Privacy Policy

Welcome to Quobolt (“Quobolt,” “we,” “our,” or “us”). We provide a software-as-a-service platform that helps sellers and advertisers manage, analyze, and optimize Amazon advertising campaigns (the “Service”). This Privacy Policy explains how we collect, use, disclose, and safeguard information when you visit our website, create an account, or otherwise use the Service.

This Privacy Policy applies to all users of the Service in the United States. If you do not agree with the terms of this Privacy Policy, please do not access or use the Service.

Quobolt is operated by Quobolt LLC, a New Jersey LLC. This Policy is designed to comply with applicable United States federal and state privacy laws, including but not limited to the California Consumer Privacy Act as amended by the California Privacy Rights Act (“CCPA/CPRA”), the Virginia Consumer Data Protection Act (“VCDPA”), the Colorado Privacy Act (“CPA”), the Connecticut Data Privacy Act (“CTDPA”), the Utah Consumer Privacy Act (“UCPA”), and other comparable state consumer privacy laws in effect from time to time (collectively, “US State Privacy Laws”).

3.1 Information You Provide to Us

• Account Information: name, email address, password, company name, and billing contact details when you register for the Service.
• Payment Information: billing name, billing address, and payment details processed securely by our third-party payment processor, Stripe. Quobolt does not store full payment card numbers on its own servers.
• Communications: information you provide when you contact customer support, respond to surveys, or otherwise communicate with us.

3.2 Information We Collect Automatically

• Usage Data: pages visited, features used, buttons clicked, session duration, and other interactions within the Service.
• Device and Log Data: IP address, browser type, operating system, device identifiers, referring URLs, and timestamps.
• Cookies and Similar Technologies: as described in Section 8 (Cookies and Tracking Technologies) below.

3.3 Information We Collect From Third-Party Sources

• Amazon Advertising Data: when you connect your Amazon Advertising account to Quobolt via the Amazon Advertising API, we receive campaign, keyword, spend, sales, and performance metrics associated with your Amazon seller or vendor account, solely to provide the Service to you. A subset of this data is transmitted, via API, to a third-party artificial intelligence provider in order to generate the optimization suggestions described in Section 5.
• Payment Processor Data: confirmation and subscription status information from Stripe.
• Other Integrations: data from any other third-party service you affirmatively connect to your Quobolt account.

We use the information described above for the following business and commercial purposes:

• To provide, maintain, operate, and improve the Service.
• To generate AI-powered optimization suggestions, insights, reports, and recommendations for your advertising campaigns (see Section 5, Automated Decision-Making, below).
• To process payments, manage subscriptions, and send billing-related communications.
• To provide customer support and respond to inquiries.
• To send service-related notifications, security alerts, and administrative messages.
• To send product updates or marketing communications, where you have not opted out.
• To monitor and analyze usage trends, and to maintain the security and integrity of the Service.
• To detect, investigate, and prevent fraudulent transactions and other illegal activities.
• To comply with applicable legal obligations, regulatory requirements, and enforceable governmental requests.

5.1 How We Use AI

Quobolt's platform uses automated processing, including machine-learning and artificial-intelligence models, to analyze your connected advertising data and generate optimization suggestions (for example, recommended bid changes, keyword suggestions, or budget allocations). These outputs are provided as recommendations only — Quobolt does not automatically execute changes to your live Amazon advertising campaigns without your affirmative action, unless you have separately enabled an auto-apply feature and agreed to its specific terms. You may contact us using the details in Section 18 to ask questions about the logic underlying these automated features.

5.2 Data Shared With Our Third-Party AI Provider

To generate these suggestions, Quobolt transmits a subset of your connected Amazon Advertising data (such as campaign, keyword, spend, and sales performance metrics) via API to a third-party artificial intelligence service provider, which is based in the United States. We do not send your Amazon account credentials, payment information, or full account login details to this provider. This provider acts as our service provider/processor and is contractually restricted from using your data for any purpose other than providing the underlying AI processing service to Quobolt, except as described in Section 5.3.

5.3 Use of Data by Our AI Provider

As of the Last Updated date of this Policy, our agreement with our third-party AI provider does not include a contractual guarantee that your data will be excluded from use in improving or training that provider's underlying models. Data shared with our AI provider may therefore be used by that provider to develop or improve its models, unless and until we obtain a specific no-training or zero-retention commitment from that provider. We are actively working to formalize additional contractual protections in this area. If you have questions about this practice or would like more information about our current AI vendor arrangements, please contact us using the details in Section 18.

We do not sell your personal information for money. We share personal information only in the following circumstances:

• Service Providers: with vendors who perform services on our behalf, such as cloud hosting, database and infrastructure providers, payment processing (Stripe), customer support tooling, and analytics providers. These providers are contractually bound to use your information only to provide services to us and to maintain appropriate confidentiality and security safeguards.
• Third-Party AI Provider: with the artificial-intelligence service provider described in Section 5.2, which receives a subset of your connected Amazon Advertising data via API to generate optimization suggestions. See Sections 5.2–5.3 for details on what is shared and how it may be used.
• Amazon: to the extent required to authenticate and retrieve your advertising data through the Amazon Advertising API, consistent with the permissions you grant when connecting your account.
• Legal and Safety Reasons: when required by law, subpoena, court order, or governmental request, or when we believe disclosure is necessary to protect the rights, property, or safety of Quobolt, our users, or the public.
• Business Transfers: in connection with a merger, acquisition, financing, reorganization, bankruptcy, or sale of some or all of our assets, in which personal information may be transferred as a business asset. We will provide notice before your personal information becomes subject to a different privacy policy.
• Aggregated or De-Identified Data: we may share information that has been aggregated or de-identified such that it can no longer reasonably be used to identify you.
• With Your Consent: for any other purpose disclosed to you at the time of collection or with your consent.

Quobolt does not sell personal information in exchange for money. Some state laws (including the CCPA/CPRA) define “sale” and “sharing” broadly enough to potentially include certain uses of analytics or advertising cookies. To the extent our use of any cookie or tracking technology could be considered a “sale” or “sharing” of personal information under applicable law, we provide the opt-out mechanisms described in Section 8 (Cookies) and honor Global Privacy Control signals as described in Section 14.

We do not use or disclose sensitive personal information for purposes other than those permitted under applicable law without additional consent.

We and our service providers use cookies, web beacons, and similar tracking technologies, which we categorize as follows:

• Strictly Necessary Cookies: required for the Service to function (e.g., authentication, session management). These cannot be disabled without affecting core functionality.
• Analytics/Performance Cookies: help us understand how users interact with the Service so we can improve it.
• Functional Cookies: remember your preferences and settings.
• Advertising/Marketing Cookies: used to deliver relevant marketing communications and measure their effectiveness.

You can control non-essential cookies through our cookie banner/preference center at any time, or through your browser settings. Blocking certain cookies may impact your experience using the Service.

We retain personal information for as long as your account remains active or as needed to provide the Service, comply with our legal obligations, resolve disputes, and enforce our agreements. Specific retention periods include:

• Account Information: retained for the duration of your account, plus 3 months after account closure for administrative and legal purposes.
• Amazon Advertising Data: retained only as long as necessary to provide the Service, and deleted or de-identified within 91 days of your disconnecting your Amazon Advertising account, unless a longer period is required by law.
• Billing Records: retained as required by tax and accounting laws typically 7 years.
• Support Communications: retained for 6 months for quality and training purposes.

You may request deletion of your account and associated personal information at any time as described in Section 11.

We implement administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, use, alteration, or destruction, including encryption of data in transit, access controls, and regular security assessments. However, no method of transmission over the internet or method of electronic storage is completely secure, and we cannot guarantee absolute security. In the event of a data breach affecting your personal information, we will notify you and applicable regulators as required by law.

11.1 Rights Available to US Residents Generally

Depending on your state of residence, you may have some or all of the following rights with respect to your personal information:

• Right to Know/Access: the categories and specific pieces of personal information we have collected about you, and the purposes for collection.
• Right to Correct: inaccurate personal information we maintain about you.
• Right to Delete: personal information we have collected from or about you, subject to certain exceptions.
• Right to Data Portability: to receive a copy of your personal information in a portable, and where technically feasible, readily usable format.
• Right to Opt Out: of the sale or sharing of personal information, and of targeted advertising or certain profiling in furtherance of decisions that produce legal or similarly significant effects.
• Right to Non-Discrimination: for exercising any of these rights.

11.2 California Residents (CCPA/CPRA)

If you are a California resident, the rights above apply to you in full, and you additionally have the right to limit the use and disclosure of sensitive personal information. We do not discriminate against you for exercising your CCPA/CPRA rights. We will respond to verifiable consumer requests within 45 days, with a possible 45-day extension where reasonably necessary (we will notify you if an extension applies).

11.3 Virginia, Colorado, Connecticut, Utah, and Other State Residents

If you are a resident of Virginia, Colorado, Connecticut, Utah, or another state with a comprehensive consumer privacy law, you have the rights described in Section 11.1 to the extent granted by your state's law. Residents of Colorado, Connecticut, and Virginia additionally have the right to appeal our decision on your request, as described below.

11.4 How to Exercise Your Rights

To exercise any of these rights, please submit a request to admin@quobolt.com or through Customer Support Chat. We will verify your identity before fulfilling your request, which may require you to confirm information associated with your account. You may designate an authorized agent to submit a request on your behalf, subject to our ability to verify the agent's authority.

11.5 Appeals

If we decline to take action on your request, you may appeal our decision by contacting us at admin@quobolt.com with the subject line “Privacy Rights Appeal.” We will respond to your appeal within the time period required by applicable law. If your appeal is denied, certain states permit you to contact your state Attorney General.

California Civil Code Section 1798.83 permits California residents to request certain information regarding our disclosure of personal information to third parties for their direct marketing purposes. Quobolt does not share personal information with third parties for their own direct marketing purposes. If you have questions, contact us using the details in Section 18.

The Service is intended for business use by adults and is not directed to children under the age of 18. We do not knowingly collect personal information from children under 13 (or such other age as defined by applicable law). If we learn that we have collected personal information from a child in violation of applicable law, we will promptly delete it. If you believe we have collected information from a child, please contact us using the details in Section 18.

Some browsers offer a “Do Not Track” (DNT) signal. Because there is no common industry standard for DNT, we do not currently respond to DNT browser signals. However, we do recognize and honor the Global Privacy Control (GPC) signal as a valid request to opt out of the sale or sharing of personal information for users where such a right applies.

The Service may contain links to third-party websites, including Amazon.com and Stripe. This Privacy Policy does not apply to those third-party sites, and we encourage you to review their respective privacy policies.

The Service is intended for users located in the United States. If you access the Service from outside the United States, your information may be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your jurisdiction.

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by posting the updated Policy on this page with a new “Last Updated” date, and, where required by law, by providing additional notice (such as email). Your continued use of the Service after the effective date of any changes constitutes your acceptance of the revised Policy.

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at: