Privacy Policy
Last updated: October 4, 2026
This policy explains what personal data EliteAds (eliteads.elitepublishing.it), a service by Elite Publishing, collects, why, and what rights you have. EliteAds manages Amazon Ads campaigns for self-published authors.
1. Who we are
The data controller is Elite Publishing. For any privacy question or request you can write to kdpadsmanagement@gmail.com.
2. Data we collect
Account data: name, email address and a hashed password (we never store your password in readable form).
Amazon Ads data: when you connect your Amazon Ads account or invite us as a user, we access, through the official Amazon Ads API, your advertising profiles, campaigns, ad groups, keywords and product targets, search terms, performance metrics (impressions, clicks, spend, orders, sales) and the catalog of books you advertise.
Billing data: subscriptions are processed by Stripe. We receive the subscription status and payment outcome; card details are handled only by Stripe and never reach our servers.
Technical data: a session cookie to keep you logged in and a cookie that remembers your language. We do not use advertising or tracking cookies.
3. Why we use it
We use your data only to provide the service: creating and optimising your Amazon Ads campaigns, showing your dashboard and reports, sending service emails (for example password reset) and managing your subscription. The legal basis is the performance of the contract with you and, for security and fraud prevention, our legitimate interest.
4. Amazon Ads data
Data obtained from the Amazon Ads API is used solely to manage and report on your own advertising. We do not sell it, we do not share it with other customers and we do not use it to advertise to you. You can revoke our access at any time from your Amazon Ads account (Settings → User management, or by removing the EliteAds app authorisation); after revocation we stop collecting new data.
5. Who we share it with
We rely on trusted providers that process data on our behalf: Amazon Ads (advertising platform), Stripe (payments), Supabase (database), Netlify (hosting) and Resend (transactional email). Some of them may process data outside the European Union, under appropriate safeguards such as the EU Standard Contractual Clauses.
6. How long we keep it
We keep account and advertising data for as long as your account or order is active. When you close your account we delete or anonymise your data within 90 days, unless we must keep some of it to comply with legal (for example tax) obligations.
7. Your rights
You can ask to access, correct, delete or export your data, to restrict or object to its processing, and you can withdraw any authorisation you gave. To exercise these rights write to kdpadsmanagement@gmail.com. You also have the right to lodge a complaint with your data protection authority (in Italy, the Garante per la protezione dei dati personali).
8. Security
Connections are encrypted (HTTPS), passwords are hashed, Amazon access tokens are stored server-side only and access to data is limited to the people who need it to run the service.
9. Changes
We may update this policy; the date at the top shows the latest version. Significant changes will be communicated by email or inside the app.