Privacy policy
How Artallur Technologies India LLP (“ATIL”, “we”) handles personal data when you use the ScaleSKUs website and platform. Each section starts with a short summary; the text below it is what governs. Terms in this policy follow India's Digital Personal Data Protection Act, 2023 (“DPDP Act”): you are the Data Principal, we are the Data Fiduciary.
Who we are
In short: ATIL runs ScaleSKUs and decides how your personal data is used.
Artallur Technologies India LLP is a limited liability partnership registered in India, based in Belagavi (Belgaum), Karnataka, India (registered office: F3, First Floor, Sairaj Empire, Roy Road, Tilakwadi, Belagavi, Karnataka 590006), LLPIN AAR-4581. ScaleSKUs is our product. For the personal data described here we are the Data Fiduciary.
Your Amazon selling and advertising data is your business's data. We process it only to provide the service you use — analysis, reports, and the changes you or your team instruct. If that data contains information about other people (for example, the names of your staff in Amazon's change history), we handle it on your behalf and only for that purpose.
What we collect
In short: what you give us, the Amazon data you connect, how you use the service, and records of our conversations with you.
You give us
- Account details: first and last name, work email, company or brand name, and a password (we store only a secure hash of it). If you sign up with Google or Amazon, we receive your name, email and an account identifier from them.
- Security details: your mobile number, used to send one-time codes for sign-in and account security, and your two-factor settings.
- Your team: names, email addresses and roles of the people you invite.
- Billing details: your plan, seats and billing cycle, your GSTIN if you give it, and the payment-mandate references from our payment provider. We never see or store card or bank details — Razorpay collects those.
- Messages: what you write in the contact form, support tickets, emails and WhatsApp messages to us, including any attachments.
You connect
- Amazon data you authorise: advertising, sales, inventory, catalogue and change-history data for the Amazon Ads and Seller/Vendor Central accounts you connect, retrieved through Amazon's official APIs under the permissions you approve. Order-level data includes order ids, products, prices and return reasons. We do not store Amazon customers' names, email addresses, phone numbers or delivery addresses; raw report files briefly contain the delivery city, state and postcode and are deleted seven days after they are processed.
- AI assistants you connect (for example Claude or ChatGPT): a record of which tools your assistant used, with the inputs and a preview of the results, notes your assistant saves to its memory, and an account profile written by AI (your goals and preferences for the account) so the assistant can help you consistently.
- Google, if you connect it for exports: your Google email and access tokens (stored encrypted) so we can create the spreadsheets you ask for.
Calls and voice
- If you use the voice assistant on our website, your microphone audio is streamed to our speech-AI provider while you talk, together with a random device identifier and the page you are on.
- If you ask for an onboarding call, our AI assistant calls the verified number you give. The call is recorded and transcribed, and we keep your name, number, the transcript, a summary and a link to the recording.
Collected as you use the service
- Technical and usage data: IP address, browser and device, the pages you open and the actions you take in the app. We use these to keep accounts secure, keep an audit trail of changes, and support you.
- Email and message records: which service emails and WhatsApp messages we sent you, whether they were delivered, opened or clicked, and any unsubscribe or STOP reply.
- Cookies and similar technologies: see the cookie policy. Only necessary cookies are used unless you allow more.
- Consent records: which version of our Terms and policies you accepted, when, and from which IP address and browser, and your cookie choices.
From others
- If Amazon refers your business to us (for example through the Amazon Elevate programme), we receive your seller and advertising account identifiers and the contact name, business name, phone, email and city Amazon shares with us.
Why we use it
In short: to run the service you signed up for, keep it secure, bill you, support you, and — only with your permission — measure our advertising.
| Purpose | Data used | Basis |
|---|---|---|
| Create and run your account; provide analysis, reports, automations and AI answers; carry out the changes you instruct in your Amazon accounts | Account, team, Amazon and AI-connection data | You provide it for this purpose (DPDP Act s.7(a)) and our contract with you |
| Keep accounts secure: sign-in, one-time codes, fraud and abuse prevention, audit trail of changes | Account, security and technical data | You provide it for this purpose; our obligation to keep your data secure |
| Billing, invoices and tax records | Billing details | Our contract with you; legal obligations under tax law |
| Support, and service messages about your account (sync status, trial and billing reminders, security alerts) | Contact details, messages, usage data | You provide it for this purpose |
| Helping you get set up after you sign up: your name, email, phone and company are shared with our CRM so our team can follow up. The CRM is marked so it sends you no marketing email unless you opted in | Account and contact details | You provide it for this purpose — you can ask us to stop at any time |
| Marketing: product news, tips, offers and webinar invitations by email or WhatsApp | Name, email, phone | Your consent (DPDP Act s.6) — only if you tick the separate, unticked box at sign-up or switch it on in your account settings. Withdraw it at any time. |
| Measuring our advertising (Google Analytics, Meta, OpenAI — all loaded through Google Tag Manager) | Cookies and, if you are signed in, a one-way hash of your email and name | Your consent through the cookie banner — off unless you allow it |
We do not sell personal data. We do not use your Amazon account data to train AI models, and we do not show one customer's data to another. Our AI providers process data to return results to us, under their API terms.
Consent and choices
In short: you can change your mind at any time, and it is as easy as giving consent.
- Cookies: use "Cookie settings" at the bottom of any page to change your choice. Analytics and advertising cookies stay off unless you turn them on.
- Marketing emails and WhatsApp: sent only if you opted in. Stop them at any time — the unsubscribe link in any marketing email, reply STOP on WhatsApp, or Account settings → Privacy and your data. Service messages about your account (security, billing, sync status) continue while you have an account.
- Amazon access: you can remove our access from your Amazon account settings at any time; we then stop fetching new data.
- AI assistants: revoke a connected assistant from your account settings.
- Everything else: email privacy@scaleskus.com. Withdrawing consent doesn't affect processing that already happened, and some features need certain data to work (for example, we can't sync Amazon data without access).
Who we share it with
In short: service providers who process data for us, the AI assistant you choose to connect, and authorities only when the law requires.
| Provider | What they do for us | Where |
|---|---|---|
| Hostinger | Hosts our application server and database | India (Mumbai) |
| Cloudflare | Network security and delivery — all website traffic passes through it; also measures page performance | Global network |
| Amazon Web Services | Encrypted backups, database change logs, support-mailbox storage | Ireland (EU) |
| Gemini AI (classifying search terms and products), Google sign-in, Sheets exports you request, email delivery, fonts, Google Tag Manager, and — with your consent — Google Analytics | USA and other Google locations | |
| Meta | WhatsApp Business messages (our WhatsApp is answered first by an AI assistant) and, with your consent, Meta advertising measurement | USA |
| OpenAI | With your consent only: measuring our ChatGPT advertising (through Google Tag Manager) | USA |
| Anthropic | Where enabled: drafting support replies and the AI account profile | USA |
| Zoho | Our CRM (sales and onboarding follow-up) and, with your consent, live chat | India |
| Razorpay | Payments and subscription mandates | India |
| Sarvam AI | The website voice assistant and AI onboarding calls | India |
| MSG91 | Where used: delivering one-time codes | India |
| Sentry | Error monitoring (technical data; we don't send your personal details on purpose) | Outside India |
- Amazon is where your connected data comes from; changes you instruct are sent to your Amazon accounts.
- Your AI assistant provider (such as Anthropic for Claude or OpenAI for ChatGPT) receives the data your assistant asks for once you connect it, under your own agreement with them.
- We may disclose data when the law requires it, to protect people or our service from harm, or to a buyer if our business is sold (you would be told first).
Data outside India
In short: some providers above process data outside India.
The DPDP Act allows personal data to be processed outside India except in countries the Government of India restricts. We use providers that protect data under contract and industry-standard security, and we will stop any transfer to a country that becomes restricted.
How long we keep it
In short: your account data is kept while your account exists; logs, messages and call records are deleted on a fixed schedule; and you can ask us to delete your data.
| Data | How long |
|---|---|
| Account, team, settings, set-up answers, synced Amazon data, AI account profile and assistant notes | While your account exists. It is not deleted automatically when a plan ends, so you can come back. Ask us to delete it at any time. |
| Audit trail and page-view records (including IP address and browser) | 2 years |
| WhatsApp messages, email delivery records and the history of service messages we sent you | 2 years. The raw delivery data WhatsApp sends us with each message: 30 days |
| Support tickets | 2 years after the ticket is closed |
| Call records from AI voice and onboarding calls (number, name, transcript, summary, recording link) | 1 year. For an onboarding call we then keep only whether it happened or you declined it, so we don't call you again |
| Coupon codes typed during set-up that weren't accepted | 30 days |
| Referral details Amazon shares with us (Amazon Elevate) | 2 years from Amazon's referral date |
| CRM records (our sales and onboarding follow-up) | While your account exists; we are setting a fixed limit for these |
| Order-line data from Amazon | 200 days |
| Raw Amazon report files | Deleted 7 days after processing, including reports that could not be processed |
| AI-assistant activity logs | 90 days |
| Request logs and error logs | 180 days, the minimum India's cyber-security rules (CERT-In) require; other system logs for less |
| AI-assistant sign-in tokens | Deleted as soon as they are revoked, or 7 days after they expire |
| Password-reset links | Expire after 60 minutes; deleted within a day |
| A copy of your data that you asked for | Deleted from our systems 7 days after we prepare it |
| Unsubscribe and opt-out records | Kept, so we keep honouring your choice |
| Billing and tax records | As long as tax and accounting law requires |
| Consent records | As long as we need them to show what was agreed |
| Backups | Encrypted; each backup is deleted on a rolling cycle of up to two years, so deleted data can remain in older backups until they expire |
When you ask us to close your account and delete its data, we do so within 30 days. We delete or anonymise the personal data in the account — yours, and that of team members who don't belong to another workspace — revoke our access to your Amazon, Google and AI-assistant accounts, and stop all syncing and automations. We keep only what the law requires or what protects you: billing and tax records; a record of what you agreed to, without your IP address or browser; your unsubscribe and opt-out choices, so we never message you again; and the Amazon advertising and sales figures already synced for the account, which are no longer linked to any person.
Security
In short: encryption in transit, encrypted credentials, access controls and logs.
All traffic uses HTTPS. Amazon and Google access tokens are encrypted at rest and passwords are stored only as secure hashes. Access to customer data is limited to authorised staff who need it to provide the service, and staff sessions and every change are logged. Backups are encrypted. Two-factor sign-in is available for your account.
If a personal data breach happens, we will tell affected people and the Data Protection Board of India as the law requires, including what happened and what you can do.
Your rights
In short: ask us what we hold, correct it, delete it, withdraw consent, or name someone to act for you.
- Access: a summary of the personal data we process about you, what we do with it, and who we have shared it with.
- Correction and erasure: ask us to correct, complete, update or delete your personal data.
- Withdraw consent at any time (see section 4).
- Nominate someone to exercise these rights for you if you die or become unable to.
- Grievance redressal: complain to us (section 10). If you are not satisfied with our response, you can complain to the Data Protection Board of India.
Signed in? Use Account settings → Privacy and your data. Otherwise email privacy@scaleskus.com from the address on your account, saying what you would like. We may ask you to confirm your identity. We respond within 30 days.
Grievance officer
In short: a named contact for privacy questions and complaints.
Grievance Officer, Artallur Technologies India LLP
Email: privacy@scaleskus.com
Address: F3, First Floor, Sairaj Empire, Roy Road, Tilakwadi, Belagavi, Karnataka 590006
We acknowledge complaints within two business days and resolve them within 30 days.
Children
In short: ScaleSKUs is a business tool for adults.
The service is meant for businesses and people aged 18 or over. We don't knowingly collect personal data from anyone under 18; if we learn we have, we will delete it.
Changes to this policy
In short: we date every version and tell you about important changes.
This version applies from 27 September 2026. When we make an important change we will tell account holders by email or in the app before it applies. The Terms of Service, refund and cancellation policy and cookie policy explain the rest of how we work with you.