Data in transit and at rest
All traffic uses HTTPS (TLS). Report data is stored with Amazon Web Services; tokens and secrets are encrypted with a key that is held only on our servers.
Who can access what
Access is approved by an administrator. Team roles (Ops, MIS, team member) decide which operations pages someone sees; client logins never see operations pages. Unknown or expired sessions are signed out automatically.
Changes to live accounts
Nothing is changed on Amazon unless the account is authorised, the person's access includes changes, and - for automations - an administrator has switched that automation on. After a change we read the account back from Amazon to confirm it, and raise an alert if Amazon does not show it.
Monitoring
Every pipeline is watched: failed or missed jobs, refused changes, lost access and missing data open alerts that the team is notified about straight away.
Revoking access and deleting data
Revoke access at any time in Seller Central (Apps and services) or the Amazon Ads console (User management). To have us delete data we hold, contact us - we complete deletions within 30 days. Details are in the Privacy policy.
Reporting a security issue
Email contact_us@optimiseres.com with "Security" in the subject. We reply within two working days.