Privacy policy
# Privacy Policy
**Last updated: July 15, 2026**
This Privacy Policy describes how KUDOS (“KUDOS,” “we,” “us,” or “our”) collects, uses, stores, and discloses information when you visit or make a purchase from **kudoscrochet.com** (the “Site”), communicate with us, use our related services, or authorize our internal Amazon advertising operations and analytics application, **Amazon Ops Dashboard Ads** (collectively, the “Services”).
By using the Services, you acknowledge the practices described in this Privacy Policy. If you do not agree with this Privacy Policy, please do not use the Services or authorize the Amazon advertising integration.
## 1. Scope of This Privacy Policy
This Privacy Policy applies to:
- Visitors and customers of kudoscrochet.com.
- Individuals who create an account, place an order, contact customer support, subscribe to marketing communications, or otherwise interact with KUDOS.
- Authorized users who connect an Amazon advertising account to Amazon Ops Dashboard Ads through Login with Amazon.
- Information processed in connection with our ecommerce, customer support, advertising analytics, reporting, monitoring, and campaign-management activities.
## 2. Information We Collect
### Information You Provide Directly
Depending on how you interact with the Services, you may provide:
- Name, email address, telephone number, billing address, and shipping address.
- Account information, preferences, and customer-support communications.
- Order details, purchased products, returns, exchanges, and shipping information.
- Payment confirmation and transaction information. Full payment-card details are generally processed by our payment providers and are not stored directly by KUDOS.
- Marketing preferences and information submitted through forms, reviews, surveys, or promotions.
- Information you provide when authorizing or managing an Amazon advertising integration.
### Information Collected Automatically
When you use the Site, we and our service providers may automatically collect:
- IP address, browser type, device type, operating system, language, and approximate location.
- Pages viewed, links selected, products viewed, cart activity, referring pages, and interaction data.
- Cookie identifiers, session information, and analytics information.
- Security, fraud-prevention, and diagnostic information.
### Information Received from Service Providers
We may receive information from service providers that support the Services, including:
- Shopify and ecommerce infrastructure providers.
- Payment processors.
- Shipping and fulfillment providers.
- Analytics, advertising, customer-support, email, hosting, and security providers.
- Amazon and Login with Amazon when an authorized user connects an Amazon advertising account.
## 3. Amazon Ads API Information
When an authorized user connects an Amazon advertising account to Amazon Ops Dashboard Ads, we may access information made available through the Amazon Ads API, including:
- Advertising account and profile identifiers.
- Marketplace and advertiser profile information.
- Campaigns, portfolios, ad groups, advertisements, keywords, product targets, search terms, and targeting settings.
- Campaign status, budget, bid, placement, and scheduling information.
- Impressions, clicks, click-through rate, spend, cost per click, attributed sales, attributed orders, conversion rate, ACOS, ROAS, and related performance metrics.
- Advertising reports, historical trends, anomalies, and optimization-related information.
- The result and status of user-confirmed campaign-management requests.
We do not request or store an authorized user’s Amazon account password. Amazon authentication is handled through Login with Amazon using OAuth authorization.
## 4. Amazon Authentication Credentials
To maintain the Amazon advertising integration, the application may process:
- Login with Amazon Client ID.
- Client Secret.
- Refresh Token.
- Short-lived Access Token.
- Amazon Advertising Profile ID.
Amazon credentials are treated as confidential authentication information.
For the internal desktop deployment of Amazon Ops Dashboard Ads:
- Long-lived credentials are stored in a locally encrypted credential vault on an authorized device.
- Credentials are not intentionally stored in public source code, frontend code, browser local storage, screenshots, exports, public logs, or public repositories.
- Short-lived access tokens are used only as needed to communicate with Amazon.
- Amazon credentials are not submitted to artificial-intelligence providers.
- Access is limited to authorized users and devices.
Users may revoke the application’s authorization through available Amazon account or Amazon Ads account settings. Revocation may prevent the application from retrieving updated advertising information.
## 5. How We Use Information
We may use information to:
- Operate, maintain, and improve the Site and Services.
- Process purchases, payments, returns, exchanges, and deliveries.
- Create and manage customer accounts.
- Provide customer service and respond to questions.
- Detect fraud, security incidents, misuse, and technical problems.
- Comply with legal, tax, accounting, and regulatory obligations.
- Send transactional messages relating to orders, accounts, or service activity.
- Send marketing communications where permitted by law and consistent with your preferences.
- Measure and improve the performance of our Site and marketing activities.
- Retrieve and display Amazon advertising information.
- Calculate advertising metrics such as CTR, CPC, CVR, ACOS, ROAS, spend, and attributed sales.
- Identify unusual performance, budget risks, conversion issues, and other advertising anomalies.
- Generate reports, historical comparisons, alerts, and optimization recommendations.
- Support advertising-management actions that are deliberately initiated and confirmed by an authorized user.
- Maintain records of application activity for security, troubleshooting, and accountability.
## 6. Advertising Management and User Control
Amazon Ops Dashboard Ads is intended to support advertising analysis and controlled campaign management.
The application does not autonomously modify Amazon advertising budgets, bids, campaign status, targeting, or negative keywords without an authorized user’s deliberate action and confirmation.
If campaign-management features are enabled in the future:
- The application will identify the proposed action and affected advertising object.
- The authorized user must review and confirm the action.
- The application will respect the permissions of the connected Amazon advertising account.
- Read access or data analysis alone does not authorize an advertising change.
- Relevant action results may be recorded for security and operational review.
## 7. AI-Assisted Advertising Analysis
Where enabled by an authorized user and permitted by applicable Amazon terms, selected advertising information may be processed by an artificial-intelligence service provider, including Volcengine Ark, to generate:
- Performance explanations.
- Anomaly analysis.
- Risk identification.
- Historical-trend analysis.
- Optimization recommendations.
We seek to minimize the information submitted for AI analysis and use aggregated or reduced advertising information where reasonably practical.
Amazon passwords, Client Secrets, Refresh Tokens, Access Tokens, signing materials, and other authentication credentials are not submitted to AI service providers.
AI-generated output is advisory. It does not independently authorize or execute changes to Amazon advertising campaigns.
## 8. Cookies and Similar Technologies
We and our service providers may use cookies, pixels, tags, local-storage technologies, and similar tools to:
- Keep the Site operational.
- Remember preferences and cart contents.
- Authenticate sessions.
- Measure Site usage and performance.
- Prevent fraud and improve security.
- Understand marketing effectiveness.
- Provide advertising or content that may be more relevant to users.
Where required by applicable law, we will request consent before using non-essential cookies. You may manage cookies through available cookie controls or your browser settings. Disabling certain cookies may affect Site functionality.
## 9. How We Disclose Information
We may disclose information in the following circumstances:
### Service Providers
We may provide information to service providers that perform services on our behalf, such as:
- Shopify and ecommerce infrastructure providers.
- Payment processors.
- Hosting, security, analytics, customer-support, and email providers.
- Shipping, logistics, and fulfillment providers.
- Amazon and Login with Amazon for account authorization and Amazon advertising services.
- AI and analytics providers when the related feature is enabled and permitted.
- Professional advisers such as legal, tax, accounting, or security consultants.
Service providers may process information only for the purposes for which it is made available and subject to applicable contractual and legal obligations.
### Legal and Safety Reasons
We may disclose information when reasonably necessary to:
- Comply with law, regulation, legal process, or governmental requests.
- Protect the rights, property, security, and safety of KUDOS, our users, Amazon, or others.
- Investigate suspected fraud, abuse, unauthorized access, or policy violations.
- Establish, exercise, or defend legal claims.
### Business Transactions
Information may be disclosed as part of a merger, acquisition, financing, reorganization, sale of assets, or similar business transaction, subject to applicable legal requirements.
### With Your Direction or Consent
We may disclose information when you request, direct, or consent to the disclosure.
## 10. Sale and Use of Information
We do not sell Amazon Ads API credentials, OAuth tokens, or Amazon advertising account data.
We do not use Amazon authentication credentials for advertising, profiling, or unrelated commercial purposes.
Certain website advertising and analytics technologies may be treated as “sharing,” “targeted advertising,” or a “sale” under some privacy laws. Where applicable, users may exercise available opt-out rights through cookie controls or by contacting us.
## 11. Data Retention
We retain information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including to:
- Provide the Services.
- Maintain customer and advertising-account integrations.
- Fulfill orders and provide support.
- Meet legal, tax, accounting, contractual, and security obligations.
- Resolve disputes and enforce agreements.
- Maintain operational and security records.
Retention periods depend on the type of information, the purpose of processing, legal requirements, and whether an account or integration remains active.
When an Amazon advertising integration is disconnected or authorization is revoked, locally stored authorization credentials will be deleted or rendered unusable within a reasonable period, unless retention is required by law or necessary to investigate security incidents.
## 12. Data Security
We use reasonable administrative, organizational, and technical safeguards designed to protect information, including access controls, encrypted storage where appropriate, credential separation, and secure communication methods.
However, no security method is completely secure. We cannot guarantee absolute security, and users should not send passwords, API credentials, payment information, or other sensitive information through unsecured communication channels.
If we become aware of a security incident affecting information covered by this Privacy Policy, we will take reasonable steps to investigate, contain, and address the incident and provide notifications where required by applicable law.
## 13. Your Rights and Choices
Depending on where you live, you may have rights regarding your personal information, including the right to:
- Request access to personal information.
- Request correction of inaccurate information.
- Request deletion of information.
- Request restriction of certain processing.
- Object to certain processing.
- Withdraw consent where processing is based on consent.
- Request a portable copy of certain information.
- Opt out of certain marketing communications, targeted advertising, sharing, or sales.
- Appeal a decision regarding a privacy request where applicable.
- Submit a complaint to an applicable data-protection authority.
These rights may be subject to legal limitations and verification requirements.
To exercise a privacy right, contact us using the information provided below. We may request information reasonably necessary to verify your identity and request.
You may unsubscribe from promotional emails using the unsubscribe link included in the message. Transactional and service-related messages may still be sent where necessary.
## 14. International Data Transfers
KUDOS and its service providers may process information in countries other than the country in which you live.
Where required, we rely on recognized legal transfer mechanisms and contractual protections for international transfers. The privacy and data-protection laws of the destination country may differ from those of your country.
Amazon advertising information may be processed in the region associated with the connected Amazon advertising account and by authorized service providers supporting the application.
## 15. Children’s Privacy
The Services are not directed to children under 13 or the minimum age required by applicable law, and we do not knowingly collect personal information from children in violation of applicable law.
If you believe a child has provided personal information to us, please contact us so that we can review and, where appropriate, delete the information.
## 16. Third-Party Websites and Services
The Site may contain links to third-party websites, platforms, or services. We are not responsible for the privacy, security, or content practices of third parties.
The processing of information by Amazon, Shopify, payment processors, and other third parties is also subject to their respective privacy policies and terms.
## 17. Changes to This Privacy Policy
We may update this Privacy Policy to reflect changes in our practices, Services, technology, legal obligations, or regulatory requirements.
When we make changes, we will update the “Last updated” date at the top of this page. Where required by law, we will provide additional notice or request consent.
## 18. Contact Us
If you have questions about this Privacy Policy, our privacy practices, the Amazon advertising integration, or your privacy rights, contact us at:
**KUDOS**
Website: https://kudoscrochet.com
Email: kudos4crochet@gmail.com