Privacy Policy

1. Who is responsible for your data

AuthorLens is operated by Remskill LLC (“Remskill”, “we”, “us”), a Delaware limited liability company. For the purposes of applicable data-protection law (including the GDPR and the CCPA/CPRA), Remskill is the controller of the personal data described here. You can reach us at denys.m@remskill.com.

2. Data we collect

Account data

When you sign up we collect your email address and authentication data. Sign-in is handled by our authentication provider (Supabase) using email + password or a passwordless magic link; we do not store your password in plain text.

Connected-account data

When you connect a third-party account, we receive the data needed to produce your analytics — for example Amazon KDP royalties, KENP read counts and units sold; Amazon Advertising and Meta (Facebook/Instagram) campaign spend and performance; and book metadata such as titles, ASINs, prices and rankings. We request read-only access wherever the platform offers it.

Browser extension (AuthorLens Sync)

Because Amazon KDP has no public reporting API, we offer an optional browser extension, AuthorLens Sync. When you install it and sign in to AuthorLens, it reads the figures shown on the Amazon dashboards you are already signed into and viewing — your KDP royalties, units and KENP reads at kdpreports.amazon.com, and your Amazon Advertising spend at advertising.amazon.com — and sends them over an encrypted connection to your own AuthorLens account. To keep your royalties current it may briefly open your KDP Reports page in a background tab, read the figures and close it, only while you are signed in. It reads only pages you open in your own logged-in session, and only the data those pages already load; it never sees or stores your Amazon password or sign-in credentials, and it accesses only accounts you are already authorized to view (your own, or ad accounts Amazon has granted you access to). The extension is used solely to import this data into your account — we do not sell it or use it for any unrelated purpose. You can remove the extension at any time to stop the sync.

Authorization tokens

To keep an integration connected we store the access token the provider issues. For some integrations (e.g. Meta) the token is held in an encrypted, HTTP-only cookie on your device rather than in our database. You can disconnect an integration at any time, which invalidates the stored token.

Usage and technical data

We collect limited technical information automatically — such as IP address, browser type, device, and pages viewed — to operate, secure, and improve the Service. We use only essential and (where applicable) analytics cookies; we do not sell your data or use it for third-party advertising.

Billing data

If you subscribe to a paid plan, payment is processed by our third-party payment processor. We receive billing status and the last digits/brand of your card, but we do not store full card numbers on our servers.

3. How we use your data

• to provide the core Service — reconciling earnings and ad spend into your dashboard;
• to authenticate you and keep your account secure;
• to maintain your connected integrations and refresh the data they expose;
• to process subscriptions and prevent fraud;
• to respond to support requests and send essential service notices;
• to improve the Service, including through aggregated, de-identified analytics that cannot reasonably identify you, your books, or your accounts; and
• to comply with legal obligations and enforce our Terms.

4. Legal bases (EEA/UK users)

Where the GDPR or UK GDPR applies, we rely on: contract (to provide the Service you signed up for), legitimate interests (to secure and improve the Service), consent (for non-essential cookies, where required), and legal obligation (e.g. tax and accounting records). You may withdraw consent at any time without affecting prior processing.

5. How we share data

We do not sell your personal data. We share it only with service providers who process it on our behalf and under contract, including:

• Supabase — authentication and database hosting;
• Amazon (KDP and Advertising) and Meta — the platforms you choose to connect;
• Rainforest API (rainforestapi.com) — public Amazon product, rank and category data used to enrich your books;
• Stripe (stripe.com) — payment processing and subscription billing; and
• authorities or third parties where required by law, to enforce our Terms, or in connection with a corporate transaction.

6. International transfers

We and our providers may process data in the United States and other countries. Where data is transferred out of the EEA or UK, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses.

7. Data retention

We keep your data for as long as your account is active and as needed to provide the Service. When you delete your account we delete or de-identify your personal data within a reasonable period, except where we must retain certain records to meet legal, tax, or security obligations. You can request deletion at any time (see below).

8. Security

We use industry-standard measures to protect your data, including encryption in transit, encryption of sensitive tokens, access controls, and least-privilege (read-only) scopes for connected accounts. No method of transmission or storage is perfectly secure, but we work to protect your information and to notify you of material incidents as required by law.

9. Your rights

Depending on where you live, you may have the right to access, correct, delete, port, or restrict the processing of your personal data, to object to certain processing, and to withdraw consent. California residents have the rights to know, delete, correct, and opt out of “sale” or “sharing” of personal information — we do not sell or share personal information as those terms are defined. To exercise any right, email denys.m@remskill.com; we will respond within the timeframe required by law. You also have the right to lodge a complaint with your local data protection authority.

10. Children

AuthorLens is not directed to children under 16, and we do not knowingly collect their personal data. If you believe a child has provided us data, contact us and we will delete it.

11. Changes to this policy

We may update this Privacy Policy from time to time. We will post the new version here with a revised “Last updated” date and, for material changes, notify you by email or in-app. Continued use of the Service after changes take effect constitutes acceptance.

12. Contact

For privacy questions or to exercise your rights, contact: