Current as of 30 Jun 2026
Privacy Policy
This Privacy Policy explains what information Genbook collects, how we use and protect it, and the rights you have over your data when you use our Service.
Overview
This website, including all tools, content, and services provided through it, is operated by Genbook. In this Privacy Policy, "we," "us," and "our" refer to Genbook. Genbook is developed and operated by Gentech Data Inc. in collaboration with its affiliated technology (including those listed below) and service partners. This Privacy Policy explains what information we collect, how we use and protect it, and the rights you have over your data when you use our website, mobile applications, and services (collectively, the "Service"). Affiliate(s): Gentech Data Technology JSC Protecting your information is critical to us. We are committed to handling your personal and business data, including the data we access from Amazon through your authorization with care, transparency, and in accordance with applicable data protection laws, including the EU General Data Protection Regulation (GDPR), the UK GDPR, the California Consumer Privacy Act and California Privacy Rights Act (CCPA/CPRA), Vietnam's Personal Data Protection Decree (Decree No. 13/2023/ND-CP), Singapore's Personal Data Protection Act (PDPA), and the Amazon Acceptable Use Policy and Data Protection Policy. This Privacy Policy applies to all users of the Service. By accessing or using the Service, you acknowledge that you have read and understood this Privacy Policy.
1. Information We Collect
We collect information in three ways: information you provide directly, information collected automatically when you use the Service, and information we receive from third parties when you authorize integration. 1.1 Information You Provide When you register for an account, use the Service, or communicate with us, you may provide: • Account and identity data: name, email address, phone number, job title, company name, and country of residence. • Business data: business registration details, tax identification number, billing address, and information about your Amazon seller business. • Payment data: payment card details, billing address, and transaction history. Card numbers are processed and stored by our payment processors and are never stored on our servers. • Communications: information you provide when you contact our support team, respond to surveys, or otherwise communicate with us. • Marketing preferences: your choices regarding newsletters, product updates, and promotional communications. 1.2 Information Collected Automatically When you use the Service, we automatically collect: • Device and technical data: IP address, browser type and version, operating system, device identifiers, time zone, and language settings. • Usage data: pages and features accessed, time spent on the platform, click patterns, referral source, and other behavioral analytics. • Log data: access logs, error logs, and other system-generated records used for security and troubleshooting. • Cookies and similar technologies: as described in Section 8. 1.3 Information from Amazon (SP-API and Ads API) To deliver the core functionality of the Service, you authorize Genbook to access data from your Amazon Seller Central and Amazon Advertising accounts through the Amazon Selling Partner API ("SP-API") and the Amazon Ads API ("Ads API"). The categories of data we access are described in detail in Section 2 below. 1.4 Information from Other Third Parties We may receive information from other sources, including: • Authentication providers (e.g., Google, Microsoft) if you choose to sign in using a third-party account. • Analytics providers that help us understand how users interact with the Service. • Business partners who refer you to us, where permitted by law.
2. Amazon Data: SP-API and Ads API
This section explains how Genbook collects, uses, and protects data accessed from your Amazon accounts. It reflects our obligations under the Amazon Acceptable Use Policy and the Amazon Data Protection Policy. 2.1 What We Access With your explicit authorization, we access the following categories of Amazon data: Through the SP-API: • Order information (order IDs, order status, order dates, item details, quantities, prices) • Buyer information limited to what is strictly necessary to fulfill orders, including shipping addresses where applicable • Product catalog and listing data (ASINs, SKUs, titles, descriptions, images, pricing) • Inventory data (stock levels, FBA inventory, inbound shipments) • Financial data (settlements, fees, refunds, reimbursements) • Returns and customer feedback data • Reports generated through the Reports API Through the Ads API: • Advertising account structure (campaigns, ad groups, ads, keywords, targeting) • Performance metrics (impressions, clicks, spend, sales attributed to ads, ACOS, ROAS) • Billing and budget data • Search term reports and audience insights 2.2 How We Use Amazon Data We use Amazon data exclusively to: • Provide the analytics, reporting, automation, and optimization features of the Service to you, the authorizing seller. • Generate dashboards, reports, alerts, and recommendations within your Genbook account. • Provide customer support and troubleshoot issues you report. • Comply with our obligations under the Amazon Acceptable Use Policy and applicable law. 2.3 Restrictions on Use of Amazon Data In accordance with the Amazon Acceptable Use Policy, we do not: • Sell, lease, rent, license, or otherwise transfer Amazon data to any third party for any purpose. • Use Amazon data to retarget Amazon buyers with marketing or advertising outside the Amazon platform. • Share Amazon data with advertising networks, data brokers, or any party for advertising purposes. • Use Amazon data to compete with Amazon or to develop products that replicate Amazon services. • Combine Amazon data with data from other sources in a way that would identify individual buyers, except as strictly necessary to provide the Service to you. 2.4 Personally Identifiable Information (PII) We treat Amazon PII, including buyer names, shipping addresses, email addresses, phone numbers, and any other information that can identify a natural person, with the highest level of protection: • PII is encrypted in transit and at rest. • Access to PII is restricted to authorized personnel on a need-to-know basis. • PII is not used for marketing purposes. • PII is retained only for as long as necessary to provide the Service or comply with legal obligations, and is deleted within thirty (30) days after it is no longer needed, unless a longer retention period is required by law. 2.5 Your Control Over Amazon Data You may revoke Genbook's access to your Amazon accounts at any time by: • Disconnecting the integration from your Genbook account settings; or • Revoking authorization directly in Amazon Seller Central under "Apps & Services." When you revoke access, we will cease to access new Amazon data within forty-eight (48) hours, and we will delete or anonymize previously collected Amazon data in accordance with Section 6 (Data Retention), subject to any legal or audit obligations.
3. How We Use Information
We use the information we collect to: • Deliver the Service: authenticate your account, provide features you request, and maintain the security and reliability of the platform. • Process payments: charge subscription fees, manage billing, and prevent fraud. • Communicate with you: respond to inquiries, send service-related notifications (such as security alerts, billing updates, and tier upgrades), and provide customer support. • Improve the Service: analyze usage patterns, diagnose technical issues, develop new features, and refine existing ones. • Send marketing communications: with your consent where required by law, send newsletters, product updates, and promotional offers. You may opt out at any time. • Comply with legal obligations: meet tax, accounting, regulatory, and contractual requirements. • Protect rights and safety: detect and prevent fraud, abuse, security incidents, and violations of our Terms of Service.
4. How We Share Information
We do not sell your personal information. We share information only in the limited circumstances described below. 4.1 Service Providers (Sub-processors) We engage trusted third-party service providers to help us operate the Service. These include: • Cloud hosting and infrastructure (e.g., Amazon Web Services) • Payment processing (e.g., Stripe, Paddle) • Email and communication providers • Analytics and product monitoring providers • Customer support tools Each sub-processor is contractually bound to process data only on our instructions, to maintain appropriate security measures, and to comply with applicable data protection law. A current list of sub-processors is available upon request at [email protected]. 4.2 Legal and Regulatory Disclosures We may disclose information if required to do so by law or in good-faith belief that such disclosure is necessary to: • Comply with a legal obligation, subpoena, court order, or government request. • Enforce our Terms of Service or other agreements. • Protect the rights, property, or safety of Genbook, our users, or the public. • Detect, prevent, or address fraud, security, or technical issues. 4.3 Business Transfers If Genbook is involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any change in ownership or use of your personal information. 4.4 With Your Consent We may share information with third parties where you have given us explicit consent to do so.
5. Data Security
We implement appropriate technical and organizational measures designed to protect your information against unauthorized access, accidental loss, alteration, disclosure, or destruction. These measures include: • Encryption: Data is encrypted in transit using TLS 1.2 or higher, and sensitive data is encrypted at rest. • Access controls: Access to production systems is limited to authorized personnel, protected by multi-factor authentication and audited regularly. • Network security: Firewalls, intrusion detection, and continuous monitoring of our infrastructure. • Secure development: Code reviews, vulnerability scanning, and regular penetration testing. • Employee training: Personnel handling personal data receive regular training on data protection and security. • Incident response: A documented process for detecting, investigating, and responding to security incidents. No method of transmission over the internet or electronic storage is one hundred percent secure. While we use commercially reasonable measures to protect your information, we cannot guarantee absolute security. If we become aware of a personal data breach affecting your information, we will notify you and the relevant regulatory authorities as required by applicable law.
6. Data Retention
We retain personal information only for as long as necessary to fulfill the purposes for which it was collected, including to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements. • Account data: retained for as long as your account is active. After account termination, we retain account data for up to ninety (90) days to allow for reactivation, after which it is deleted or anonymized, except where a longer retention period is required by law (for example, tax and accounting records may be retained for up to ten years). • Amazon SP-API and Ads API data: historical data is retained for as long as your account is active to provide longitudinal analytics. Amazon PII (such as buyer names and addresses) is retained only for as long as strictly necessary and deleted within thirty (30) days when no longer needed. • Payment and billing records: retained for the period required by applicable tax and accounting laws. • Marketing data: retained until you withdraw consent or unsubscribe. • Support communications: retained for up to three (3) years after the last interaction. • Log data: retained for up to twelve (12) months for security and audit purposes.
7. International Data Transfers
Genbook is headquartered in the United States, and your information may be processed in, transferred to, or stored in the United States and other jurisdictions where Genbook or its sub-processors operate, including Vietnam and Singapore. Where personal data is transferred from the European Economic Area, the United Kingdom, or any other jurisdiction that requires a lawful transfer mechanism, the transfer will be governed by an appropriate safeguard, including: • The European Commission's Standard Contractual Clauses (SCCs); • The UK International Data Transfer Addendum; or • A recognized adequacy decision. You may request a copy of the relevant transfer mechanism by contacting us at [email protected].
8. Cookies and Similar Technologies
We use cookies and similar tracking technologies to operate the Service and improve user experience. 8.1 Types of Cookies We Use • Strictly necessary cookies: required for the Service to function (e.g., authentication, security). • Functional cookies: remember your preferences and settings. • Analytics cookies: help us understand how users interact with the Service (e.g., Google Analytics). • Marketing cookies: used to measure the effectiveness of our marketing campaigns. We obtain your consent before using marketing cookies where required by law. 8.2 Managing Cookies You can manage cookie preferences at any time through your browser settings or through the cookie consent banner on our website. Disabling certain cookies may affect the functionality of the Service.
9. Your Rights
Depending on your jurisdiction, you may have the following rights regarding your personal data: • Right to access: request confirmation of whether we process your personal data and a copy of that data. • Right to rectification: request correction of inaccurate or incomplete data. • Right to erasure ("right to be forgotten"): request deletion of your personal data, subject to legal exceptions. • Right to restrict processing: request that we limit the processing of your data in certain circumstances. • Right to data portability: receive your data in a structured, commonly used, machine-readable format. • Right to object: object to processing based on legitimate interests or direct marketing. • Right to withdraw consent: where processing is based on consent, withdraw that consent at any time. • Right to lodge a complaint: complain to a supervisory authority in your jurisdiction. 9.1 California Residents (CCPA/CPRA) California residents have the right to know what personal information we collect, the right to delete personal information, the right to correct inaccurate information, the right to opt out of the sale or sharing of personal information, and the right to non-discrimination for exercising these rights. Genbook does not sell personal information as defined under the CCPA/CPRA. 9.2 Vietnam (PDPD) Vietnamese data subjects have the rights set out in Decree No. 13/2023/ND-CP, including the right to be informed, the right to consent and withdraw consent, the right to access, edit, delete, and restrict processing, and the right to file complaints with the Ministry of Public Security. 9.3 How to Exercise Your Rights To exercise any of these rights, please contact us at [email protected]. We will respond within the timeframe required by applicable law (typically within thirty (30) days). We may need to verify your identity before fulfilling your request.
10. Children's Privacy
The Service is intended for business, commercial, and professional use only and is not directed at children under the age of sixteen (16). We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately and we will take steps to delete it.
11. Third-Party Links and Services
The Service may contain links to third-party websites, services, or integrations that are not operated by Genbook. This Privacy Policy does not apply to those third parties. We encourage you to review the privacy policies of any third party before providing them with your information.
12. Automated Decision-Making
Genbook does not engage in automated decision-making that produces legal or similarly significant effects on you without human involvement. Some features of the Service use automated processing to generate recommendations and insights, but these are advisory and do not replace your judgment as the seller.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. The most current version is always available on this page, with the "Last updated" date at the top. If we make material changes, we will notify you by email or through the Service before the changes take effect. Your continued use of the Service after the effective date constitutes your acceptance of the revised Privacy Policy.
14. Contact
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at [email protected].
Start your 30-day free trial
Master your business metrics with Genbook's ready-made reports. We simplify the complex so you can focus on increasing gains and understanding your store's true state.