deleted here.
Changes: with your authorization (Section 6), WisePPC can change Promoted Listings, listings and inventory, and send your replies to buyer messages.
eBay account deletion: when eBay tells us that an eBay user has closed their account, we delete that user’s data promptly.
External access: buyer details and messages are available to a key only if you explicitly allow it, and every read is logged.

7.8 Walmart

How you connect: you authorize WisePPC in Walmart Seller Center, or give us API credentials you created for WisePPC.
What we receive and keep: your orders, returns, items, inventory, pricing, promotions and performance, settlement and other reports, and the notifications Walmart sends for your account.
Buyer details: buyer details on orders and returns are cleared 120 days after the order. We never use them to contact Walmart customers.
Changes: any change follows Section 6.
Removing access: when you disconnect, we delete your credentials. To make sure they can no longer be used, also regenerate or delete them in Walmart Seller Center.

7.9 Shopify

How you connect: you install the WisePPC app in your Shopify admin and approve its permissions.
What we receive and keep: your orders, products, inventory, discounts, marketing events and reports and, where you allow it, your customers’ name, email address, phone number and address. Every read of customer details is logged.
Retention: order addresses are deleted after 365 days. Customer details are deleted when Shopify asks us to remove a customer’s data, or when your store’s data is deleted.
Shopify privacy requests: when Shopify forwards a customer’s request for their data, we provide it to you within 30 days. When Shopify asks us to delete a customer’s data or your store’s data (48 hours after you uninstall the app), we delete it within 30 days.
Changes: any change follows Section 6.
Removing access: uninstalling the app in your Shopify admin stops our access at once.

8. External Access: MCP and API Keys

You can let tools you choose reach your WisePPC data, for example AI assistants that support MCP, or your own scripts using our REST API.

Signing in from a supported AI app connects that app to one business profile with read-only access. A business owner or admin can let it see more or request changes (Section 6); it can never approve a change itself. How the sign-in works.
API keys are created in WisePPC. Each key has its own permissions: which accounts and data it can read, which changes it can request, and whether those changes wait for approval (Section 6).
Buyer and customer personal data is off by default. You must allow it for each key, and every read is logged.
Data a tool reads leaves WisePPC and is handled by that tool’s provider under its own terms. You choose the tools you connect and are responsible for them.
Some channels are excluded: Section 7 lists the channels whose data is not available through MCP or API keys.
You can revoke a key or a connected tool at any time.

9. Your Rights and Choices

Depending on where you live, you may have the right to access, correct, delete or export your personal information, to object to or restrict how we use it, to withdraw consent, and to opt out of marketing emails.

To make a request, email legal@wiseppc.com. We may need to confirm your identity, and we answer within 30 days.
To delete the data of a connected account, or your whole WisePPC account, see Delete your data.
If you are a buyer or customer of a seller who uses WisePPC, please contact that seller. We will help them answer your request.
We comply with applicable data protection laws, including the GDPR and the CCPA. Users in the EU, the UK and California can ask how their data is used.

10. Data Retention

Account information: kept while your account is active and deleted within 30 days after your account is closed, except records we must keep by law.
Data from connected accounts: see Sections 6 and 7.
Logs: kept for up to 90 days. Records of the tool calls that connected tools make (which tool, when, how much data and any error, without the values sent) are kept for up to one year.
Backups: encrypted and kept for up to 30 days, then deleted. Data deleted from the Service disappears from backups when they expire.
Billing and tax records: kept as long as the law requires.

11. Third-Party Links and Integrations

Our website and app link to third-party websites and platforms, including the channels you connect. Their own privacy policies apply to them. Please review their terms before you share data with them.

12. Changes to This Privacy Policy

We may update this Privacy Policy. We will post the new version here with a new “Last updated” date. If a change affects how we use data from your connected accounts, we will tell you in the app or by email before it takes effect and, where a platform requires it, ask for your consent again.

13. Contact Information

For questions about this Privacy Policy, to make a privacy request, or to report a privacy or security concern, contact Crystal Logistics Corporation at legal@wiseppc.com.