Privacy Policy

1. Who is responsible for your data

AuthorLens is operated by Remskill LLC (“Remskill”, “we”, “us”), a Delaware limited liability company. For the purposes of applicable data-protection law (including the GDPR and the CCPA/CPRA), Remskill is the controller of the personal data described here. You can reach us at support@remskill.com.

2. Data we collect

Account data

When you sign up we collect your email address and authentication data. Sign-in runs on our own servers, using email + password or a passwordless magic link. We store only a salted one-way hash of your password — never the password itself.

Connected-account data

When you connect a third-party account, we receive the data needed to produce your analytics — for example Amazon KDP royalties, KENP read counts and units sold; Amazon Advertising campaign spend and performance; and book metadata such as titles, ASINs, prices and rankings. We only ever read this data: AuthorLens never publishes, edits, prices or unpublishes a book, and never changes a campaign, bid, budget or keyword.

Amazon Advertising connection

Ad spend is connected through Amazon’s own sign-in (Login with Amazon). You sign in on Amazon’s site, not ours, so we never see your Amazon password; Amazon then gives us a revocable access key for your advertising reports. Amazon’s consent screen describes this permission as campaign management, because it is the only permission Amazon offers for reading advertising reports — AuthorLens uses it solely to list your campaigns and download their reports. It never creates, pauses or edits a campaign, bid, budget or keyword; negative keywords suggested in AuthorLens are copied by you and added in Amazon by you.

Browser extension (AuthorLens Sync)

Because Amazon KDP has no public reporting API, we offer an optional browser extension, AuthorLens Sync. When you install it and sign in to AuthorLens, it reads your KDP royalties, units and KENP reads at kdpreports.amazon.com and your Amazon Advertising spend at advertising.amazon.com — pages you are already signed into — and sends them over an encrypted connection to your own AuthorLens account. It works inside your own browser session: it never sees or stores your Amazon password, and your Amazon session never leaves your computer — we receive only the report figures. It runs only on the Amazon KDP and Amazon Advertising sites and on AuthorLens itself; it cannot read any other website. To keep your royalties current it may briefly open your KDP Reports page in a background tab, read the figures and close it, only while you are signed in; this is why your browser asks for access to your tabs. The extension is published through the Chrome Web Store and Firefox Add-ons, and every version is reviewed by the store before it reaches your browser — including every update. We use the imported data solely for your account, and we never sell it. You can remove the extension at any time to stop the sync.

Authorization tokens

To keep an integration connected we store the access key the provider issues, encrypted (AES-256) — in an HTTP-only cookie on your device and, so scheduled syncs can run, in our database. Disconnecting in Settings deletes the stored key; you can also revoke AuthorLens’s access at any time from your Amazon account settings.

Support access

Your data is visible only to you. If you ask our support team for help, a member of the team may view your AuthorLens reports to resolve your request. Every such session is logged, and a support session can never start a sync or connect to your Amazon accounts.

Usage and technical data

We collect limited technical information automatically — such as IP address, browser type, device, and pages viewed — to operate, secure, and improve the Service. We use only essential and (where applicable) analytics cookies; we do not sell your data or use it for third-party advertising.

Billing data

If you subscribe to a paid plan, payment is processed by our third-party payment processor. We receive billing status and the last digits/brand of your card, but we do not store full card numbers on our servers.

3. How we use your data

• to provide the core Service — reconciling earnings and ad spend into your dashboard;
• to authenticate you and keep your account secure;
• to maintain your connected integrations and refresh the data they expose;
• to process subscriptions and prevent fraud;
• to respond to support requests and send essential service notices;
• to improve the Service, including through aggregated, de-identified analytics that cannot reasonably identify you, your books, or your accounts; and
• to comply with legal obligations and enforce our Terms.

4. Legal bases (EEA/UK users)

Where the GDPR or UK GDPR applies, we rely on: contract (to provide the Service you signed up for), legitimate interests (to secure and improve the Service), consent (for non-essential cookies, where required), and legal obligation (e.g. tax and accounting records). You may withdraw consent at any time without affecting prior processing.

5. How we share data

We do not sell your personal data. We share it only with service providers who process it on our behalf and under contract, including:

• Oracle Cloud Infrastructure — hosting of the servers AuthorLens and its database run on;
• Amazon (KDP and Advertising) — the platforms you choose to connect;
• Stripe (stripe.com) — payment processing and subscription billing;
• Cloudflare — network security and delivery of our website;
• Sentry — error reports, used to find and fix faults, sent without names, emails or IP addresses;
• Resend — delivery of service emails such as sign-in links;
• Telegram — notifications and support messages, only if you connect Telegram;
• OpenAI — AI features, only if you add your own API key and ask AuthorLens to run one; and
• authorities or third parties where required by law, to enforce our Terms, or in connection with a corporate transaction.

6. International transfers

We and our providers may process data in the United States and other countries. Where data is transferred out of the EEA or UK, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses.

7. Data retention

We keep your data for as long as your account is active and as needed to provide the Service. You can delete your imported royalties, your ad data, or both at any time yourself, in Settings. When your account is deleted we delete or de-identify your personal data within a reasonable period, except where we must retain certain records to meet legal, tax, or security obligations. You can request account deletion at any time (see below).

8. Security

We use industry-standard measures to protect your data, including encryption in transit, encryption of sensitive tokens, access controls, and the narrowest access each platform offers for connected accounts — we only ever read from them and never write. No method of transmission or storage is perfectly secure, but we work to protect your information and to notify you of material incidents as required by law.

9. Your rights

Depending on where you live, you may have the right to access, correct, delete, port, or restrict the processing of your personal data, to object to certain processing, and to withdraw consent. California residents have the rights to know, delete, correct, and opt out of “sale” or “sharing” of personal information — we do not sell or share personal information as those terms are defined. To exercise any right, email support@remskill.com; we will respond within the timeframe required by law. You also have the right to lodge a complaint with your local data protection authority.

10. Children

AuthorLens is not directed to children under 16, and we do not knowingly collect their personal data. If you believe a child has provided us data, contact us and we will delete it.

11. Changes to this policy

We may update this Privacy Policy from time to time. We will post the new version here with a revised “Last updated” date and, for material changes, notify you by email or in-app. Continued use of the Service after changes take effect constitutes acceptance.

12. Contact

For privacy questions or to exercise your rights, contact: