DRN Twin Privacy Policy

1. Who we are

DRN Twin ("the Service") is operated by DRN GRUP GIDA SANAYI VE TICARET LIMITED SIRKETI ("DRN Grup", "we", "us"), Mustafa Kemal Mah. 2118 Cad. No: 4C Ic Kapi No: 140, Cankaya, Ankara 06510, Turkey. DRN Grup is the data controller for the personal information described in this policy. Privacy questions: privacy@drnportal.com.

2. What this policy covers

This policy explains how we collect, use, store, protect, share and delete information when you visit apps.drnportal.com, create a DRN Twin account, or authorize DRN Twin to access your Amazon selling account through Amazon's Selling Partner API ("Amazon Information"). It covers DRN Twin only; other DRN products have their own policies.

3. Information we collect

a) Account information you give us: your name, business name, email address and login details for DRN Twin, and your messages to our support team.

b) Amazon Information, only after you authorize DRN Twin:

• your selling account identifier and the Amazon stores you sell in;
• catalog data (titles, brands, categories, sales ranks) for your products and for competitor products you choose;
• your listings, fulfillment availability, inventory levels and out-of-stock information;
• current prices, featured offer and offer counts for your products and chosen competitor products, and reference prices and lowest offers for your own products;
• your account health and performance metrics and account status;
• your Sales and Traffic reports: sessions, page views, Buy Box percentage and ordered units per product and day.

c) Technical information: our servers record basic technical data (IP address, browser type, time of request) for security and troubleshooting. We use only cookies that are strictly necessary to keep you signed in.

We do not request personal information about Amazon customers through SP-API or ask you to send it to us: no names, addresses, email addresses or phone numbers. DRN Twin does not request Amazon's restricted data roles, does not use Amazon's Orders API and does not request order-level reports.

Please do not send Amazon account data by email. If you send it without being asked, we record the receipt as an exception, do not quote the data in replies and delete routine copies after replying. If it is evidence of a security incident, we preserve only what is needed under our incident procedure.

4. How we use information

• to provide DRN Twin to you: collecting your data and producing your reports, dashboards and alerts;
• to keep DRN Twin secure and working: monitoring, troubleshooting and preventing abuse;
• to communicate with you about your account and support requests;
• to meet legal obligations.

Amazon Information retrieved with your authorization is used only to provide DRN Twin to you. We do not use it for any other seller, combine it with other sellers' data, share it with or use it for our affiliated companies, or use it for advertising.

5. Calculations and automated processing

Reports and alerts come from simple calculations on your data, such as the change in a price or rank against a threshold you set. Each figure shows its source and when it was retrieved, and each alert shows its rule and threshold. Missing data is not shown as zero, and rules do not run on stale data. DRN Twin does not make decisions for you.

6. How we share information

We do not sell, rent or trade your information, and we do not disclose Amazon Information to other DRN Twin users, to our affiliated companies or to any outside party, except:

• service providers that host or operate DRN Twin for us: Amazon Web Services, which hosts DRN Twin and its backups in the US East (N. Virginia) Region. We have selected Amazon SES, also provided by Amazon Web Services, for account and alert emails. Alert messages will contain only a generic notice and a sign-in link;
• when required by law or to respond to valid legal requests;
• to Amazon, where Amazon's policies require it, for example security incident notifications.

7. How we protect information

DRN Twin is designed to meet Amazon's Data Protection Policy. Seller connections will remain disabled until the applicable security controls have been verified. These controls include encryption of information in transit, encrypted storage for Amazon Information, access limited to named personnel with multi-factor authentication, no credentials in source code, and logging and review of security events. If a security incident affects your information, we will notify you without undue delay and Amazon within 24 hours of detection.

8. How long we keep information

• Amazon Information: only as long as needed to provide DRN Twin to you, and no longer than 18 months.
• Within 30 days of the earliest of the following, we permanently delete your Amazon Information, including backups, unless the law requires us to keep it: you disconnect DRN Twin in the app or in Seller Central; you close your account; Amazon asks us to delete it; we determine that we are no longer authorized to keep it; or we stop participating in Amazon's services.
• Account information: kept while your account is open and deleted within 30 days after your account is closed. Support correspondence needed for a specific open legal claim is retained only for that recorded claim.
• Application audit records: 12 months; IP addresses in these records are shortened after 90 days. Web server and security monitoring log files, including CrowdSec records with full IP addresses, are kept for at least 12 months for security monitoring, with deletion completed by 13 months.

9. Your choices and rights

• Disconnect at any time in DRN Twin or by removing DRN Twin from the apps authorized in your Amazon seller account, or ask us to delete your data at privacy@drnportal.com.
• Depending on where you live, you may have the right to access, correct, delete or export your personal information, or to object to or restrict its processing. Contact privacy@drnportal.com; we answer within 30 days.
• If you are in Türkiye: you also have rights under the Personal Data Protection Law No. 6698 (KVKK). See our Turkish information notice at Gizlilik Politikası ve Aydınlatma Metni and apply at KVKK application.

10. International transfers

DRN Grup is based in Türkiye and DRN Twin is hosted by Amazon Web Services in the United States, in the US East (N. Virginia) Region. Where information is transferred across borders, we use the safeguards required by applicable law.

11. Children

DRN Twin is for businesses and is not directed to children.

12. Changes to this policy

We will post changes on this page and, for material changes, notify account holders by email before they take effect.

13. Contact

DRN GRUP GIDA SANAYI VE TICARET LIMITED SIRKETI, Mustafa Kemal Mah. 2118 Cad. No: 4C Ic Kapi No: 140, Cankaya, Ankara 06510, Turkey · privacy@drnportal.com · Security reports: security@drnportal.com