Privacy Policy Last updated: April 30, 2025 XBoost Inc. (“XBoost”, “we”, “us”, or “our”) operates AmazonGPT, an AI assistant on Slack that connects to your Amazon Seller Central and Ads Console accounts to retrieve and analyze data (“Service”). This Privacy Policy outlines what data we collect, how it is used, and your rights regarding your data. 1. Information We Collect 1.1 Account & Profile Data • Your email address and Slack username when you install our Slack app. • Read-only OAuth tokens to access Amazon Seller Central and Ads Console. 1.2 Usage Data • Metadata on your API requests (e.g., timestamps, request type, success/failure status). • Slack message metadata (e.g., timestamp, channel ID); we do not store message content beyond the prompt used to generate a response. 1.3 Third-Party Services • We integrate with OpenAI and Slack APIs. These services may log activity under their own privacy policies. 2. How We Use Your Data • To deliver the Service: Fetch Amazon metrics, compute responses, and display them in Slack. • To monitor limits: Enforce daily usage limits (200 calls/day). • For diagnostics: Track performance and errors to improve stability. We do not store or access the full contents of your Slack conversations. We also do not retain Amazon credentials beyond securely cached OAuth tokens. 3. Cookies & Tracking We may use essential cookies on our public website (e.g., session management). We do not use tracking or advertising cookies in our core Slack integration. 4. Data Sharing & Disclosure We do not sell or rent your data. We may share limited information: • With service providers under confidentiality agreements (e.g., for hosting or monitoring). • With legal authorities if required by law. • In a merger/acquisition scenario, with appropriate notice. 5. Data Retention • OAuth tokens are retained until access is revoked or the app is uninstalled. • API usage logs are stored for up to 90 days. • Aggregated and anonymized usage data may be retained indefinitely for analytics purposes. 6. Your Rights • Access and updates: You may update your Slack account email directly within Slack. • Data deletion: To delete all account-linked data, revoke Amazon access or uninstall the Slack app. 7. Security We use industry-standard encryption (TLS in transit, AES-256 at rest) and store all sensitive tokens in a secure vault. Only authorized personnel have access. 8. International Transfers Our servers are located in the United States. By using this Service, you consent to the transfer and processing of your data in the U.S. under U.S. law. 9. Children Our Service is intended for users aged 18 and older. We do not knowingly collect information from minors. 10. Changes to This Policy We may update this policy from time to time. The latest version will always be posted here. Continued use of the Service after changes means you accept the revised policy. 11. Contact Us XBoost Inc. 730 Arizona Ave, 2nd Floor Santa Monica, CA 90401, USA 📧 contact@xboost.so