Privacy Policy

Effective Date: Aug 26, 2026  ·  JUMANT LLC

This Privacy Policy describes how JUMANT LLC ("we," "us," or "our") collects, uses, and protects information in connection with AGTA, a platform that connects your Amazon account to AI assistants and analytics tools ("the Service"). By using AGTA, you agree to the practices described in this policy.

1. What We Collect

We collect the following categories of information:

• Google Account Data: When you sign in via Google OAuth, we receive your email address, display name, and Google Account ID. We do not receive your Google password or access to services beyond what you explicitly authorize.
• Amazon Seller & Advertising Data: With your explicit authorization, we access advertising reports, search term data, campaign metrics, and bid information through the Amazon Ads API, and sales, inventory, financial, and listing data through the Amazon Selling Partner API (SP-API), for your linked seller accounts. This data is used solely to power your AGTA experience.
• Usage Analytics: With your consent, we collect usage events (page views, feature interactions, time on page) and session recordings to improve the product. If you are signed in, these are linked to your account, so this data is not anonymous. It never includes the contents of your Amazon data. See section 5 for the detail and how to withdraw consent.

2. How We Use Your Information

• To display analytics, insights, and recommendations exclusively to you in your AGTA account.
• To authenticate your identity and maintain your session.
• To improve product features based on aggregated usage patterns.
• To communicate service updates, billing notices, and security alerts.

Your data is never sold to third parties. We do not share your Amazon seller data or Google account information with any external parties for marketing, advertising, or profiling purposes.

3. Amazon SP-API Data Usage

AGTA's use of Amazon SP-API data complies fully with Amazon's Acceptable Use Policy, including sections 4.4 and 4.5. Specifically:

• SP-API data is accessed only after you explicitly authorize AGTA via Amazon's Login with Amazon (LWA) OAuth flow.
• Data retrieved through SP-API is processed solely on your behalf and displayed only to you.
• We do not aggregate or combine your SP-API data with other sellers' data in any way that would expose individual seller information.
• SP-API data is not used for purposes beyond providing the AGTA service you authorized.
• We maintain SP-API credentials with least-privilege access scopes and rotate tokens per Amazon's requirements.

4. Google OAuth

AGTA uses Google Sign-In (OAuth 2.0) for authentication only. We request the minimum required scopes: your email address, name, and profile identifier. We do not access your Gmail, Google Drive, Google Calendar, or any other Google service. You may revoke AGTA's access at any time via your Google Account security settings.

5. Cookies

Analytics cookies are not set until you accept them. When you first visit, a banner asks; nothing beyond the strictly necessary cookies loads until you choose, and declining removes anything a previous visit had stored.

• Strictly necessary: your authenticated session, your theme, and your cookie choice itself. These do not require consent.
• PostHog (analytics, US): page views, clicks and form interactions, time on page, session recordings and browser console logs. If you are signed in, these are linked to your account, so this data is not anonymous. Its cookie is set on.agta.io so that agta.io and app.agta.io recognise you as the same person.

We do not use advertising cookies, we do not sell or share this data with advertisers, and we do not profile you for marketing. You can change your choice at any time from the Cookies control in the site footer.

6. Browser Extension

The AGTA browser extension is optional. It only works after you connect it to your AGTA account with a token you generate yourself, and it acts solely on Amazon domains.

What the extension accesses:

• Session cookies from advertising.amazon.com: used to download your own advertising reports on your behalf, the same way you would export them manually from the console. Cookies from other sites are never read.
• The product identifier (ASIN) of the Amazon page you are viewing: sent only when you click the audit button.
• The URL and HTTP method of the report request that Amazon's own Advertising console issues when you generate a report, so that the same report can be requested later. Response contents are not read and no request is modified.

The extension never reads your browsing on unrelated sites, never asks for your Amazon password or two-factor code, never writes to or modifies your Amazon account, and never shares extension data with third parties.

Session cookies are transmitted over TLS and stored encrypted at rest (AES-256-GCM) with a dedicated key, isolated per user. They are replaced whenever the extension refreshes them, and deleted when you disconnect the extension from its popup or request deletion at info@agta.io.

A standalone version of this section, written for the Chrome Web Store review, is available at agta.io/legal/extension-privacy.

7. Data Retention

Account data, including your Google identity and linked Amazon SP-API data, is retained for as long as your AGTA account is active. If you request account deletion, we will remove your personal data and Amazon seller data from our systems within 30 days, except where retention is required by applicable law or financial recordkeeping obligations.

To request deletion, contact us at info@agta.iowith the subject line "Data Deletion Request."

8. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• GDPR (EU/EEA residents): Right to access, rectification, erasure, restriction of processing, data portability, and objection to processing.
• CCPA (California residents): Right to know what personal information is collected, right to delete, right to opt out of sale (we do not sell personal information), and right to non-discrimination.

To exercise any of these rights, contact info@agta.io.

9. Security

We implement industry-standard security measures including encryption in transit (TLS 1.2+), encrypted storage, access controls, and regular security reviews. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a revised effective date. Continued use of AGTA after changes constitutes your acceptance of the updated policy.

11. Contact

For privacy-related questions, requests, or concerns, contact us at:

JUMANT LLC
Email: info@agta.io