Privacy Policy

Last updated: July 2026

This Privacy Policy explains how Ecom Wizard collects, uses, stores and protects your personal data when you use our website and services. Ecom Wizard is a trading name of Online Customer Solutions Ltd (“we”, “us”, “our”), a company registered in England and Wales (Company No. 15276241, VAT No. GB458790148). We are the data controller for the personal data described in this policy.

1. Information we collect

• Account information — your name, email address and password (stored securely, hashed) when you create an account.
• Business & product content — brand details, product information, keywords, images and other content you add so we can generate and optimise your listings.
• Billing information — plan, subscription status and transaction history. Card payments are handled by our payment processor (Stripe); we do not store your card details.
• Connected account data — where you choose to connect a marketplace or advertising account (for example your Amazon Advertising account), we access data from that account through the provider's official API to deliver the features you request (see section 3).
• Usage & technical data — how you use the service, plus standard technical information such as IP address, browser type and device information.

2. How we use your information

We use your personal data to:

• provide, operate and improve the service (generating and optimising listings, keyword research, ad review and advice);
• process your subscription and payments;
• communicate with you about your account, support requests and service updates;
• maintain the security and integrity of the service; and
• comply with our legal obligations.

Our lawful bases under UK GDPR are: performance of a contract (to provide the service you sign up for), legitimate interests (to run, secure and improve our business), consent (where required, e.g. certain cookies or marketing), and legal obligation (e.g. accounting records).

3. Connected marketplace & advertising accounts (including Amazon Advertising)

When you connect a third-party account — such as your Amazon Advertising account — you authorise us, through that provider's official API and secure OAuth authorisation, to access data such as your advertising campaigns, performance metrics, account information and reports. We use this data solely to provide the features you have asked for — reporting on performance, surfacing wasted spend, recommending optimisations and, where you enable it, managing your campaigns.

• We access only the data needed to provide these features, and only for accounts you have connected.
• We do not sell this data, and we do not use it for advertising to third parties.
• We store it securely and use it only to deliver the service to you.
• You can disconnect a connected account at any time, and you can ask us to delete the associated data (see section 8).
• Our handling of Amazon Advertising data complies with the applicable Amazon Advertising API terms and data-protection requirements.

4. AI processing

Our features are powered by AI. To generate and optimise content, the product and business information you provide is sent to trusted AI providers (such as Anthropic and OpenAI) to process your request and return a result. These providers act as our processors and do not use your content to train their models under our business terms.

5. How we share your information

We share personal data only with trusted service providers who process it on our behalf under contract, including:

• Supabase — database, authentication and secure data storage;
• Vercel — website and application hosting;
• Stripe — payment processing;
• Anthropic & OpenAI — AI content generation and image analysis;
• Resend — transactional email;
• Amazon and other marketplaces — only where you connect your account, via their official APIs.

We do not sell your personal data. We may disclose data where required by law or to protect our legal rights.

6. International transfers

Some of our providers are located outside the UK/EEA. Where personal data is transferred internationally, we rely on appropriate safeguards such as the UK International Data Transfer Agreement or the European Commission's Standard Contractual Clauses.

7. Data retention

We keep your personal data for as long as your account is active and as needed to provide the service. If you close your account, we delete or anonymise your personal data within a reasonable period, except where we must retain certain records (e.g. for accounting or legal compliance).

8. Your rights

Under UK GDPR you have the right to access, correct, delete or restrict processing of your personal data, to object to processing, and to data portability. To exercise any of these rights, or to disconnect and delete data from a connected account, email us at support@ecomwizard.co.uk. You also have the right to complain to the UK Information Commissioner's Office (ICO).

9. Data security

We use industry-standard measures to protect your data, including encryption in transit, access controls and secure, reputable infrastructure providers. No system is completely secure, but we take reasonable steps to protect your information.

10. Cookies

We use essential cookies to run the service (for example to keep you signed in). We may also use analytics or advertising cookies; where these are not essential we will ask for your consent.

11. Children

Our service is intended for businesses and is not directed at children under 16. We do not knowingly collect data from children.

12. Changes to this policy

We may update this policy from time to time. We will post the updated version here and change the “Last updated” date above.

13. Contact us

Online Customer Solutions Ltd (trading as Ecom Wizard)
Company No. 15276241 · VAT No. GB458790148
Email: support@ecomwizard.co.uk