Privacy

Data controller

Imen OUERFELLI, married name SAIDENE, trading as SUFET Trade & Tech. Contact: contact@sufet-tt.com.

Public website data

The public site currently has no form, account creation or payment. SUFET does not install advertising trackers. Information you voluntarily send by email is used only to handle your request.

Amazon Ads connection

The Amazon Ads connector is in preparation and is not yet enabled in the deployed service. When opened, an authorised user may request a connection through Login with Amazon. The current design reads advertiser profile information only: profile ID, account name, currency, timezone, SUFET profile-availability status, authorisation scope and sync details. Amazon authorisation may include the advertising campaign-management scope, but the current SUFET implementation uses it only to list profiles. OAuth access and refresh tokens are encrypted when stored.

Current Amazon limits

Amazon campaigns and performance reports are not currently imported, and Amazon ads are not created, edited or delivered by SUFET. Amazon profile data is not sent to the SUFET AI assistant. Any expansion will require separate activation and an updated notice.

OpenAI analysis assistant

When enabled and requested by a user, SUFET sends the user's question and the campaign data needed to answer it (for example campaign name, platform, status, budget and performance metrics) to the OpenAI API. OpenAI processes this information to generate an analysis or proposed action; SUFET does not execute the action automatically. OpenAI's API stores Responses data for 30 days by default and may retain abuse-monitoring logs for up to 30 days, subject to SUFET's account settings. OpenAI says API data is not used to train its models unless the customer explicitly opts in. SUFET's actual settings and transfer arrangements must be verified before public launch.

Recipients and retention

Amazon handles sign-in and the requested API calls. OpenAI receives questions and campaign details when the assistant is used. Necessary technical service providers may process data to host and secure SUFET. SUFET clears Amazon connection tokens when the account is disconnected; profile information already synchronised remains in the relevant SUFET space until an erasure request or deletion of that space, subject to applicable legal obligations.

Technical hosting data

The hosting provider may process strictly necessary IP and technical log data for delivery, security and diagnostics.

Your rights

Depending on your situation, you may request access, correction, deletion, restriction, portability or object to processing. You may also complain to the CNIL. To request erasure of synced profile information, contact contact@sufet-tt.com.

Backups, deletion and restoration

Three encrypted backup tasks are active on the SUFET Ads pilot at separate times: daily rotation for 7 days, weekly rotation for 52 weeks, and each annual copy kept for up to 5 years. Production backups still require separate configuration and verification before public launch. Data deleted from the active space may remain in an earlier copy created under this system until it expires, potentially for up to 5 years for an annual copy. Backups are not used for ordinary service operations.

SUFET does not restore a backup at a user’s request to recover deleted data. Restoration is reserved for a major service-continuity emergency. Before a restored copy is returned to production, deletion, rectification or restriction requests received since that snapshot must be reapplied and verified.

For a documented dispute or an applicable, verified legal obligation or request, SUFET may isolate only the information necessary for the matter, with restricted access and for a justified period. This evidentiary retention is separate from restoring a backup and does not justify blanket or indefinite retention.

Specific Amazon Ads safeguards

Amazon rules also cover API metrics and KPIs, even without personal data. The general 7-day, 52-week and up-to-5-year backup rotation does not override these rules. On Amazon notice, targeted information must be deleted or returned within 72 hours; all online or network-accessible instances, including affected backups, must be securely deleted within 90 days. A documented dispute is not a blanket exemption; any conflict with a legal obligation is reviewed individually.

The Amazon connector remains disabled until erasure of the data, derivatives and accessible copies has been validated. OpenAI is disabled on the SUFET Ads pilot. No Amazon profile, campaign or KPI is sent to OpenAI. That processing requires written confirmation from Amazon and verified provider safeguards; user consent or a no-training setting alone is not enough.

The Ads pilot and encrypted backups are hosted with Infomaniak, separately from the public website. Applicable external and internal Ads service connections use certificate-verified TLS. Report suspected security issues to security@sufet-tt.com.