Privacy Policy

Effective as of 3 August 2026

If you are a visitor to a Autron Website, a recipient of Autron communications, a customer (paid or free) of the Autron Service or a teammate of a customer of the Autron Service then except as expressly set forth below, this Privacy Policy applies to your use of such Website or Service.

At Autron, we respect the privacy rights and data protection rights of our users and recognize the importance of protecting the personal information we collect about you. Our Privacy Policy is designed to help you understand what information we collect and how we use and share that information. This Privacy Policy applies to our Websites and Services.

As used in this Privacy Policy, Autron, "us", and "we" refers to Autron, Inc. The "Websites" means Autron's websites (including without limitation www.autron.ai, autron.ai, api.autron.ai, app.autron.ai and any successor URLs, mobile or localized versions and related domains and subdomains), and the "Services" means Autron's ecommerce and advertising optimization products, applications and services, in each case in whatever format they may be offered now or in the future. The Services include the Autron Agent, an AI assistant that answers questions about your advertising and retail performance, runs scheduled reviews and reports, and — where you direct it to — makes changes to your advertising campaigns on your behalf. The Services also include the Autron MCP server, which lets you connect Autron to third-party AI clients you choose, as described in "Connecting Autron to Third-Party AI Clients" below. The Websites and Services are collectively referred to herein as the "Offerings."

Information We Collect

Registration and Contact Information. We collect information about you when you (a) register to use the Services and (b) otherwise provide contact information to us via email, mail, or through the Offerings. This information you provide may include your email address, first and last name, email address, mailing address or phone number. You may also provide us with contact information of other employees or representatives of your organization who are also using the Services.

Payment Information. When you purchase the Services, we will also collect transaction information, which may include your credit card information, billing and mailing address, and other payment-related information ("Payment Information"). We describe how Payment Information may be collected and processed in the section titled "Payment Information" below.

Third Party Account Information. If a customer provides third-party account authentication to us (for example, your Amazon Seller or Vendor account Id or other third party sites) or otherwise signs in to the Services through a third party site or service, there is some content and/or information in those accounts ("Third Party Account Information") that may be transmitted into your account with us if you authorize such transmissions, and that Third Party Account Information transmitted to our Services is covered by this Privacy Policy. Where you connect an Amazon advertising or selling account, this includes advertising campaign structure and settings, advertising performance metrics, product catalog and listing data, sales and order metrics, and inventory data retrieved from Amazon's Advertising and Selling Partner APIs. We retrieve this data on a recurring basis for as long as your connection remains authorized, and we handle it in accordance with the data protection requirements Amazon imposes on its API developers as well as this Privacy Policy. You may revoke this authorization at any time from your Amazon account or by contacting us.

Conversation and Agent Content. When you use the Autron Agent, we collect and store the content of your conversations with it. This includes the messages you send, the files, images and other material you upload or attach, the responses the Agent generates, the tools the Agent invokes and the results those tools return, any documents or reports the Agent produces, and any instructions, playbooks, guardrails or scheduled routines you configure. Where you connect the Agent to a third-party workspace such as Slack, or reply to an Agent email, we collect the content of those messages and the identifiers needed to route replies back to the correct conversation. Please do not enter information into the Agent that you do not wish us to process under this Privacy Policy.

Technical, Usage and Location Information. We automatically collect information on how you interact with the Offerings, such as the IP address from which you access the Offerings, date and time, information about your browser, operating system and computer or device, pages or features viewed and items clicked or tapped. We also collect application logs and diagnostic telemetry, which may include identifiers associated with your account and metadata about the requests you make. We may also collect location information, including location information automatically provided by your computer or device. We use cookies and similar technologies to collect some of this information.

Third Party Platforms. We may collect information when you interact with our advertisements and other content on third-party sites or platforms, such as social networking sites. This may include information such as "Likes", profile information gathered from social networking sites or the fact that you viewed or interacted with our content.

Other Information. We may collect other information from you that is not specifically listed here. We may use any such information in accordance with this Privacy Policy or as otherwise permitted by you.

Legal Basis

Performance of a contract. We process and store information you provide to us in order to perform our contract with you. Without this information, we wouldn't be able to provide our Offerings to you.

Legitimate interest. We also process information you provide to us to pursue our legitimate interests. Autron products help anyone who sells online save time and drive better growth through advertising. In order to engage visitors and leads we have a legitimate interest to collect relevant data and send messages based on this information. We consider your privacy and data protection rights when we pursue our legitimate interests and ensure that the way our Offerings work don't impact on those rights.

Consent. Where you have opted in to receive marketing communications from us, we will process your personal data to provide you with marketing communications in line with the preferences you have provided. You are not under any obligation to provide us with your personal data for marketing purposes, and you can withdraw your consent to your personal data being processed in this way at any time by contacting us at hello@autron.ai or, where relevant, by following the unsubscribe link in any marketing communication you receive from us. If you do choose to withdraw your consent, this will not mean that our processing of your personal data before you withdrew your consent was unlawful.

How We Use the Information We Collect

We use your information in the following ways:

To provide, maintain and improve the Offerings and our other products and services, including to operate certain features and functionality of the Offerings (for example, by remembering your information so that you will not have to re-enter it during this or subsequent visits);
To operate the Autron Agent, including sending your conversation content and connected account data to AI model providers in order to generate responses, as described in "AI Processing and Model Providers" below;
To carry out actions you or your configured routines direct the Agent to take, including creating and modifying advertising campaigns, targets, bids and budgets in your connected advertising accounts;
To process your inquiries or otherwise deliver customer service;
To process your payments, we share and use Payment Information as described in the section titled "Payment Information";
To control unauthorized use or abuse of the Offerings and our other products and services, or otherwise detect, investigate or prevent activities that may violate our policies or be illegal;
To analyze trends, administer or optimize the Offerings, monitor usage or traffic patterns (including to track users' movements around the Offerings) and gather demographic information about our user base as a whole;
To communicate directly with you, including by sending you newsletters, promotions and special offers or information about new products and services. Your opt-out options for promotional communications are described in the section titled "Your Rights and Choices";
To deliver you advertising, including by serving and managing ads on the Offerings or on third party sites and to tailor ads based on your interests and browsing history. Please see the section titled "Your Rights and Choices" for additional information on how to manage the ads you see; and
In the manner described to you at the time of collection or as otherwise described in this Privacy Policy.

AI Processing and Model Providers

The Autron Agent is built on large language models operated by third-party AI providers. To generate a response, we transmit the relevant parts of your conversation content and your connected account data to one of these providers. We currently use models from Anthropic, OpenAI, Google and xAI. Requests may reach a provider directly or through an intermediary routing service acting on our behalf. The provider used for a given request depends on the model selected for your account or for the feature in use, and the set of providers may change as we add or retire models.

These providers process your data on our behalf, under their terms, and solely to return a response to us.

We do not use your conversation content to train models of our own, and we do not sell it. The providers we use state that data submitted through their commercial APIs is not used to train their models, and our routing provider states that it does not use prompts or responses for training. Because those are their commitments rather than ours, we cannot guarantee them on their behalf, and we encourage you to review the terms of any provider whose model you select.

Because the Agent's responses are generated by a statistical model, they may be inaccurate, incomplete or out of date. Where the Agent is configured to make changes to your advertising accounts, it does so under the permissions and approval settings you configure. You remain responsible for reviewing the actions taken in your accounts.

Some Agent activity is automated: scheduled routines can run without you being present, generate reports, send emails to recipients you nominate, and — where you have enabled it — apply changes to your advertising accounts. You control which routines exist, when they run, who receives their output, and whether they may make changes.

Connecting Autron to Third-Party AI Clients

Autron operates a Model Context Protocol ("MCP") server that lets you connect your Autron account to third-party AI clients and assistants that you choose — for example, Claude. This connection is optional and is never enabled without your action.

When you connect a third-party AI client, you are taken through an authorization step in which you sign in to Autron and grant that client access. We record the client's identity, the access and refresh tokens issued to it, and session information such as which of your seller accounts the client is currently working with, so that we can service its requests and so that you can audit and revoke the connection later.

Once connected, the client can call the tools our MCP server exposes and receive the data those tools return. Depending on the tools available to your account, this can include advertising campaign structure and performance data, product and listing data, sales and inventory metrics, your configured goals, and a log of actions previously taken on your account. Where the tools available to your account include actions that change your advertising accounts, a connected client can invoke those actions, subject to the approval settings and entitlements on your account.

Data that a connected client retrieves from Autron leaves our Services and is thereafter handled by that client and its operator under their own terms and privacy policy, not this one. If you connect Autron to Claude, for example, the data returned to Claude is processed by Anthropic under Anthropic's privacy policy, and the conversation in which it appears lives in your Claude account rather than your Autron account. We encourage you to review the privacy policy of any AI client before you connect it.

You can revoke a connected client's access at any time from Settings → AI assistants in your Autron account, or by disconnecting Autron from within the AI client itself. You can also contact us at hello@autron.ai and we will revoke a client's access on your behalf. Revoking access prevents future requests. It does not retrieve or delete data the client has already received.

Sharing Your Information with Third Parties

We neither rent nor sell Personal Information in a personally identifiable form to anyone. However, we may share Personal Information with third parties as described in this section:

Service Providers and Subprocessors: We share personal information with third-party service providers who process it on our behalf in order to host, operate, secure, support and improve the Offerings. These are listed in the section titled "Service Providers and Subprocessors" below. All such providers are engaged under contract, are obliged to meet appropriate security requirements and to comply with applicable law, and do not have any right to use the personal information we share with them beyond what is necessary to perform their services for us.

AI Model Providers: We share conversation content and connected account data with AI model providers in order to operate the Autron Agent, as described in "AI Processing and Model Providers" above.

Third-Party AI Clients You Connect: Where you authorize a third-party AI client to connect to your Autron account, we share data with that client at its request, as described in "Connecting Autron to Third-Party AI Clients" above.

Analytics and Product Communications: We use third-party services to understand how customers use the Offerings and to communicate with you about them. Where you submit your details through a form or free tool on our Websites, we record the submission and the associated event so that we can respond and follow up. These services may collect the IP address assigned to you and, in some cases, other identifying information. Their ability to use and share that information is restricted by their own terms of use and privacy policies. The specific providers are named in the table below.

Business Transfers: We may choose to buy or sell assets. In these types of transactions, customer information is typically one of the business assets that would be transferred. Also, if we (or our assets) are acquired, or if we go out of business, enter bankruptcy, or go through some other change of control, Personal Information could be one of the assets transferred to or acquired by a third party.

Protection of Autron and Others: We reserve the right to access, read, preserve, and disclose any information that we reasonably believe is necessary to comply with law or court order; enforce or apply our Terms of Service and other agreements; or protect the rights, property, or safety of Autron, our employees, our users, or others.

Security: We may share your personal information with third parties (including our service providers and government entities) to detect, prevent, or otherwise address fraud or security or technical issues.

Partnerships: We may share your personal information with our business partners who offer a service to you jointly with us, for example when running a cross-promotion.

Payments: We may share your Payment Information to process your payments, as further described in the section titled "Payment Information".

Consent: We may share your personal information with a third party if we have your consent to do so.

We may also share aggregated or anonymized information with third parties for other purposes. Such information does not identify you individually, but may include usage, viewing and technical information such as the types of Offerings our customers and users generally use, the configuration of their computers, and performance metrics related to the use of Offerings which we collected through our technology. If we are required under applicable law to treat such information as personal information, then we will only disclose it as described above. Otherwise we may disclose such information for any reason.

Service Providers and Subprocessors

We rely on the following categories of service provider to deliver the Offerings. These categories reflect our processing as of the effective date above and may change; we will update this section as they do.

AI model providers — Anthropic, OpenAI, Google and xAI, named above, which receive conversation content and connected account data in order to generate Agent responses.
Cloud hosting and compute — running the application, storing uploaded files, and routing AI requests. Handles all data processed by the application, including conversation content.
Managed database hosting — accounts, conversations, routines, configuration, advertising performance data, and billing records.
Queueing and caching — scheduling and running background work. Job payloads may reference conversation and account data.
Logging and diagnostics — application logs and telemetry, which may include account identifiers and request metadata.
Email delivery and processing — sending Agent reports and digests, and receiving your replies to them.
Workplace messaging — the optional Slack integration, where you install it: messages exchanged in connected channels and threads.
Product analytics and customer messaging — contact details submitted through our forms and free tools, associated usage events, and the content of support conversations.
Payment processing — Payment Information and billing records.

We maintain a current list of the specific providers in each category. Customers and prospective customers can request it at hello@autron.ai.

Payment Information

When you make a purchase on the Offerings, any credit card information you provide as part of your Payment Information is collected and processed directly by our payment processor Stripe through their Stripe Checkout service. We never receive or store your full credit card information. Stripe commits to complying with the Payment Card Industry Data Security Standard (PCI-DSS) and using industry standard security. Stripe may use your Payment Information in accordance with their own Privacy Policy here: https://stripe.com/us/checkout/legal.

Data Retention

We retain personal information for as long as your account is active, and thereafter for as long as necessary to support the Offerings, comply with our legal obligations, resolve disputes and enforce our agreements.

In particular:

Conversation and Agent content is retained for the life of your account so that your history remains available to you. You can delete individual conversations at any time from within the Agent.
Connected advertising and retail data is retained for the life of your account and is refreshed on an ongoing basis while your connection remains authorized. Historical performance data is retained so that the Agent can analyze trends over time.
Authorization tokens for connected third-party AI clients are retained until they expire or until you revoke the connection.
Logs and diagnostic telemetry are retained on a rolling basis for operational and security purposes.
Billing records are retained for the period required by tax and accounting law.

When you delete your account, we delete or anonymize the personal information associated with it, except where we are required to retain it by law or have an overriding legitimate interest in retaining it. Residual copies may persist in backups for a limited period before being overwritten.

Other Access to or Disclosure of Your Information

The Offerings may also contain links to third party websites. This Privacy Policy applies solely to information collected by us. Even if the third party is affiliated with us through a business partnership or otherwise, we are not responsible for the privacy practices of such third party. We encourage you to familiarize yourself with the privacy policies of such third parties to determine how they handle any information they separately collect from you. Please be aware that we do not warn you when you choose to click through to another website when using the Offerings.

Your Rights and Choices

Opt-Outs. We may provide you with the opportunity to "opt-out" of having your personal information used for certain purposes when we ask for this information. If you decide to opt-out, we may not be able to provide certain features of the Offerings to you.

Communication Preferences. If you no longer wish to receive our newsletter and promotional communications, you may opt-out of receiving them by following the instructions included on such communications or on the Offerings. Please note, however, that you may be unable to opt-out of certain service-related communications.

Connected Accounts and Clients. You can revoke a third-party AI client's access at any time from Settings → AI assistants. You can manage a connected Amazon account from Settings → Connections, or by contacting us.

Blocking Cookies. You can remove or block certain cookies using the settings in your browser but the Offerings may cease to function properly if you do so.

How We Respond to Do Not Track Signals. Your Web browser may have a "do not track" setting which, when enabled, causes your browser to send a do not track HTTP header file or "signal" to each site you visit. At present, the Offerings do not respond to this type of signal.

Data Subject Rights. You can access, rectify, erase, restrict or export your personal information at any time by emailing us at hello@autron.ai. When updating information, however, we may maintain a copy of the unrevised information in our records. Some information may remain in our records after account deletion of such information from your account. We may use any aggregated data derived from or incorporating Personal Information after an account has been updated or deleted, but not in a manner that would identify any customers personally. You can object to our processing of your personal information at any time. If you are unsatisfied with the response you have the right to lodge a complaint with your supervisory authority.

Accessing and Updating Your Personal Information

When you use the Offerings, we make good faith efforts to provide you with access to your personal information upon your request and either provide you the means to correct this information if it is inaccurate or to delete such information at your request if it is not otherwise required to be retained by law or for legitimate business purposes. You may access, review, correct, update, change or delete your information at any time. To do so, please contact us at hello@autron.ai with your name and the information requested to be accessed, corrected or removed. We may decline to process requests that are unreasonably repetitive or systematic, require disproportionate technical effort (for instance, requests concerning information residing on backup tapes), jeopardize the privacy of others, would be extremely impractical, or for which access is not otherwise required. In any case where we provide information access and correction, we perform this service free of charge, except if doing so would require a disproportionate effort.

Please note that if you cease using the Service or we terminate your access to the Service in accordance with our Terms of Service, you may no longer have the ability to access or update your information.

We may retain your information as described in the section titled "Data Retention" above.

Changes to the Privacy Policy

We reserve the right to change our Privacy Policy at any time. If we make changes, we will post them and will indicate on this page the policy's new effective date. If we make material changes to this policy, we will notify you by email or through notice on the Offerings.

No Children Under Age 16

The Offerings are not intended for use by anyone under the age of 16, nor does Autron knowingly collect or solicit personal information from anyone under the age of 16. If you are under 16, you may not attempt to register for the Offerings or send any information about yourself to us, including your name, address, telephone number, or email address. In the event that we confirm that we have collected personal information from someone under the age of 16 without verification of parental consent, we will delete that information promptly. If you are a parent or legal guardian of a child under 16 and believe that we might have any information from or about such child, please contact us at the email or mailing address provided at the end of this Privacy Policy.

Security

The security of your personal information is important to us. We maintain a variety of appropriate technical and organizational safeguards to protect your personal information. We limit access to personal information about you to employees who we believe reasonably need to come into contact with that information to provide products or services to you or in order to do their jobs. Further, we have implemented reasonable physical, electronic, and procedural safeguards designed to protect personal information about you. When you enter sensitive information (such as your password), we encrypt that information in transit using industry-standard Transport Layer Security (TLS) encryption technology. Access to your Autron account by third-party AI clients is authorized using OAuth 2.0, so that you grant access without sharing your Autron password with the client. No method of transmission over the Internet, method of electronic storage or other security methods are one hundred percent secure. Therefore, while we strive to use reasonable efforts to protect your personal information, we cannot guarantee its absolute security.

Customer accounts are protected by a password for privacy and security. One must prevent unauthorized access to one's account and Personal Information by selecting and protecting passwords and limiting access to one's computer or device and browser by signing off after one has finished accessing your account.

Users Outside of the United States and Consent to Transfer

The Services are operated in the United States. If you are located in another jurisdiction, please be aware that information you provide to us will be transferred to, stored and processed in the United States. By using the Services or providing us with any information, you consent to this transfer, processing, and storage of your information in the United States, a jurisdiction in which the privacy laws are not as comprehensive as those in the country where you reside or are a citizen such as the European Union. You understand that the U.S. government can obtain access to the Personal Data you submit if necessary for investigative purposes (e.g., terrorism investigation). We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Policy. We use appropriate and suitable safeguards for transferring your Personal Data to the U.S. (e.g., standard contractual clauses issued by the European Commission, which can be accessed here).

Contact Us

If you have questions or need to contact us about this Privacy Policy, please email us at hello@autron.ai.