This Privacy Policy describes how ShelfRadar, a product of Punt Partners ("ShelfRadar", "we", "us" or "our"), handles personal information that you submit to us or that we obtain in connection with our websites (shelfradar.ai and shelfradar.us) and the ShelfRadar web application (together, the "Services"). By accessing or using the Services, you acknowledge the practices described in this policy.
1. Information we collect
Information you provide to us
Account and contact information. When you create an account, request a demo, an audit or other materials, or otherwise contact us, we collect the details you provide, such as your name, work email address, company name, phone number and the content of your message. You may also give us the contact details of colleagues you invite to use the Services. We store passwords only as a one-way cryptographic hash.
Information from connected third-party accounts
You may choose to connect third-party accounts, such as an Amazon Ads account, to the Services using that platform's authorization flow (for Amazon, Login with Amazon). When you authorize a connection, the platform shares information with us according to the permissions you grant. For Amazon this includes:
- your Amazon user ID, name and email address (the Login with Amazon profile permission); and
- your Amazon Ads account data (the advertising campaign management permission), such as advertising profiles and account names, marketplace and currency, Brand Registry brand names, and campaign details including names, status, budgets, dates and performance metrics.
We receive access and refresh tokens from the platform so we can retrieve this data on your behalf. Tokens are encrypted before they are stored. We access only the data needed to provide the features you use, and information received from connected accounts is covered by this policy.
Information collected automatically
Technical and usage information. When you use the Services, we automatically collect information such as your IP address, browser and device type, operating system, pages and features viewed, and the date and time of your requests. We use this to operate, secure and improve the Services.
Cookies. We use cookies that are strictly necessary to keep you signed in and to protect your session. Our marketing websites may also use analytics or embedded third-party content that sets its own cookies. You can control cookies through your browser settings, but disabling necessary cookies will prevent you from signing in.
2. How we use information
We use the information described above to:
- provide, operate and maintain the Services, including displaying your brands, campaigns and reports;
- generate analyses and recommendations for the accounts you connect;
- respond to your enquiries and send the materials, updates and service messages you request;
- secure the Services, prevent fraud and abuse, and troubleshoot problems;
- analyze, develop and improve our products, using aggregated or de-identified data where possible; and
- comply with legal obligations and enforce our agreements.
3. Amazon and other connected platforms
ShelfRadar is not affiliated with, endorsed or sponsored by Amazon or any other platform you connect. Data we receive from Amazon is used solely to provide the Services to you and in accordance with Amazon's applicable policies and agreements. We do not sell Amazon data, use it to target advertising to you, or share it with other customers. Your use of a connected platform is also governed by that platform's own terms and privacy policy.
You can revoke ShelfRadar's access at any time by disconnecting the account in the Services or by removing ShelfRadar from the connected applications in your Amazon account settings.
4. AI features
ShelfRadar uses machine learning and AI to analyze your data and generate insights. Data from your connected accounts is used to produce outputs for your organization only. We do not use your data to train AI models that are shared with other customers, and where we use third-party AI providers, our agreements with them prohibit using your data to train their models.
5. How we share information
We do not rent or sell your personal information. We share it only as described below:
- Service providers. With vendors that host infrastructure, deliver email and form submissions or otherwise help us run the Services, under obligations to protect the information and use it only on our instructions.
- Connected platforms. With the platforms you connect, to the extent needed to make the requests you authorize (for example, calls to the Amazon Ads API on your behalf).
- Business transfers. If Punt Partners or ShelfRadar is involved in a merger, acquisition, financing or sale of assets, information may be transferred as part of that transaction. We will notify you of any change in ownership or use of your information.
- Legal and safety. When we believe in good faith that disclosure is necessary to comply with law or legal process, enforce our agreements, or protect the rights, property or safety of ShelfRadar, our users or others.
- With your consent. In any other case, we will ask for your consent before sharing your personal information.
6. Data retention and deletion
We retain personal information for as long as your account is active or as needed to provide the Services. When you disconnect a third-party account, we delete its stored access tokens and the data synchronized from it. If you close your account, we delete or de-identify your personal information from production systems within 90 days, except where we must keep it to comply with law, resolve disputes or enforce our agreements. Residual copies in backups are deleted on our normal backup cycle.
7. Security
We maintain administrative, technical and physical safeguards designed to protect your information, including encryption in transit (HTTPS), encryption of third-party access tokens at rest, hashed passwords and restricted access to production systems. No method of transmission or storage is completely secure. If we become aware of a security incident affecting your information, we will notify you as required by law.
8. Accessing and controlling your information
You can view and update your account and profile information, connected accounts and preferences within the Services. Depending on where you live, including under the EU and UK GDPR, the California Consumer Privacy Act and India's Digital Personal Data Protection Act, 2023, you may have the right to access, correct, delete or export your personal information, to withdraw consent, or to object to or restrict certain processing. To make a request, email audit@punt.partners. We will verify your request and respond within the period required by applicable law.
9. International transfers
We operate in India and the United States, and our service providers may process information in other countries. When we transfer personal information across borders, we take steps to ensure it remains protected as described in this policy and as required by applicable law.
10. Third-party websites and applications
The Services may link to or integrate with third-party websites and applications that we do not control. Their privacy and security practices are not covered by this policy, and we encourage you to review their privacy policies.
11. Children
The Services are intended for businesses and are not directed to children. We do not knowingly collect personal information from anyone under 18. If you believe a child has provided us personal information, contact us and we will delete it.
12. Changes to this policy
We may update this policy from time to time. We will post the updated version on this page and change the effective date above. If we make material changes to how we use personal information, we will notify you by email or through the Services before the changes take effect.
13. Contact us
If you have questions or concerns about this policy or our privacy practices, email us at audit@punt.partners. We will make every effort to resolve your concern.