Privacy notice
Evolve Brands Dashboard · Evolve Brands Ltd, United Kingdom · last updated 5 October 2026
This notice explains what data the Evolve Brands Dashboard (app.evolve-brands.co.uk) collects when an Amazon seller or advertiser connects it, how that data is used and protected, and how to have it deleted.
Who we are
The dashboard is operated by Evolve Brands Ltd, a UK Amazon brand owner and agency. Contact: iain@severnsolutions.com.
What we collect
- From Amazon, with your authorisation (Selling Partner API and Amazon Ads API): orders and order items (totals, quantities, status), fees, settlements, refunds and reimbursements, FBA inventory, catalog and listing data, Brand Analytics reports, and advertising campaign structure and performance reports.
- We do not collect Amazon buyers' personal information such as names, addresses, phone numbers or email addresses.
- Dashboard users: name, email address, a one-way hash of the password, an encrypted two-factor authentication secret, and a security log of sign-ins and changes (including IP address).
- Data you add: product costs, supplier and purchase details, and reports you upload yourself.
How we use it
Only to provide the dashboard to the seller or advertiser the data belongs to: profit and margin per product after fees and costs, advertising performance against margin, stock cover and reorder planning, search and conversion analysis, alerts and recommendations. With the seller's opt-in, the dashboard also sends Amazon's standard "Request a Review" message on eligible orders, and creates listings only after a team member approves them.
We never sell Amazon data, never use it for marketing, never share one seller's data with another, and never combine sellers' data into shared datasets.
Who we share it with
- Hosting provider (UK): stores the encrypted database. Infrastructure only.
- Xero: only if the seller connects their own Xero account. Settlement and fee totals are posted to it.
- Anthropic: product performance figures (no buyer data) may be sent to draft written summaries. Anthropic does not use this data to train its models.
- SoldScope: public product identifiers (ASINs) are sent to fetch keyword rankings.
- Authorities, only where the law requires it.
How we protect it
- All traffic is encrypted with HTTPS (TLS 1.2 or higher).
- Amazon tokens, keys and two-factor secrets are encrypted at rest (AES-256-GCM).
- Every user signs in with a strong password and two-factor authentication. Passwords expire yearly.
- Access is role-based and limited to the accounts and brands each user is authorised for, and is reviewed every quarter.
- Security events are logged and reviewed. We have an incident response plan, and we report incidents involving Amazon data to Amazon within 24 hours.
How long we keep it
Amazon data is kept while you use the dashboard, for historical reporting. Security logs are kept for 400 days. When you disconnect the dashboard, or ask us to, we stop accessing your Amazon accounts straight away and permanently delete your Amazon data and credentials within 30 days.
Your rights
You can ask for a copy of your data, a correction, or deletion, and you can withdraw access at any time from Seller Central (Manage your apps) or the Amazon Ads console. Under UK GDPR you can also complain to the Information Commissioner's Office (ico.org.uk). Email iain@severnsolutions.com for any request.