1. Information We Collect
When you use Optimiseres, we collect the following types of information:
- Account Information: Name, email address, and password when you create an account.
- Usage Data: Pages visited, features used, API calls made, and tools accessed through the MCP server.
- Device Information: Browser type, operating system, device type, and IP address.
- Location Data: Approximate geographic location derived from your IP address (country, region, city).
- Advertising Data: Walmart advertising account identifiers and campaign data that you connect through our platform.
2. How We Use Your Information
We use the collected information to:
- Provide, maintain, and improve our services.
- Authenticate your identity and manage access permissions.
- Process and route your requests to Walmart's advertising APIs.
- Monitor usage patterns and prevent abuse or unauthorized access.
- Send important service updates and security notifications.
- Generate aggregated analytics (never sold to third parties).
3. Data Security
We implement industry-standard security measures to protect your data:
- Encryption: All data in transit is encrypted via TLS/SSL (HTTPS).
- Authentication: OAuth 2.1 with PKCE, RS256 JWT tokens, and optional MFA (TOTP).
- Access Control: Per-user scopes, seller-level permissions, and role-based access.
- Rate Limiting: Protection against brute-force and abuse.
- Audit Logging: All authentication events and API access are logged.
4. Data Sharing
We do not sell your personal information. We may share data only in these circumstances:
- With Walmart: API requests are forwarded to Walmart's advertising platform on your behalf.
- Service Providers: We use trusted infrastructure providers (hosting, SSL certificates) who process data on our behalf.
- Legal Requirements: When required by law, subpoena, or court order.
- Business Transfers: In connection with a merger, acquisition, or sale of assets.
5. Cookies and Tracking
We use cookies and similar technologies for:
- Session Management: Keeping you logged in and managing your session.
- Analytics: Understanding how visitors use our public pages (session-based, not per-pageload).
- CSRF Protection: Preventing cross-site request forgery attacks.
We use a 30-minute session cookie for analytics — similar to industry standards. We do not use third-party advertising trackers.
6. Your Rights
You have the right to:
- Access: Request a copy of the data we hold about you.
- Correction: Update or correct inaccurate information.
- Deletion: Request deletion of your account and associated data.
- Portability: Export your data in a machine-readable format.
- Opt-out: Unsubscribe from non-essential communications at any time.
7. Data Retention
We retain your data for as long as your account is active or as needed to provide services. After account deletion, we may retain anonymized usage data for analytics purposes. Audit logs are retained for a minimum of 90 days for security purposes.
8. Children's Privacy
Our services are not directed to individuals under 18. We do not knowingly collect personal information from children.
9. Changes to This Policy
We may update this privacy policy from time to time. We will notify registered users of significant changes via email. Continued use of the service constitutes acceptance of the updated policy.
10. Contact Us
If you have questions about this privacy policy or your data, please contact us at our contact page or email contact_us@optimiseres.com.