Security
Security is foundational to the Service. AdSwarm operates a comprehensive information-security program covering the confidentiality, integrity, and availability of customer data, with controls aligned to the data-protection requirements of the marketplace platforms we integrate with, including the Amazon Data Protection Policy.
1. Program Overview
- Encryption. All data is encrypted in transit using TLS. Marketplace authorization credentials are encrypted at rest using AES-256.
- Authentication and access control. Multi-factor authentication is mandatory for every user account. Internal and customer-facing access is governed by role-based controls operating on the principle of least privilege, with automatic account lockout protection.
- Data minimization.The Service does not request, retrieve, or store consumer personal information such as buyer names, addresses, email addresses, or telephone numbers. Marketplace passwords are never collected; account connections use the platforms’ own OAuth consent flows exclusively.
- Auditability. Authentication, authorization, administrative, and data-access events are logged and retained as a security audit trail.
- Retention and deletion. Operational data stores are governed by defined retention schedules with automated enforcement. Credentials are destroyed immediately upon account disconnection, and customer data is deleted following account closure.
- Resilience. Systems are backed up on a continuous schedule to separate infrastructure, and restoration procedures are periodically tested.
- Incident response. AdSwarm maintains a documented incident-response plan with defined severity tiers, escalation paths, and notification obligations, reviewed on a recurring cadence.
2. Reporting a Vulnerability
We value the work of the security research community. If you believe you have identified a vulnerability in the Service or in any AdSwarm system, please report it to [email protected]. Include a description of the issue, the steps required to reproduce it, and any relevant evidence. We acknowledge reports promptly, keep reporters informed of remediation progress, and do not pursue legal action against good-faith research conducted in accordance with this policy.
When researching, we ask that you:
- do not access, modify, or delete data belonging to any other customer;
- do not degrade the availability of the Service;
- do not publicly disclose an issue before we have had a reasonable opportunity to remediate it.
3. Reporting a Security or Privacy Incident
To report a suspected security incident, unauthorized access, or privacy concern affecting your account, contact [email protected] with “Incident” in the subject line. Incident reports are triaged with priority. Where an incident affects customer data, we notify affected customers without undue delay and fulfill our notification obligations to the affected marketplace platforms — including notification to Amazon within 24 hours of detection for incidents affecting Amazon Information — and to regulators as required by law.
4. Contact
AdSwarm Tools, Inc.
Security: [email protected]
Privacy: [email protected]