Privacy Notice

Plooti ("Plooti", "we", "us") is a writing, publishing and marketing workspace for independent authors who publish on Amazon Kindle Direct Publishing (KDP). This notice explains what data we collect, why, how long we keep it and the choices you have. Contact: developer@plooti.io.

• Account data: your name, email address and sign-in credentials, or the profile data (name and email) returned by Login with Amazon if you sign in that way.
• Your content: manuscripts, notes, covers, book metadata and anything else you create or upload in Plooti.
• Amazon Ads data, only if you connect an Amazon Ads account (section 3).
• Sales data you import: KDP royalty reports you choose to upload.
• Technical data: IP address, browser type and basic usage logs, used to run and secure the service.

Connecting Amazon Ads is optional. When you click "Connect with Amazon", you sign in on Amazon's own page and authorize Plooti with the advertising::campaign_management permission. We never see your Amazon password.

With your authorization we access, for the advertising accounts you can access:

• advertising profiles (marketplace, currency, account name);
• Sponsored Products campaigns, ad groups, keywords, targets and bids;
• performance reports: impressions, clicks, spend, sales, orders, search terms and placements.

We use this data only to show your campaign performance inside Plooti and to suggest optimizations to you. Changes to your campaigns are made only when you request them. Your Amazon Ads data is visible only to you. We do not sell it, use it for advertising to others, combine it with other customers' data, or share it with third parties other than the service providers in section 5 that host and process it on our behalf. If you ask an AI feature in Plooti to analyze your campaigns, the relevant data is sent to our AI provider for that request only, and is not used to train models.

Our use of Amazon Ads data follows the Amazon Ads API License Agreement and Amazon Ads policies.

• All traffic uses HTTPS.
• Amazon access and refresh tokens are encrypted at rest (AES-GCM), are never sent to your browser and are used only by our servers to call the Amazon Ads API.
• Database access rules ensure each user can read only their own rows. Synced Amazon data is stored per Plooti user.

We use these providers to run Plooti. They process data only on our instructions:

• Supabase: database, authentication, file storage and server functions;
• Cloudflare: website hosting and content delivery;
• AI model providers: to generate the writing and analysis you request in Plooti; your data is not used to train their models.

We may also disclose data when required by law. We do not sell personal data.

• Amazon Ads: we keep tokens and synced Amazon data only while your account is connected. When you click "Disconnect" in Settings › Integrations, we delete the tokens and all synced Amazon data immediately.
• To also remove Plooti's permission at Amazon, go to amazon.com › Your Account › Login with Amazon, select Plooti and choose "Remove". After that, we can no longer access your Amazon Ads account.
• Your account and content: kept while your account is active. You can ask us to delete your account and all associated data at developer@plooti.io; we complete deletion within 30 days, except where the law requires us to keep something longer.

Depending on where you live (for example under the GDPR or Brazil's LGPD), you may ask to access, correct, export or delete your personal data, or object to or restrict its processing. Write to developer@plooti.io and we will respond within 30 days.

We use only the cookies and browser storage needed to keep you signed in and remember your preferences (such as the theme). We do not use advertising cookies.

Our providers may process data outside your country. Where required, transfers are covered by safeguards such as Standard Contractual Clauses.

Plooti is not intended for anyone under 18, and we do not knowingly collect their data.

If we change this notice in a material way, we will update the date above and let you know in the app or by email. The use of Plooti is also governed by our Terms of Service.