Amplivus Privacy Policy

1. Who We Are

Amplivus LLC ("Amplivus," "we," "us," or "our") is an Amazon PPC management agency based at 5200 Lake Shore Dr, Waco, TX 76710, United States. This Privacy Policy explains, in plain terms, what information we collect and how we use, store, and share it when you visit amplivus.com, book a call, request an audit, or become a client.

This policy applies to anyone who interacts with our website, our marketing channels, or our services.

If you have any questions about this policy, contact us at contact@amplivus.com.

2. Information We Collect

Information you give us directly

• Contact and identifying information when you fill out a form (an audit request, the contact form, a newsletter sign-up, or the offer box that opens on some pages), book a strategy call, or email us. This includes your name, business email, company or brand name, Amazon store or website URL, your monthly ad spend range and marketplace, and any details you choose to share about your Amazon business.
• Account access information if you engage our services. To manage your Amazon Ads, you may grant us delegated access to Amazon Seller Central, the Amazon Ads console, or related platforms. We do not request or store your account passwords.
• Billing information when you become a paying client. Card details are processed by our payment processor; we do not store full payment card numbers.
• Communications including the content of emails, chat messages, and meeting notes you share with us during onboarding and ongoing engagement.

Information collected automatically

When you visit amplivus.com, we automatically collect some technical data about the visit, including:

• IP address (truncated where required by law)
• Browser type, version, and language
• Device type, operating system, and screen size
• Referring URL and pages visited
• Time spent on pages and click behavior
• Approximate geographic location (city / country)

This is collected through Google Tag Manager, which loads Google Analytics 4 and Microsoft Clarity, and through Leadfeeder, which can show us the name of the company behind a visit when it comes from a business network. These tools start after you first interact with a page or a few seconds after it loads, and the ones that need your permission run only if you allow them. See Section 5 for cookie details.

Information from third parties

We may also receive limited information about you from a few third parties, including:

• Public information from your company website or LinkedIn profile when researching a prospect
• Information from Amazon's reporting APIs when you grant us access to your Amazon advertising account during an engagement
• Referral information from existing clients or partners

3. How We Use Your Information

We use your information to:

• Respond to your inquiries, schedule calls, and deliver requested audits
• Provide, operate, and improve our PPC management services
• Send service-related communications (reports, account updates, invoices)
• Send marketing communications about our services (you can opt out at any time)
• Comply with legal obligations (tax, accounting, regulatory)
• Detect and prevent fraud, abuse, or security incidents
• Improve our website performance and user experience
• Build aggregated, de-identified insights about Amazon advertising performance (never tied back to you or any specific client)

We do not sell your personal information.

4. Legal Bases for Processing (EU / UK Visitors)

If you are located in the European Economic Area, the United Kingdom, or Switzerland, we rely on the following legal bases under the General Data Protection Regulation (GDPR) or UK GDPR:

• Performance of a contract or steps to enter one: responding to your inquiry or audit request.
• Performance of a contract: delivering paid services to clients.
• Your consent (which you may withdraw at any time): sending marketing emails where consent is required.
• Our legitimate interests: improving our website, security, and fraud prevention.
• Legal obligation: tax, accounting, and regulatory compliance.
• Our legitimate interests: aggregated analytics and research.

5. Cookies and Tracking Technologies

We use cookies and similar tracking technologies on amplivus.com. There are four types:

Essential cookies are required for the site to function. Examples include the cookie that remembers your consent choice and Cal.com cookies when you book a call.

Functional cookies remember settings you choose, such as the display options in the UserWay accessibility widget.

Analytics cookies measure how visitors use the site. We use Google Analytics 4 and Microsoft Clarity (session recording and heatmaps), both loaded through Google Tag Manager, and Leadfeeder (which companies visit the site).

Marketing cookies support ad attribution and retargeting. Marketing tags, such as Meta Pixel for Facebook and Instagram ads, may be added through Google Tag Manager and run only if you allow marketing cookies.

We use the CookieYes consent banner to ask for your permission before non-essential cookies are set, and you can change your choice at any time through the banner. You can also control cookies through your browser settings. Blocking essential cookies may affect site functionality.

6. How Long We Keep Your Information

We keep your information only for as long as we need it for the purposes described in this policy:

• Contact form submissions and audit requests: up to 24 months from last interaction, then deleted or de-identified.
• Active client account records: duration of engagement, plus 7 years for tax and accounting compliance.
• Billing and tax records: 7 years from invoice date (US IRS requirement).
• Marketing email subscribers: until you unsubscribe, plus a short suppression-list retention to honor your opt-out.
• Website analytics data: up to 26 months (Google Analytics default).
• Server access logs: up to 12 months.

We delete or de-identify data sooner if you request it (see Section 9 - Your Rights).

7. Who We Share Your Information With

We share your information only with the categories of recipients below, and only for the purposes described here.

Service providers (subprocessors)

We work with the following service providers to deliver our website and services. All are located in the United States unless noted otherwise.

• Vercel: website hosting and the endpoints that receive our forms.
• Resend: delivering form submissions and service emails.
• Sanity: the content system for our blog, which also serves the blog's images.
• Google Tag Manager and Google Analytics 4: loading our analytics tags, and website analytics.
• Leadfeeder (European Union): identifying the companies that visit our website.
• CookieYes (United Kingdom): cookie consent management.
• UserWay: the accessibility widget.
• Google Drive: document and file storage.
• Google Sheets: internal reporting and collaboration.
• Microsoft Clarity: session recording and heatmaps.
• Meta Platforms: ad attribution and retargeting via Meta Pixel, only if you allow marketing cookies.
• Cal.com: meeting scheduling.
• Loom: video recording for client communication.
• Wise: international payment processing (United Kingdom and United States).
• PayPal: card and account-based payment processing.
• Bank ACH (direct transfer): domestic and international bank transfers.
• Amazon (Ads and Seller Central APIs): service delivery for paying clients.

We use commercially reasonable safeguards to ensure these providers protect your data.

Legal disclosures

We may disclose your information when legally required, including in response to a valid subpoena, court order, or government request, or to protect our rights, property, or safety, or that of our clients or others.

Business transfers

If Amplivus is acquired, merged, or sells assets, your information may transfer as part of that transaction. We will notify you and honor the terms of this policy.

8. International Data Transfers

We are based in the United States. If you are located outside the US, your information may be transferred to and processed in the US. Where required by law, we use Standard Contractual Clauses (SCCs) or equivalent safeguards approved by the European Commission or UK ICO for transfers from the EU, UK, or Switzerland to the US.

9. Your Privacy Rights

Rights for all visitors

You may:

• Request a copy of the personal information we hold about you
• Ask us to correct inaccurate information
• Ask us to delete your information (subject to legal retention requirements)
• Opt out of marketing emails by clicking the unsubscribe link in any email or emailing us
• Object to certain processing activities

Rights for EU, UK, and Swiss residents (GDPR)

In addition to the above, you have the right to:

• Restrict our processing of your data in certain situations
• Receive your data in a portable, machine-readable format
• Withdraw consent at any time where consent is the legal basis for processing
• Lodge a complaint with your local data protection authority

Rights for California residents (CCPA / CPRA)

If you are a California resident, you have additional rights, including:

• The right to know what personal information we collect, use, share, and disclose
• The right to delete personal information we have collected from you
• The right to opt out of the sale or sharing of your personal information (we do not sell personal information)
• The right to non-discrimination for exercising your privacy rights
• The right to limit use of sensitive personal information

We do not sell or share personal information as those terms are defined under the CCPA and CPRA.

To exercise any of these rights, email contact@amplivus.com with your request. We will verify your identity and respond within the legally required timeframe (typically 30 days under GDPR, 45 days under CCPA).

10. Children's Privacy

Amplivus is built for businesses and adult professionals who manage Amazon brands. We do not knowingly collect personal information from anyone under 16. If you believe a child has given us their information, contact us and we will delete it.

11. Data Security

We use commercially reasonable technical and organizational measures to keep your information safe, including:

• HTTPS encryption for data in transit
• Access controls limiting who on our team can see client data
• Secure password and two-factor authentication on all internal accounts
• Regular review of subprocessors and access permissions
• Documented incident response procedures

No system is fully secure. We cannot guarantee absolute security, but we take reasonable steps to protect your information.

12. Third-Party Links

Our website sometimes links to third-party sites and platforms (Amazon, Cal.com, Google, and others). This policy covers only amplivus.com. We are not responsible for how those sites handle your data, so please review their policies before sharing anything with them.

13. Changes to This Policy

We may update this Privacy Policy from time to time as our practices, technology, or legal requirements change. When a change is material, we will update the "Last Updated" date at the top and, where appropriate, tell you by email or a notice on the website.

14. Contact Us

For privacy questions, data requests, or complaints, contact:

Amplivus LLC
5200 Lake Shore Dr, Waco, TX 76710, United States
Email: contact@amplivus.com

If we cannot resolve your concern, EU and UK residents may contact their local data protection authority.