What this page is
This website and the services it describes are operated by Make The Brands LLC, which does business as Make The Brands. This page describes the rules access and client information are handled by. It does not claim a certification, an audit standard or a compliance programme, and it does not describe internal systems in a way that would weaken them.
Who can see client information
Access to a client's information is restricted to the people who need it to deliver that client's service. Each client's information is held and used for that client alone. It is not combined with, or used for, another client. A client's private cost information is not sent to Amazon because the account is connected.
Amazon Ads Information
Information about a client's Amazon advertising, received through access the client has authorized, is used for that client's reporting, analysis, diagnostics, decision support and authorized management. These limits apply to it:
- It is not sold, rented or published, and it is not syndicated or distributed to unrelated third parties.
- It is not disclosed to unrelated third parties. A service provider may handle it only where Amazon's requirements allow, including any approval Amazon requires of a service provider, under a confidentiality obligation and solely to operate the integration.
- Amazon Ads Information is not combined with customer-provided or external data unless that use is permitted by Amazon and any required prior written approval has been obtained.
- Brand Intel Console does not currently provide Amazon Ads Information to external AI or model providers. Any future processing of Amazon Ads Information by an external AI or model provider would occur only where permitted under Amazon's requirements and after any required Amazon approval, including applicable Amazon-approved Service Provider requirements, has been satisfied.
What is accessed, why, and what Brand Intel Console currently does with it is set out on the Amazon Ads Data Use page.
Governed action
Brand Intel Console currently supports Amazon advertising analysis, diagnostics, recommendations and decision support. It does not currently send automated bid, budget, campaign, targeting, keyword, negative-keyword or creative changes through the Amazon Ads API. Any future execution capability will be introduced only when technically implemented, appropriately authorized and permitted. A consequential action waits for MTB operator review, client approval or finance approval before it is carried out, and actions and their outcomes are recorded, whoever approved them.
This website
The site is served as static pages. The form posts to a function on the same host, which checks a hidden anti-spam field and passes the submission to a transactional email provider. The keys those functions use are held in the hosting platform's secret store and are not in the site's source. The functions do not log a submitter's information. Campaign parameters from a landing URL are held in the browser's session storage for the visit and are sent only with a submission.
The website's measurement and advertising providers handle website visits. They do not receive client account information or Amazon Ads Information. They are listed under Subprocessors.
Reporting a privacy or security concern
If you believe you have found a security vulnerability in this site or the service, or you know of or suspect a privacy problem or a misuse of information we handle, Amazon information included, write to security@makethebrands.com. Anyone can report: a client, a researcher or a member of the public.
Say what you found, where, and how it can be reproduced, and give us a way to reach you. Please do not send passwords, access tokens, secret keys or client data that is not needed to understand the report. If sensitive material is needed, tell us and we will agree how to receive it.
What happens to a report
- Submission
- The report is received at the address above and acknowledged to the reporter.
- Tracking
- It is logged with a reference, and its status is tracked from receipt to closure.
- Severity
- It is assessed for severity: what is affected, how badly, and how urgently it must be handled.
- Amazon data impact
- It is assessed for whether information obtained from Amazon, Amazon Ads Information included, was or could have been accessed, disclosed or misused.
- Evidence
- The relevant records are preserved so that what happened can be established.
- Containment
- The exposure is contained. Where credentials or authorizations may be affected, they are revoked or rotated.
- Remediation
- The cause is corrected and the correction is checked.
- Notifications
- The parties we are required to notify are notified, including Amazon where Amazon information is involved and the clients concerned, as Amazon's policies, the governing agreements and the law require.
- Recovery
- Normal operation is restored once it is safe to do so.
- Closure
- The report is closed with its outcome recorded, and the reporter is told the outcome where that is appropriate.
- Review
- Where the matter warrants it, a review afterwards records what is changed so it does not recur.
We do not operate a bug bounty, and this page promises no response time.
Offboarding and deletion
When a client disconnects an Amazon system or an engagement ends, the authorization is revoked, and stored client information, Amazon Ads Information included, is retained, returned or deleted according to the governing agreement, Amazon's requirements and the law that applies.