Avenir Labs · Legal

Privacy Policy

Last updated: 2 July 2026

This Privacy Policy explains how Avenir Labs (“Avenir Labs,” “we,” “us,” or “our”) collects, uses, shares, and protects personal information when you visit avenirlabs.com (the “Site”) or use our self-serve products — the Amazon Ads MCP and Amazon Listings MCP servers and related services (together, the “Services”).

Avenir Labs is a business registered in India at 40, Gandhi Market, Minto Road, New Delhi 110002. By using the Site or Services, you agree to this Policy. If you do not agree, please do not use the Services.

1. Information we collect

Information you provide

• Account & identity data — name, email address, company or brand name, password, and any details you add to your profile.
• Billing data — plan selection and billing contact details. Payments are processed by our reseller / merchant of record, Paddle. We do not collect or store your full card number, CVV, or bank details; those are handled by the payment provider under its own privacy policy.
• Support & communications — messages, emails, and information you send us when you request help or contact us.

Amazon integration data

Our Services connect to your Amazon Selling Partner and/or Amazon Advertising account through Amazon’s official APIs, with your authorization (OAuth). When you connect an account, we process:

• Authorization tokens issued by Amazon (we store these encrypted; we never see your Amazon password).
• Account and catalog data you request through the Services — for example listings and catalog content, pricing, inventory, advertising campaigns, keywords, reports, and aggregated sales and performance metrics.

Information collected automatically

• Usage & log data — API requests, feature usage, timestamps, error logs, and diagnostic data.
• Device & connection data — IP address, browser type, and device identifiers.
• Cookies & similar technologies — used to keep you signed in, remember preferences, and understand Site usage (see “Cookies” below).

2. How we use information

• To provide, operate, secure, and maintain the Services and your account.
• To connect to your Amazon account and carry out the actions and queries you request.
• To process subscriptions and billing through our merchant of record.
• To provide customer support and respond to your requests.
• To monitor, troubleshoot, and improve the Services and develop new features.
• To detect, prevent, and address fraud, abuse, security, and technical issues.
• To send service and transactional messages, and — where permitted — product updates you can opt out of.
• To comply with legal obligations and enforce our Terms of Service.

3. How we handle your Amazon data

We treat Amazon account information as confidential and use it only to deliver the Services you request. Specifically:

• We do not sell your Amazon data, and we do not use it for advertising to third parties.
• We access the minimum data needed to fulfil your requests and retain it only as long as necessary to provide the Services or as required by law or the Amazon Data Protection Policy.
• Authorization tokens and sensitive data are encrypted in transit and at rest.
• You can disconnect your Amazon account at any time, which revokes our access going forward.
• Because the Services can pass data to the AI client you connect, any model or assistant you choose will process the data you send through it under that provider’s terms. You are responsible for the client you connect; we recommend using providers whose data-handling terms you trust.

4. Cookies & analytics

We use strictly necessary cookies to run the Site and keep you signed in, and we may use analytics cookies to understand how the Site is used. You can control cookies through your browser settings; disabling some cookies may affect Site functionality. We use Google Analytics to understand how the Site is used; it sets its own cookies and processes usage data under Google’s terms.

5. How we share information

We do not sell your personal information. We share it only as follows:

• Service providers / sub-processors — including our payment merchant of record (Paddle), hosting and infrastructure providers (Hostinger), email and support tools, and analytics providers (Google Analytics) — each acting on our instructions.
• Amazon — to make the API calls you authorize.
• Legal & safety — where required by law, regulation, legal process, or to protect rights, safety, and the security of our users and Services.
• Business transfers — in connection with a merger, acquisition, or sale of assets, subject to this Policy.

6. International data transfers

We are based in India and our providers may be located in other countries, including the United States and the European Union. Where we transfer personal data across borders, we take steps to ensure it is protected in line with applicable law and use providers that offer appropriate safeguards.

7. Data retention

We keep personal information for as long as your account is active and as needed to provide the Services, then retain and delete it in accordance with our retention practices, applicable law, and the Amazon Data Protection Policy. You may request deletion of your account and associated data (see “Your rights”).

8. Security

We use administrative, technical, and organizational safeguards — including encryption in transit and at rest, access controls, and least-privilege access — to protect personal information. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

9. Your rights

Depending on where you live, you may have rights over your personal data:

• India (Digital Personal Data Protection Act, 2023) — you may access, correct, update, and erase your personal data, withdraw consent, nominate another individual, and raise grievances with our Grievance Officer (below).
• EEA / UK (GDPR) — access, rectification, erasure, restriction, portability, objection, and the right to lodge a complaint with a supervisory authority.
• California (CCPA/CPRA) — the right to know, delete, correct, and opt out of “sale”/“sharing” (we do not sell personal information), without discrimination.

To exercise any right, contact us at privacy@avenirlabs.com. We will respond within the timeframes required by applicable law. We may need to verify your identity before acting on a request.

10. Children

The Services are for business users and are not directed to individuals under 18. We do not knowingly collect personal data from children. If you believe a child has provided us data, contact us and we will delete it.

11. Changes to this Policy

We may update this Policy from time to time. We will post the revised version here with a new “Last updated” date and, where appropriate, notify you. Your continued use of the Services after changes take effect constitutes acceptance.