Privacy Policy

1. Who we are

We are the controller responsible for the personal data processed in connection with this website and our review-removal service. If you have any questions about this policy, contact us at the email above.

2. What data we collect

Information you give us:

• When you request a free audit or contact us: your name, email address, the product links / ASINs you submit, and any message content.
• When you register for the service: your name, company/brand name, email address and billing country.
• When we work on your behalf: the ASINs, product details and review information relevant to your case.

Review data (including third-party data): to provide the review-removal service, we process the content of Amazon reviews relevant to your case. This may include the reviewer's public display name, the star rating, the review title and text, and the review date, as shown publicly on Amazon. We process this data solely to assess whether a review appears to violate Amazon's Community Guidelines and, where you request it, to prepare and submit a removal report to Amazon. Our legal basis for processing this data is our legitimate interest (and that of our clients) in addressing reviews that appear to breach Amazon's guidelines (Art. 6(1)(f) GDPR).

Information collected automatically: when you visit the site, our hosting provider may process standard technical data such as your IP address, browser type, device information and access timestamps in server logs, for security and reliability purposes.

Payment data: payments are processed by Stripe. Card details are entered directly with Stripe and are not stored on our servers; we only receive limited information such as payment status and the last digits of the card.

3. How and why we use your data

• To provide the audit and review-removal service you request, and to communicate with you about it.
• To create and manage your account and to display your reviews, their status and removal proof.
• To issue invoices and process payments via Stripe.
• To operate, secure and improve our website.
• To comply with legal obligations and to establish or defend legal claims.

Where the GDPR applies, our legal bases are: performance of a contract (Art. 6(1)(b)), our legitimate interests in running and securing our business (Art. 6(1)(f)), your consent where requested (Art. 6(1)(a)), and compliance with legal obligations (Art. 6(1)(c)).

4. Who we share data with

We do not sell your personal data. We share it only with service providers ("processors") that help us operate, for example:

• Stripe – payment processing and invoicing.
• Netlify – website hosting and delivery.
• Vercel – hosting of our customer dashboard application.
• Supabase – database and authentication for our dashboard; where applicable, data is hosted in an EU region.
• Email/communication providers – to correspond with you.
• Google Fonts – fonts are loaded from Google servers, which may involve your IP address.

We may also disclose data where required by law, or to protect our rights.

5. International data transfers

We are based in the United Arab Emirates and our providers may process data in the UAE, the EU, the UK, the USA and other countries. Where personal data of EU/UK individuals is transferred outside the EEA/UK, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses where applicable.

6. How long we keep your data

We keep personal data only as long as necessary for the purposes described above – for example, for the duration of our service relationship and for any period required to meet legal, accounting or tax obligations – after which it is deleted or anonymised.

7. Your rights

Depending on your location, you may have the right to access, correct, delete or restrict the processing of your personal data, to object to processing, to data portability, and to withdraw consent at any time. To exercise any of these rights, contact us at info@elevate-commerce.de. If you are in the EU/UK, you also have the right to lodge a complaint with your local data protection authority.

8. Cookies & fonts

This website does not use tracking or advertising cookies. Fonts are loaded from Google Fonts as described above. If we introduce analytics or other cookies in the future, we will update this policy and request consent where required.

9. Data security

We use appropriate technical and organisational measures to protect your data against unauthorised access, loss or misuse. No method of transmission over the internet is, however, completely secure.

10. Children

Our service is intended for businesses and is not directed at children. We do not knowingly collect personal data from minors.

11. Changes to this policy

We may update this Privacy Policy from time to time. The latest version will always be available on this page, with the revision date shown at the top.

Starfix.ai is an independent service and is not affiliated with, endorsed by, or sponsored by Amazon. Amazon and all related marks are trademarks of Amazon.com, Inc. or its affiliates.