The rules we both play by.

A binding agreement between you and DataDoe, Inc.

These Terms of Service ("Terms") form a binding legal contract between you ("you", "your") and DataDoe, Inc. ("DataDoe", "we", "our") and govern your use of our SaaS platform (the "Service").

By registering, accessing, or using any portion of the Service, you affirm that you have read, understood, and agree to be bound by these Terms. If you do not agree, do not use the Service.

Who can use DataDoe.

You must be at least 18 years old, or the age of majority in your jurisdiction, to use the Service. By using DataDoe, you represent and warrant that all information you provide is truthful, accurate, and complete.

If you use the Service on behalf of an organization, you warrant that you are authorized to bind that organization to these Terms.

When you invite additional users to an organization you administer, you accept these Terms on their behalf and warrant that they will comply with these Terms. Invited users are bound by these Terms from the moment they first access the Service through your organization, and their continued use constitutes their own acceptance.

What DataDoe is.

DataDoe is a data layer for Amazon sellers, vendors, and agencies. The Service provides structured access to your Amazon data and the surfaces to consume it where you work.

The Service includes:

• Real-time and historical Amazon data — Seller Central, Vendor Central, and Amazon Ads
• MCP server for direct integration with AI clients including Claude, ChatGPT, Cursor, Codex, GitHub Copilot, and Gemini
• REST API for custom integrations and pipelines
• BigQuery dataset sharing for warehouse and BI workflows
• Custom and scheduled exports (CSV, JSON, Excel) delivered on demand or on a recurring schedule
• Pre-built and AI-assisted reports — Profit & Loss, Inventory, Orders, Search Terms, and Vendor analytics
• Profitability analysis with COGS, fees, and ad spend reconciled into a single view
• AI-initiated actions on your Amazon accounts when you explicitly authorize them — including bid adjustments, listing updates, inventory operations, price changes, purchase orders, and other write workflows, each gated by per-action confirmation

Your account, your responsibility.

To use the Service, you must register an account and provide accurate, current, and complete information. You are responsible for maintaining the confidentiality of your credentials and for all activity that occurs under your account.

You agree to notify us immediately at contact@datadoe.com if you suspect unauthorized access to your account.

We reserve the right to deny registration, suspend access, or terminate accounts at our sole discretion.

How we handle your data.

Your use of the Service is also governed by our Privacy Policy, which is incorporated into these Terms by reference. Please review it to understand how we collect, use, and protect your information.

The vendors we rely on to run DataDoe.

To deliver the Service, DataDoe engages a small set of vetted subprocessors. Each subprocessor is contractually bound by confidentiality and data-protection obligations consistent with these Terms and applicable law, and we conduct third-party risk assessments before granting any subprocessor access to customer or Amazon data.

The current list of subprocessors above is the authoritative version and may be updated from time to time. If you have signed a Data Processing Addendum (Section 10), the DPA governs how Sub-processor changes are handled.

How we handle data from your Amazon accounts.

When you authorize DataDoe to connect to your Amazon Seller Central, Vendor Central, or Amazon Ads accounts via OAuth, we receive Amazon Information on your behalf. This includes order data, advertising data, settlement and finance data, inventory data, and listings data.

PII is an opt-in paid add-on

By default, your DataDoe account does not receive buyer personally identifiable information (PII) (such as customer names and shipping addresses on orders). PII fields are only retrieved from Amazon if you explicitly enable the Amazon PII access add-on (see Section 14). Without this add-on, order data is delivered with PII fields stripped or omitted at the source.

Purpose limitation

We use Amazon Information solely to provide the Service to you. We do not:

• Sell, rent, license, or otherwise share Amazon Information with third parties for marketing purposes
• Use Amazon Information to target Amazon customers for advertising, review fabrication, or product promotion
• Publish, distribute, or aggregate insights about Amazon's business for our own commercial purposes or outside your authorized user base
• Use Amazon Information or seller data to train AI/ML models — neither our own models nor those of any third-party AI provider

PII retention

Where buyer PII is received under the opt-in add-on, it is retained only as long as necessary to fulfill the underlying business purpose (such as enabling tax calculation, order analytics, or shipping reconciliation) and in any event no longer than 30 days after order delivery, except where retention is required by applicable legal, tax, or regulatory obligations.

Data attribution & isolation

Amazon Information is tagged at the source within our systems so it can be traced back to its origin and to the specific tenant that authorized it. We maintain logical isolation between customer tenants.

Deletion on request

Upon your written request, or upon Amazon's request where applicable, we will permanently and securely delete Amazon Information within 30 days, except to the extent retention is required by law. Audit and security logs may be retained in accordance with Section 8.

The controls protecting your data.

We operate the Service in accordance with industry best practices, taking reference from frameworks including ISO/IEC 27001, ISO/IEC 27002, and the NIST Cybersecurity Framework. The controls below are part of our standard configuration:

Encryption

• In transit — all data is encrypted using HTTPS with TLS 1.3 on internal and external networks
• At rest — all data is encrypted using AES-256-GCM on AWS and GCP storage

Access & credential management

• Multi-factor authentication (MFA) required for all administrative and cloud access
• Least-privilege role-based access via AWS IAM and GCP IAM; no shared admin accounts
• Secrets, API keys, and database credentials stored in AWS Secrets Manager — never hardcoded in source
• Quarterly access reviews for all employee accounts; access revoked within 24 hours of termination
• Strong password policy (minimum 12 characters, no reuse of the last 10, annual rotation)

Network & application security

• Public S3 buckets are blocked; bucket-level encryption is enforced; Secure Transport conditions enforced for S3 access
• Segregated test and production environments; changes pass through code review and CI before production deploy
• Dark-web monitoring for company domains and employee email accounts

Logging & monitoring

• Access, event, and security logs retained for a minimum of 12 months
• Logs are scrubbed of PII where not legally required
• Logs are protected against unauthorized access and tampering

Personnel

• Mandatory security awareness training at onboarding and annually, covering PII handling, phishing/social engineering, and incident reporting
• Confidentiality obligations included in every employment and contractor agreement

What happens if something goes wrong.

DataDoe maintains a documented Incident Management Plan covering detection, classification, containment, eradication, recovery, and post-incident review. The plan is reviewed at least every six months and after any material infrastructure or system change.

If we become aware of a confirmed security incident affecting your data, we will:

• Notify affected customers without undue delay, and in any event within the timeframes required by applicable law (e.g., 72 hours under GDPR)
• Provide a description of the nature of the incident, the categories of data involved, and the steps taken to contain and remediate it
• Cooperate reasonably with your own incident response and notification obligations

Our security and incident point of contact is contact@datadoe.com.

For customers acting as data controllers.

If you are a controller of personal data under GDPR, the UK GDPR, the CCPA, or comparable laws, and you require a Data Processing Addendum (DPA) to govern our processing of personal data on your behalf, we offer a standard DPA incorporating the European Commission's Standard Contractual Clauses (SCCs) for international transfers, the UK International Data Transfer Addendum, and equivalent mechanisms.

You can read or download our DPA directly. If you require a counter-signed copy for your records, contact contact@datadoe.com. Once executed, the DPA forms part of these Terms and prevails in the event of conflict with respect to the processing of personal data.

Where your data lives.

DataDoe is operated from the United States, and customer data — including Amazon Information — is stored and processed on AWS and GCP infrastructure located in the United States.

If you are located outside the United States, your data will be transferred to, stored in, and processed in the United States. We rely on appropriate transfer mechanisms — including the EU Standard Contractual Clauses and the UK International Data Transfer Addendum — when executing a DPA with EU/UK/Swiss customers.

How payment works.

The Service is provided on a monthly subscription model. Each subscription includes a monthly allowance of 10 million data rows and 1,500 AI tokens (see Section 15). Overage fees apply beyond these included allowances — see Section 14 and Section 15.

Billing rhythm

Base subscription fees, additional seats, and data-row allowances are billed in advance. AI-token overage, where applicable, accrues during the month and is billed in arrears on your following invoice.

We reserve the right to modify pricing at any time, with at least 30 days' written notice prior to the change taking effect.

Late payments accrue interest at 1.5% per month, or the maximum rate permitted by applicable law, whichever is lower. All financial obligations incurred under these Terms shall survive any termination of your account.

Existing subscriptions (grandfathering)

Customers with an active subscription as of the effective date of these Terms remain on their prior plan and pricing, with no migration required. The allowances and pricing described in Sections 12, 14, and 15 apply to subscriptions started after the effective date.

How promo codes work.

• One-time use per account.
• Apply only to the base monthly fee — not to add-ons or overages.
• Subscriptions auto-renew at the standard rate after the discount expires unless canceled.
• Limited to new customers unless explicitly stated otherwise.
• Cannot be combined with other discounts unless explicitly permitted.

DataDoe may revoke or suspend any promotional offer at any time without prior notice if abuse or misuse is suspected.

What costs extra.

Your base subscription includes 10 million data rows per month. Beyond that, the following add-ons and overages apply:

Data overage is added automatically when you exceed your monthly row allowance. Once added, your new usage tier becomes the default for subsequent billing cycles. AI-token overage is opt-in only and is governed separately by Section 15.

BigQuery integration is free to enable. Usage is then metered in AI tokens — 0.2 AI tokens per Integrated-Data query and 0.5 AI tokens per Raw-Data query (see Section 15). Any charges for your own Google BigQuery scans are billed separately by Google to your GCP account and are not part of DataDoe's fees.

Amazon PII access is an opt-in add-on that unlocks buyer PII fields (such as customer names and shipping addresses on orders) from Amazon. Without this add-on, your account does not receive PII fields from Amazon's APIs — order data is delivered with those fields stripped or omitted at the source. PII access is handled in accordance with Section 7 and Amazon's SP-API Data Protection Policy.

All active add-ons, usage limits, and charges are clearly displayed within your account's billing dashboard.

The unit of measure for metered operations.

AI tokens are the unit of measure for certain metered operations, including data exports, Seller Central / Vendor Central and Amazon Ads Actions (writes), and BigQuery queries. Each subscription includes 1,500 AI tokens per month. Included tokens reset monthly and do not roll over.

Overage

Tokens used beyond the monthly included allowance are charged at $0.04 per token, up to the spending limit you configure. The default spending limit is $0, meaning no overage is charged unless you opt in — either by setting a spending limit (auto-reload) or by purchasing a prepaid bundle.

Prepaid bundles

You may optionally purchase prepaid AI-token bundles in three fixed sizes. Each bundle is valid for one (1) year from purchase. Multiple bundles pool together, and each retains its own one-year expiry.

Consumption order

Tokens are consumed in the following order: (1) included monthly tokens; then (2) prepaid bundle tokens (soonest-to-expire first); then (3) overage at $0.04 per token, up to your spending limit.

Spending limit

When the applicable spending limit is reached, the requested operation is blocked rather than charged beyond the limit. Tokens already consumed remain used and are billable.

How to treat AI outputs and authorized actions.

The Service uses AI models to generate insights, recommendations, analytical outputs, and — where you explicitly authorize it — to initiate actions on your Amazon accounts (e.g., bid adjustments, listing updates, inventory operations, price changes, purchase orders). AI outputs and AI-suggested actions are probabilistic in nature and may contain errors, inaccuracies, hallucinations, outdated information, or unintended consequences.

You are solely and fully responsible for: (a) reviewing and verifying any AI-generated content before relying on it; (b) reviewing and verifying any AI-suggested action before authorizing it; (c) the consequences of any action you authorize the Service to perform on your Amazon accounts, including but not limited to financial loss, lost revenue, inventory mismanagement, unwanted listing changes, excessive ad spend, suppressed listings, account-health impact, suspended accounts, or claims by Amazon or any third party.

The Service merely executes the actions you authorize — it does not advise, recommend, warrant, or guarantee any particular outcome. DataDoe disclaims all liability whatsoever for decisions made based on AI outputs and for any consequences arising from any action you authorize through the Service, regardless of whether the action was suggested by an AI model, executed automatically once authorized, or contained errors of any kind. Your decision to authorize is final and binding on you.

What you can't do with DataDoe.

You agree not to:

• Use the Service for any unlawful purpose.
• Attempt to gain unauthorized access to systems, accounts, or data not your own.
• Disrupt or interfere with the operation, security, or performance of the Service.
• Scrape, copy, or extract data without authorization.
• Circumvent rate limits, quotas, or technical restrictions.
• Resell or redistribute the Service without our written authorization.
• Use the Service to facilitate or promote any violation of Amazon's policies, including the Amazon Services Business Solutions Agreement, by you or any third party.

Violations may result in immediate suspension, legal action, and permanent termination of your account. If we become aware that a customer is using the Service to violate their agreement with Amazon, we will notify Amazon at spapi-abuse@amazon.com and may suspend the offending account.

Who owns what.

DataDoe collects metadata, usage statistics, and connection logs to operate and improve the Service. We will not sell your data.

You retain full ownership of your Amazon data. By using the Service, you grant DataDoe a non-exclusive, royalty-free license to access, process, analyze, and — when you explicitly authorize it — take action on that data strictly for the functionality of your account. Write operations on your Amazon accounts require per-action authorization, are subject to confirmation gates, and remain your sole responsibility as set out in Section 16.

Our IP stays ours.

All intellectual property rights — including but not limited to code, UI/UX designs, algorithms, database structures, trademarks, and documentation — are and shall remain the exclusive property of DataDoe.

These Terms do not grant you any rights, license, or interest in DataDoe's intellectual property except the limited, revocable right to use the Service as described.

Best-effort availability.

DataDoe operates a SaaS platform and works in good faith to maintain stable, reliable service. We do not commit to a specific uptime percentage on standard plans, and the Service may experience scheduled maintenance windows, occasional outages, or temporary unavailability of specific features.

You should not rely on the Service for mission-critical operations without independent backups and verification of any data you intend to act upon. DataDoe is not liable for losses arising from service interruptions.

Enterprise customers may negotiate separate uptime commitments through a signed agreement. Standard plans are not covered by an SLA unless explicitly stated.

How accounts can end.

DataDoe may suspend or terminate your access to the Service at any time and for any reason, with or without notice. Grounds for termination include but are not limited to:

• Breach of these Terms
• Non-payment
• Suspected abuse or misuse
• Abnormal or fraudulent usage patterns

Upon termination, your license to use the Service is revoked. Your data is retained for 30 days after termination and then permanently and securely deleted from our active systems, except where retention is required by applicable law. Backups containing residual data are overwritten on our standard backup rotation.

Service is provided "as is".

Cap on damages.

To the maximum extent permitted by law, DataDoe shall not be liable for any indirect, incidental, special, exemplary, punitive, or consequential damages, including but not limited to lost profits, lost data, business interruption, or loss of goodwill, arising out of or related to your use of the Service.

Without limiting the foregoing, DataDoe shall not be liable for any losses, damages, costs, claims, or expenses arising out of or related to any action initiated through the Service that you authorized — including but not limited to bid adjustments, listing changes, inventory operations, price changes, purchase orders, or any other write actions on your Amazon accounts — even if such action was suggested, generated, recommended, or executed by the Service's AI models, even if the AI output contained errors, hallucinations, or omissions, and even if you relied on AI confidence or speed to authorize. You assume full responsibility for any action you authorize, regardless of how the Service or its AI models presented, framed, or executed it. DataDoe is not your financial advisor, your Amazon advisor, or your operational decision-maker — the Service is a tool you control.

You cover us if you cause harm.

You agree to indemnify, defend, and hold harmless DataDoe and its affiliates, officers, directors, employees, and agents from and against all claims, liabilities, damages, losses, and expenses (including reasonable legal fees) arising out of or related to:

• Your breach of these Terms
• Misuse of the Service
• Violation of any law or third-party right
• Any action you authorized through the Service — including AI-suggested or AI-executed actions on your Amazon accounts — and any claims, fines, penalties, or losses arising from such action, whether brought by Amazon, your customers, suppliers, partners, regulators, or any other third party

How the free trial works.

• Available to new users only — one trial per user or organization.
• Lasts 7 consecutive calendar days from activation.
• Auto-converts to a paid subscription unless canceled before expiration.
• If you cancel before the trial ends, you will not be charged.
• DataDoe reserves the right to refuse or revoke trial access in case of misuse.

If you cancel during or after the trial, your data is retained for 30 days before deletion. See Section 21 for full termination details.

Where disputes are resolved.

These Terms are governed by and construed in accordance with the laws of the State of Delaware, without regard to its conflict of laws rules.

You agree that any dispute arising out of or relating to these Terms shall be brought exclusively in the federal or state courts located in Delaware. You hereby submit to the personal jurisdiction and venue of such courts and waive any objection based on forum non conveniens.

If one part fails, the rest stands.

If any provision of these Terms is held to be invalid, illegal, or unenforceable, that provision shall be severed and the remaining provisions shall continue in full force and effect.

Failure or delay by DataDoe to enforce any right under these Terms shall not constitute a waiver of that right.

How we update these Terms.

We may amend these Terms at any time. Material changes will be communicated via email or in-app notification. The "Effective" date at the top of this page reflects when this version was published.

Continued use of the Service after such notice constitutes acceptance of the revised Terms. If you disagree with the changes, you must immediately discontinue use of the Service.