Privacy Policy.

1. Introduction & Overview

This Privacy Policy describes how Fatten Media (“we”, “us”, or “our”), founded and directed by Aaditya Daiya, collects, processes, stores, and safeguards personal and business information when you visit https://www.fattenmedia.com, interact with our diagnostic calculators (including the Free Amazon PPC Audit Tool), request a 24-hour account teardown, or engage our Amazon advertising management services.

We operate as a dedicated e-commerce advertising consultancy serving brand owners and private-label sellers primarily across the United States, United Kingdom, Canada, and global Amazon marketplaces. Because our work frequently involves inspecting proprietary business telemetry—including product gross margins, advertising expenditure, Amazon search term reports, and conversion metrics—we treat confidentiality as a foundational operating principle.

By accessing or using our website and services, you acknowledge that you have read, understood, and agree to the practices described in this Privacy Policy. If you do not agree with any terms, please discontinue use of our site and tools.

2. Information We Collect

We collect information in two main categories: information you provide voluntarily and technical data collected automatically as you navigate our platform.

A. Information You Provide Voluntarily

• Direct Contact Details: Full name, professional email address, direct phone/WhatsApp number, business or brand name, and geographic country or headquarters location submitted through our contact forms, consultation schedulers, or audit intake forms.
• Brand & Marketplace Details: Target Amazon marketplace (e.g., US Amazon.com, UK Amazon.co.uk), Amazon Storefront URL, brand registry handle, and top representative ASINs.
• Advertising Performance Telemetry: Approximate monthly ad spend, gross monthly ad revenue, current Advertising Cost of Sales (ACoS), Total ACoS (TACoS), target profitability benchmarks, and catalog size (number of active SKUs) entered into our diagnostic audit tool.
• Commercial Challenges & Qualitative Notes: Explanations of current ad account bottlenecks, inventory liquidation targets, seasonal objectives, or campaign restructuring history submitted in free-form text areas.
• Auditing Documents & Reports: 60-day Search Term Reports, Placement Reports, or Campaign Performance spreadsheets exported from Amazon Advertising Console that you upload or email to us for manual evaluation.

B. Information Collected Automatically

When you access our website, our servers and third-party analytics integrations automatically log standard technical data, including:

• Internet Protocol (IP) address and approximate geolocation (city and country level).
• Browser type, version, language preferences, and device characteristics (mobile vs desktop).
• Operating system and screen resolution.
• Referring URLs, pages viewed, time spent per page, and navigation paths.
• Core Web Vitals performance telemetry (Largest Contentful Paint, Cumulative Layout Shift).

3. Amazon Ads Console & Search Term Confidentiality

When conducting a complimentary 24-hour account audit or onboarding a managed client:

• Strict Read-Only Permission: We only ever ask for delegated “View Only” (read-only) permissions inside your Amazon Advertising Console. We do not require master Seller Central access or master login passwords.
• Zero Cross-Account Data Sharing: Your high-converting keywords, negative match registries, and placement multiplier formulas are never shared with or ported to competing brands, even within similar product niches.
• Senior Review Only: All accounts are inspected directly by senior strategists led by Aaditya Daiya. We do not outsource search term audits or account reviews to anonymous offshore third-party data entry contractors.
• Revocation at Any Time: You retain complete control over your Amazon Advertising Console permissions and may revoke our delegated view access instantly at any point without prior notice.

4. How We Use Collected Data

We process your information strictly for legitimate commercial and diagnostic purposes:

• Delivering 24-Hour Teardowns & Audits: Calculating wasted ad spend, negative keyword leaks, placement bid distortions, and delivering customized audit action plans to your inbox.
• Direct Communication: Replying to consultation requests, sending project kickoff summaries, scheduling video teardown calls, and notifying you about account status updates.
• Campaign Execution: For contracted agency clients, configuring and optimizing Sponsored Products, Sponsored Brands, Sponsored Display, and Amazon DSP campaigns within agreed profitability parameters.
• Service Improvement: Calibrating our diagnostic tool logic, benchmark datasets, and educational journal guides to better reflect current marketplace economics.
• Security & Abuse Prevention: Protecting our servers against denial-of-service attacks, fraudulent form submissions, and unauthorized automated scraping.

5. Legal Bases for Processing (GDPR & US Law)

If you reside in the European Economic Area (EEA), United Kingdom, or Switzerland, our legal bases for processing your personal data under the EU/UK General Data Protection Regulation (GDPR) include:

• Contractual Necessity: Processing required to deliver the audit teardown or fulfill an Amazon PPC management contract requested by you.
• Legitimate Interests: Processing necessary for analyzing website performance, safeguarding security, and communicating commercial proposals to business owners who requested consultation.
• Consent: Where you have explicitly opted into receiving our Monday newsletter or agreed to non-essential performance cookies. You may revoke consent at any time.
• Legal Compliance: Processing necessary to comply with applicable tax, financial, and regulatory obligations.

6. Third-Party Subprocessors & Infrastructure

We rely on industry-standard, security-compliant third-party cloud infrastructure providers to host our platform and transmit lead notifications. These subprocessors process data only under our strict instructions:

We do not sell, rent, or trade your personal or business data to any data brokers, ad networks, or commercial affiliates.

7. Cookies & Tracking Technologies

Cookies are small text files stored on your computer or mobile device when you browse websites. Fatten Media uses cookies and local storage tokens for limited, strictly functional and diagnostic purposes:

• Essential / Functional Cookies: Required to enable core site navigation, preserve tool states (such as selected currency and marketplace within our PPC audit calculator), and maintain security.
• Performance & Analytics Cookies: We deploy Google Analytics 4 (Measurement ID: G-RT2C019V9H) to evaluate aggregate traffic patterns, visitor counts, and page load performance. GA4 does not log raw IP addresses, and data is aggregated anonymously.

Managing Cookies: You can configure your browser to block or alert you about all cookies. If you prefer to block Google Analytics across the web, you can install the official Google Analytics Opt-out Browser Add-on.

8. Data Security & Storage Architecture

We implement robust technical and organizational safeguards designed to protect personal and business data against unauthorized access, accidental alteration, disclosure, or destruction:

• Encryption in Transit: All HTTP traffic to and from fattenmedia.com is strictly enforced over TLS 1.3 / HTTPS encryption using modern cipher suites.
• Encrypted Database Storage: Inbound audit submissions stored in MongoDB Atlas are protected with AES-256 encryption at rest and isolated network access controls.
• Restricted Internal Access: Only authorized senior personnel (Founder and Lead Strategist) have credentials to access inbound lead databases and client communication archives.
• Zero Sensitive Financial Storage: We never collect or store credit card numbers, Amazon seller passwords, or banking credentials on our web servers.

9. Data Retention & Deletion Protocol

We retain personal and commercial data only for as long as necessary to fulfill the purposes for which it was originally collected:

• Teardown & Audit Records: Stored for 12 months to allow historical comparison if you return for a subsequent performance audit, after which records are securely archived or expunged.
• Client Operational Data: Retained for the duration of the active agency service agreement, plus statutory periods required for accounting, billing, and tax audit compliance.
• Right to Expunge: You may request complete erasure of your contact details, brand records, and audit telemetry at any time by sending a one-line email to aaditya@fattenmedia.com. Requests are executed within 72 business hours.

10. Your Privacy Rights (GDPR & CCPA/CPRA)

Depending on your geographic jurisdiction, you hold specific legal rights regarding your personal information:

A. For Residents of the European Union & United Kingdom (GDPR)

• Right of Access: Obtain a copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete records.
• Right to Erasure (“Right to be Forgotten”): Request deletion of your data.
• Right to Restriction: Request that we limit the processing of your data.
• Right to Data Portability: Receive your data in a structured, machine-readable format.
• Right to Object: Object to processing grounded in legitimate interests or marketing.

B. For Residents of California & US States (CCPA / CPRA)

• Right to Know: Request disclosure of the categories and specific pieces of personal data collected.
• Right to Delete: Request deletion of personal information collected from you.
• Right to Non-Discrimination: We will never deny services, charge differing rates, or provide inferior service for exercising your privacy rights.
• Do Not Sell My Info: We do not sell or share personal data for cross-context behavioral advertising.

To exercise any of these statutory rights, please submit your request to aaditya@fattenmedia.com. We will verify your identity and confirm fulfillment within 30 days.

11. Children's Privacy Notice

Our website, diagnostic tools, and advertising agency services are strictly intended for commercial entities, e-commerce business operators, and individuals aged 18 and older. We do not knowingly solicit or collect personal information from children under the age of 16. If we become aware that a child has provided us with personal data, we will immediately delete such records from our databases.

12. Updates to This Policy

We may periodically revise this Privacy Policy to reflect changes in our operational procedures, advertising tool features, Amazon marketplace guidelines, or statutory privacy laws. When updates are published, we will update the “Last Updated” date at the top of this document. Significant material changes will be highlighted with a prominent banner on our website.

13. Contact & Data Protection Officer

If you have questions, feedback, or concerns regarding our privacy practices, or if you wish to exercise your data rights, please contact our founder and principal data officer directly: