Influxion Point LLC ("Influxion Point," "we," "us," or "our") is committed to protecting the privacy of our clients, their customers, and visitors to our website. This Privacy Policy describes how we collect, use, store, protect, share, and delete personal information in connection with our services and website.
1. Information We Collect
We may collect the following types of information:
- Contact Information: Name, email address, phone number, and company name provided through our contact form, email correspondence, or during client onboarding.
- Client Account Data: Information necessary to manage client Amazon Seller Central accounts, Amazon Advertising accounts, and other marketing platform accounts on behalf of our clients. This may include account credentials (provided securely by the client), product data, advertising performance data, and sales data.
- Website Usage Data: Standard web server logs including IP address, browser type, referring pages, and pages visited. We may use analytics tools to understand how visitors interact with our website.
- Business Communications: Records of communications between Influxion Point and our clients via email, Slack, phone, or other channels related to the services we provide.
2. How We Use Information
We use the information we collect for the following purposes:
- To provide and manage Amazon advertising, listing optimization, storefront management, and related marketing services on behalf of our clients.
- To communicate with clients about their accounts, campaigns, and service deliverables.
- To generate performance reports and strategic recommendations.
- To respond to inquiries from prospective clients.
- To comply with applicable laws, regulations, and partner requirements (including Amazon's Data Protection Policy and Acceptable Use Policy).
- To improve our services and internal processes.
3. How We Store and Protect Information
We implement reasonable administrative, technical, and physical safeguards to protect the information we handle:
- All business data is managed through cloud-based platforms (Google Workspace, Slack) that provide enterprise-grade encryption, access controls, and security monitoring.
- Access to client accounts and data is restricted to team members whose roles require it, using individual login credentials with Multi-Factor Authentication (MFA) enforced.
- Passwords meet a minimum of 12 characters with special characters, are rotated annually, and are stored in a secure password manager.
- All data transmitted between systems is encrypted in transit via HTTPS/TLS.
- We maintain an Incident Response and Risk Management Policy with defined roles, 6-month review cycles, and 24-hour notification procedures for security incidents.
- We conduct quarterly access reviews to verify that only authorized team members have access to client accounts and Amazon information, and that access levels remain appropriate for each individual's role.
- When a team member departs the organization, all access to client accounts, Amazon platforms, Google Workspace, and Slack is revoked within 24 hours. Any shared credentials the individual had access to are rotated immediately.
- We maintain logging and monitoring through Google Workspace admin audit logs, Amazon Seller Central login history, and platform-level access logs. Logs are reviewed during quarterly access reviews and semi-annual risk assessments, and are used in any incident investigation.
- We conduct semi-annual risk assessments to identify, evaluate, and mitigate potential threats to company and client information.
- We do not store Amazon data on local servers or devices. All Amazon information is accessed through Amazon's secure web interfaces and authorized third-party tools.
4. How We Share Information
We do not sell, rent, or trade personal information to third parties. We may share information in the following limited circumstances:
- With Clients: We share Amazon advertising performance data, listing analytics, and campaign reports with our clients (the account owners) as part of our service delivery.
- With Authorized Tools: We use Reporting Ninja to retrieve Amazon Ads performance data and Looker for dashboard visualization. These tools access data solely for the purpose of generating client reports.
- Legal Requirements: We may disclose information if required by law, regulation, legal process, or enforceable governmental request.
- With Amazon: We comply with Amazon's Data Protection Policy and may share information with Amazon as required under our Solution Provider agreement, including reporting security incidents to security@amazon.com within 24 hours of detection.
5. Data Retention
We retain client data only for as long as necessary to provide our services and comply with legal and contractual obligations:
- Active client data is retained for the duration of the service engagement.
- Upon termination of a client relationship, we delete or return all client data within 90 days unless retention is required by law or contractual obligation.
- Any personally identifiable information (PII) obtained through Amazon platforms is retained for no longer than 30 days after the purpose for which it was collected has been fulfilled, in accordance with Amazon's Data Protection Policy. PII required for legal or tax compliance may be retained longer only as required by law.
- Amazon Information is handled in accordance with Amazon's Data Protection Policy, including deletion requirements upon request or termination of access.
- Website analytics data is retained in aggregate form and does not contain personally identifiable information.
- Security and access logs are retained for a minimum of 12 months to support incident investigation and compliance requirements.
6. Data Deletion
Clients may request deletion of their data at any time by contacting us at Analytics@influxionpoint.com. Upon receiving a deletion request, we will:
- Confirm the scope of the deletion request with the client.
- Delete all requested data from our systems and authorized third-party tools within 30 days.
- Confirm deletion in writing to the client.
- Retain only data required by law or necessary to fulfill outstanding contractual obligations, with the client notified of any such retention.
7. Employee and Contractor Access
Access to client information and Amazon platforms is managed through our Solution Provider Portal account and governed by our Incident Response and Risk Management Policy:
- All team members access client accounts through individual, uniquely identified credentials — shared or generic login credentials are not permitted.
- New team members are onboarded through the Solution Provider Portal with role-appropriate permissions and must complete identity verification and acknowledge our security policy before access is granted.
- Access permissions are reviewed quarterly to verify they remain appropriate for each individual's current role.
- All team members are required to complete security awareness training as part of onboarding and on an ongoing basis.
- Team members are prohibited from storing Amazon information or client data on personal devices, removable media, or unsecured cloud applications.
8. Third-Party Services
Our website and services may contain links to or integrations with third-party platforms. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party service you interact with, including:
- Amazon (Seller Central, Amazon Ads)
- Google (Google Workspace, Looker)
- Slack
- Reporting Ninja
9. Cookies
Our website may use cookies and similar tracking technologies to improve your browsing experience and analyze website traffic. You can control cookie preferences through your browser settings. Our website does not serve targeted advertising or share cookie data with third parties for advertising purposes.
10. Children's Privacy
Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child under 18, we will take steps to delete that information promptly.
11. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal requirements. The "Last updated" date at the top of this page indicates when the policy was most recently revised. We encourage you to review this policy periodically.
12. Organizational Change Notification
In accordance with our partner agreements, Influxion Point will notify Amazon and other applicable partners within 30 days of any organizational changes that affect our need for or use of partner information, including changes in ownership, legal structure, key personnel, or systems used to access partner data.
13. Contact Us
If you have any questions about this Privacy Policy, our data practices, or wish to exercise your rights regarding your personal information, please contact us:
Influxion Point LLC
Virginia Beach, VA
Email: Analytics@influxionpoint.com