Legal

ASINSIGHT Platform Privacy Notice

How ASINSIGHT collects, uses, retains, and protects information when you use ASINSIGHT Platform and ASINSIGHT MCP.

Effective date: August 17, 2026

1. Scope

This ASINSIGHT Platform Privacy Notice (the “Notice”) applies when you visit ASINSIGHT Platform, use its console, authorize an OAuth client, create a manual token, call ASINSIGHT MCP tools, or contact ASINSIGHT about the Platform Services.

2. Information we collect

Depending on how you use the Platform Services, ASINSIGHT may collect the following categories of information:

  • Account and identity information, such as your ASINSIGHT account identifier, email address, display name, locale, entitlement status, and session or authentication status.
  • OAuth and connection information, such as interaction identifiers, client identifiers and names, redirect hosts, requested resources and scopes, authorization status and time, token metadata, and revocation status. ASINSIGHT does not display OAuth access or refresh tokens to you.
  • MCP Usage Data, such as inferred or derived intent, MCP tool name, timestamps, client type, Amazon marketplace, sanitized request parameters including ASINs, keywords, and time ranges, response status, performance information, errors, Credits consumption, and request or response data after credentials and direct identifiers have been removed.
  • Technical and security information, such as IP address, browser and device information, necessary cookies, request logs, fraud signals, and diagnostic events.
  • Support information that you choose to provide when requesting help or reporting a problem.

3. Information we do not use for AI training

ASINSIGHT does not use your MCP prompts, conversations, MCP Usage Data, or Platform outputs to train AI models. We do not intentionally retain complete prompts or full conversation content from your AI client. ASINSIGHT may process the minimum request and response data needed to perform a requested tool call, protect the service, investigate an error, and provide support.

4. How we use information

ASINSIGHT uses the information described above to:

  • authenticate your account and complete OAuth authorization;
  • provide MCP tools, return requested outputs, and manage connections and tokens;
  • measure Credits, enforce plan and connection limits, and display usage;
  • secure the Platform Services, prevent abuse, investigate incidents, and troubleshoot errors;
  • provide support and communicate service or policy changes;
  • perform internal product analytics and improve tool reliability, latency, data quality, and user experience without training AI models; and
  • comply with legal obligations and enforce the Agreement.

5. Legal bases

Where applicable law requires a legal basis, ASINSIGHT processes information as necessary to perform the Agreement, based on your consent for OAuth authorization and optional activities, to comply with law, and for legitimate interests such as securing, operating, supporting, and improving the Platform Services. You may withdraw consent where processing relies on consent, but withdrawal does not affect earlier lawful processing and may prevent the related feature from working.

6. How we disclose information

ASINSIGHT does not sell Platform personal information or disclose it for third-party advertising or third-party AI model training. ASINSIGHT may disclose information only as reasonably necessary:

  • to hosting, cloud infrastructure, database, logging, security, communications, and support providers that process information for ASINSIGHT under appropriate obligations;
  • to the AI client or other application you authorize, to complete the connection and deliver requested Platform outputs;
  • to comply with law, legal process, or a valid government request, or to protect rights, safety, and security;
  • in connection with a merger, financing, acquisition, reorganization, or transfer of assets, subject to appropriate protections; or
  • with your direction or consent.

7. Retention

ASINSIGHT retains account-linked or otherwise linkable sanitized MCP Usage Data for no longer than 180 days after collection, unless a longer period is required by law or is reasonably necessary to resolve a security, fraud, billing, or legal matter. At the end of the applicable period, the data is deleted or transformed into aggregated, de-identified information that is not reasonably linkable to an account or individual.

Fully aggregated and de-identified statistics may be retained for longer to understand service adoption, reliability, and capacity. Account and authorization records are retained while your account or connection is active and for a reasonable period afterward for security, audit, dispute, and legal purposes. Credentials and security secrets are retained only for the operational period required to provide and protect the relevant feature.

8. International transfers and security

ASINSIGHT and its service providers may process information in countries other than your country of residence. Where required, ASINSIGHT uses appropriate safeguards for international transfers.

ASINSIGHT uses reasonable administrative, technical, and organizational safeguards designed to protect Platform information. No method of transmission or storage is completely secure, so you should also protect your account, clients, and tokens and promptly report suspected unauthorized access.

9. Your choices and rights

You can decline an OAuth request, revoke a connection, delete a manual token, and stop using the Platform Services. Depending on your location, you may have rights to access, correct, delete, restrict, object to, or receive a copy of certain personal information, or to withdraw consent. Requests may be sent to support@asinsight.ai. ASINSIGHT may verify your identity before completing a request and may retain information where permitted or required by law.

10. Children

The Platform Services are intended for business users who meet the eligibility requirements in the ASINSIGHT Terms & Conditions. They are not directed to children, and ASINSIGHT does not knowingly collect Platform personal information from children in violation of applicable law.

11. Changes, language, and contact

ASINSIGHT may update this Notice to reflect changes to the Platform Services, processing practices, or law. The updated version will identify its effective date, and material changes will be notified where required.

The English version is the controlling version. Translations are provided for reference. Questions or privacy requests may be sent to support@asinsight.ai with “Platform Privacy” in the subject line.