Last updated: 29 October 2026
Data controller
L.S. Lingua Sp. z o.o., ul. Ogarna 51/52 lok. 1, 80-826 Gdańsk, Poland, KRS 0000279577, NIP 5832981353. Contact: virtualnikaagent@gmail.com.
Amazon Ads API data
With a client's authorisation, we access account and profile IDs, campaigns, ad groups, keywords and product targets, bids, budgets, and performance reports including impressions, clicks, spend and sales. We do not access Amazon shoppers' personal data through the Amazon Ads API.
Selling Partner API data
With a client's authorisation, we read aggregated sales, traffic and search-performance reports for the client's own brand through Brand Analytics. We do not access buyer personal information or orders, and we do not change anything in the client's Seller Central account.
Walmart Connect data
When Walmart management is included in the service, and with the client's authorisation, we use campaign settings and aggregated advertising performance data from the client's own Walmart account, including impressions, clicks, spend and attributed sales. Walmart access is separate from Amazon access, and Amazon data is not used to authorise or connect a Walmart account.
Purpose
We use authorised platform data only to manage and optimise the client's own advertising and to prepare reports for that client under our agreement with them.
Sharing and processors
We do not sell or rent client platform data. We share it only with processors working for us under contract and confidentiality, such as hosting and analysis providers, including AI assistants such as Anthropic Claude.
Storage and international processing
Data is stored on company computers in the European Union and in cloud services used by our processors. Some processors may operate in the United States. Data is encrypted at rest.
Security
We use encryption in transit with TLS 1.2 or higher and encryption at rest. Multi-factor authentication is required for accounts with access. Access is removed within 24 hours when a team member's role changes, and access logs are reviewed regularly.
Security incidents
We notify affected clients and Amazon within 24 hours of a security incident involving relevant data.
Retention and deletion
We retain data while we work with the client. Amazon data is deleted within 30 days after the client revokes access, ends the service, Amazon requests deletion, or our access to Amazon services ends, unless applicable law requires longer retention. Walmart data is deleted when Walmart access or the relevant service ends, subject to the applicable agreement and legal retention requirements.
Website visitors
We process information that visitors send by email or through a contact form. If cookies or analytics are introduced, this policy will be updated to describe them.
Your GDPR rights
You may request access, correction, deletion, restriction, objection or data portability. You may also complain to the Polish data protection authority, UODO, at uodo.gov.pl.