Privacy Policy
This policy explains how Acetory Global Ltd. Şti. ("KarvanAI", "we") processes data collected through karvanai.com and the KarvanAI application.
1. Data controller
Acetory Global Dış Ticaret Ltd. Şti., Kılınçarslan Mah. Boyalı Sk. No: 3 İç Kapı No: 25, Selçuklu, Konya, Turkey. Tax ID 0051493791 (Meram Tax Office), MERSIS 0005149379100001. Privacy contact: info@karvanai.com.
2. Data we collect
- Account data: name, email, company name, billing details.
- Amazon data (only with your authorization): advertising campaigns and reports, search terms, order counts and amounts, Amazon fees, inventory, catalog and pricing data. We do not request or process buyer personally identifiable information (names, addresses, phone numbers).
- Usage data: session logs, IP address, browser information and cookies.
- Early access form: name, email, marketplace and ad spend range.
3. How we use data
We use data only to provide the service: profit and advertising analytics, AI-generated recommendations, reports, billing, support and service notices. Amazon data is never used for advertising targeting, profiling, or to provide information to other sellers.
4. Our commitments on Amazon data
- We do not sell, rent or share Amazon data with third parties.
- We access data with the minimum permissions needed and comply with Amazon's Acceptable Use Policy and Data Protection Policy.
- Changes to your account (for example bids or negative keywords) are made only with your approval or within automation rules you enable, and every change is logged.
- You can revoke access at any time from KarvanAI or from your Amazon account.
5. Retention and deletion
When you disconnect Amazon or delete your account, your Amazon data and access tokens are deleted from our systems and backups within 30 days. Invoices and accounting records are kept for the period required by Turkish tax and commercial law.
6. Security
Data is encrypted in transit (TLS 1.2+) and at rest (AES-256). Access tokens are stored in a dedicated key management service. System access is limited to authorized staff with mandatory multi-factor authentication. In the event of a security incident, we notify affected users and relevant parties without undue delay.
7. Service providers and international transfers
Our servers are hosted by Amazon Web Services in Frankfurt, Germany. Payments are processed by iyzico and emails by our email service provider. These providers access data only to provide services to us. International transfers follow the safeguards of Article 9 of Turkey's Personal Data Protection Law (KVKK) and, where applicable, the GDPR.
8. Cookies
We use strictly necessary cookies and analytics cookies for visit statistics. You can disable analytics cookies in your browser settings.
9. Your rights
Under KVKK Article 11 and, for users in the EU, the GDPR, you may request access to, correction or deletion of your data and object to processing. Contact info@karvanai.com; we respond within 30 days.
10. Changes
We may update this policy. Material changes are announced by email; the current date appears at the top of this page.