N
Noyan Digital AI

Privacy Policy

Last updated 23 September 2026

This is a private business tool, not a public service. Noyan Digital AI is used by Noyan Digital and people it invites to manage Amazon selling and advertising accounts. Signing in does not give you access — an administrator has to grant it. There is no public sign-up.

What we collect when you create an account

A six-digit code is emailed to confirm the address is yours. The code itself is never stored — only a keyed hash of it — and it is destroyed once used.

If your administrator has switched on Google sign-in instead, we receive your email address, name and profile picture from Google, and nothing else: only the openid, email and profile scopes are requested. We cannot see your Gmail, Drive, Contacts or Calendar, and we never receive your Google password.

What that information is used for

One thing only: to identify you and to decide which parts of the tool you may open. It is not used for advertising, not used to train any model, not sold, and not shared with anyone for their own purposes.

Until an administrator approves your account you can see nothing but a waiting page.

Business data held in the tool

The tool stores Amazon business data belonging to Noyan Digital and its clients — orders, sales, advertising performance, product listings, costs and similar operational records — pulled from Amazon through the Selling Partner API and the Advertising API using each account owner's own authorisation. It also reads publicly visible Amazon product pages to compare prices and buy-box status across marketplaces.

This is company data, not personal data about you as a user of the tool.

Where it is stored, and who else is involved

Data is held in a Supabase (PostgreSQL) database and the application runs on Vercel. The services involved are:

Your browser also loads fonts and script libraries from Google Fonts, cdnjs and jsDelivr. No data about you is sent to them beyond the ordinary request for those files.

Cookies

One cookie keeps you signed in. It is HttpOnly and sent only over HTTPS, and it expires after seven days without use, or thirty days in any case. A second short-lived cookie protects the sign-in round trip against forgery. There is no analytics, tracking or advertising cookie of any kind — the tool carries no third-party tracker.

How long it is kept, and how to have it removed

Your user record is kept for as long as you have access. Ask us and we will delete it, which removes your email, name and picture from the system. Amazon business records are kept for as long as the relevant client account is active.

Security

Access is restricted to approved users, each limited to the specific accounts and screens an administrator grants them. Traffic is encrypted in transit. Credentials for Amazon and other services are held as server-side secrets and are never exposed to the browser.

Changes

If this changes we will update this page and the date at the top.

Contact

Questions, or a request to delete your data: noyandigital@gmail.com.