Privacy Policy

1. What data we collect

• Contact and business details: name, email address, business name, and any message you send through our contact form or booking widget.
• Engagement context: the platforms you sell on, monthly revenue range, and the primary challenge you describe so we can prepare a relevant response.
• Booking information: your name, email, preferred date/time, and optional notes when you schedule a strategy call through our calendar integration.
• Account and marketplace data: during an engagement, clients may share Seller Central, Vendor Central, or Selling Partner API (SP-API) credentials and account data needed to deliver services. This is collected only with explicit client consent and only for the specific work requested.

2. How we use your data

• Respond to inquiries and book strategy calls.
• Deliver, manage, and report on the services you hired us to perform.
• Communicate project updates, compliance questions, and results.
• Maintain records for legal, accounting, and tax obligations.
• Improve our internal tooling and processes.

We do not sell personal information, and we do not use it for unrelated advertising.

3. Amazon SP-API and marketplace data

Any Amazon Selling Partner API (SP-API) data, customer data, or marketplace account information we access is handled in accordance with Amazon’s Data Protection Policy and DPP-1.4 controls. This means:

• Access is limited to the minimum necessary to complete the agreed work.
• Data is stored only for the duration of the engagement and any legally required retention period.
• We do not share, sell, or transfer Amazon seller or customer data to unauthorized third parties.
• We use encryption and access controls to protect credentials and account data.
• When the engagement ends, SP-API access and related credentials are revoked and deleted promptly.

4. How long we keep your data

• Lead inquiries: kept for up to two years after your last contact, then deleted or anonymized unless a longer period is required by law or for an active dispute.
• Client engagement data: kept for the duration of the engagement plus the time needed for tax, accounting, and legal record-keeping, typically up to seven years.
• SP-API and marketplace credentials: deleted within 30 days after the engagement ends, unless a longer retention is required by Amazon, law, or a binding agreement.

5. Subprocessors and service providers

We rely on a small set of trusted service providers to run the site and deliver services:

• Cloud hosting infrastructure for website hosting, database storage, and authentication.
• Google Calendar for scheduling strategy calls.

Each provider is used only for the purposes described here and is contractually bound to protect your data.

6. How to request deletion or correction

You can request access, correction, deletion, or a copy of your personal data at any time by emailing us at jose@makinateck.com. We will confirm your request and respond within 30 days. If you are a current client, some data may need to be retained until the engagement and any legal holding period end.

7. Security and access controls

We use role-based access controls, encrypted storage, and strong authentication for internal systems. Credentials and sensitive account data are stored encrypted and are only accessible to the operator directly working on your account.

8. Cookies and analytics

The site does not use third-party advertising cookies or cross-site tracking. We may use essential cookies needed for site functionality and security. Analytics, if enabled, are used only to understand how visitors use the site and are not tied to personal advertising profiles.

9. Changes to this policy

We may update this Privacy Policy as our services or legal obligations change. The "Last updated" date at the top of the page shows the current version. Continued use of the site after changes means you accept the updated policy.