Security

Your Amazon data, protected.

Pulserion reads your Seller Central, Vendor Central and Advertising data to give your team checked, prioritised actions every morning. Here’s how we keep that data safe, who can see it, and what our AI does and doesn’t do with it.

At a glance

Changes only with your approval.

Pulserion never changes your Amazon account on its own.

No restricted buyer data.

We don’t request or store buyer names, street addresses, phone numbers or emails.

Encrypted everywhere.

TLS in transit, AES-256 at rest.

Isolated per customer.

Each user only ever sees their own company’s accounts.

Two-step sign-in.

Every user needs a strong password and an authenticator app.

Not used to train third-party AI.

Your data never trains outside AI models.

How we connect to Amazon

Pulserion reads your Seller Central, Vendor Central and Advertising data. Any change to your Amazon account is only ever made with your approval. Recommendations tell your team what to do and why; your team decides.

  • Your authorization is encrypted. Your Amazon authorization is stored only in encrypted form, and the key is kept separate from the data.
  • No restricted buyer data. Pulserion does not request or store restricted Amazon buyer information (names, street addresses, phone numbers or emails). That access is turned off for every account.
  • Amazon’s rules apply. We follow Amazon’s Data Protection Policy and Acceptable Use Policy for every account we connect, and we don’t request restricted buyer information.

How your data is stored

  • Encrypted in transit and at rest. All data is encrypted in transit (TLS) and at rest (AES-256).
  • Stored in the United States. Our database and analytics warehouse both run in US regions.
  • Backed up daily. Data is backed up daily, and backups are kept for 7 days.
  • Separated per customer. Every customer’s data is separated with row-level security, and every analytics query is filtered to the accounts you’ve been given, so a user can only ever see their own company’s accounts.
  • Dedicated datasets for Enterprise. Enterprise customers can request a dedicated, isolated dataset.

Who can see your data

  • Two-step verification on every sign-in. Every user signs in with a password of at least 12 characters plus an authenticator app.
  • Access per account. Team members and client users see only the accounts they’re given, and agencies can limit which pages a client sees.
  • Every action is logged. Acknowledging, dismissing or suppressing an alert, and creating or completing a task, is recorded in the activity log.
  • Limited staff access. Only a small number of Pulserion staff can access customer data, only to support you or fix a problem, and their access is protected by two-step verification.
  • Payments. Payments are handled by our payment processor. Pulserion never sees or stores your card number.

AI and your data

Pulserion’s insights are written by AI after each data refresh, on structured, checked data. Here’s exactly what that involves.

  • No training of third-party AI models. We never use your data to train third-party AI models, and our AI providers’ terms don’t allow them to train on it.
  • Only what’s needed. We send only the business data needed to write an insight: metrics, product and campaign details, and the account context your team sets up. We never send buyer personal information.
  • Our own models stay inside Pulserion. We use how Pulserion is used, and the results it produces (such as keyword classifications, sales forecasts and campaign recommendations), to improve Pulserion’s own models. These models only power features inside Pulserion and are never shared or sold.

Retention and deletion

When a workspace closes, its data is deleted within 60 days, or sooner on request. Email security@pulserion.com to request deletion.

Reporting a security issue

Found a vulnerability or have a security question? Email security@pulserion.com. We read every report.

If a security incident affects your data, we’ll notify you without undue delay.

See also: Privacy Policy · Terms of Service

Frequently asked questions

Does Pulserion change anything in my Amazon account?

Not on its own. Pulserion reads your Seller Central, Vendor Central and Advertising data and recommends actions. Any change to your Amazon account is only ever made with your approval.

Does Pulserion collect Amazon buyer personal information?

No. Pulserion does not request or store restricted buyer information such as names, street addresses, phone numbers or emails. That access is turned off for every account.

Is my data used to train AI models?

Not third-party ones. We never use your data to train third-party AI models, and our AI providers’ terms don’t allow them to train on it. We do use results Pulserion produces, such as keyword classifications, to improve Pulserion’s own models, which only power features inside Pulserion and are never shared or sold.

Can other customers or agencies see my data?

No. Every customer’s data is separated with row-level security, and every analytics query is filtered to the accounts a user has been given. Enterprise customers can also request a dedicated, isolated dataset.

Where is my data stored?

In the United States, encrypted in transit (TLS) and at rest (AES-256), with daily backups kept for 7 days.

How do I report a security issue?

Email security@pulserion.com.