Privacy Policy

1. Who we are

The Megaficus advertising dashboard (the “Service”) is operated by Megaficus Joint Stock Company (“Megaficus”, “we”, “us”, or “our”). This policy explains what information we collect when you use the Service, how we use it, and the choices you have. The Service is a private, login-gated analytics tool provided to authorized business users; it is not a consumer product.

If you have any questions about this policy or your information, contact us at info@megaficus.com or by mail at GP Invest Building, 170 La Thanh St, O Cho Dua, Hanoi, 10000.

2. Information we collect

We limit collection to what is needed to run the Service:

• Account information. The username and display name you are issued, and your password. We never store your password in readable form — it is kept only as a one-way hashed value that cannot be reversed back into your password.
• Advertising and business data. The advertising, sales, and business performance data of the Amazon store or stores you are authorized to view. This data belongs to the relevant store and is made available to you only within the scope of your granted access.
• Technical and log data. Standard server logs generated when you use the Service, such as your IP address, request timestamps, and browser type. We use this information to operate, secure, and troubleshoot the Service.

The Service does not host user-generated content, and we do not collect information from you beyond what is described above.

3. How we use information

We use the information we collect only to:

• provide, maintain, and secure the dashboard;
• authenticate you and keep your session signed in;
• enforce store-scoped access so you see only the data you are authorized to view;
• diagnose problems and support your account.

We do not sell or share your personal information, and we do not use it for advertising, cross-context behavioral tracking, or profiling. We do not send marketing emails.

4. How information is shared

We do not sell or share personal information. We disclose information only to the infrastructure and service providers that are strictly necessary to operate the Service (for example, secure hosting). These providers act on our behalf, may use the information only to provide services to us, and are bound by confidentiality obligations. We may also disclose information if required to do so by law or valid legal process.

5. How we protect information

We use appropriate safeguards to protect your information, including:

• encryption of data in transit using HTTPS;
• one-way hashing of passwords, so they are never stored in readable form;
• role-based and store-scoped access controls, so each user can reach only the data they are authorized to see.

No method of transmission or storage is completely secure, but we work to protect your information using measures appropriate to its sensitivity.

6. Data retention and deletion

We keep information only as long as needed to provide the Service to you and for the store or stores you are authorized to view. When your account or our relationship ends, we delete the associated account data and store data from our active systems within a reasonable period, except where we are required to retain it to comply with a legal obligation.

7. Your rights and choices

Under applicable U.S. state privacy laws — including the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), the Virginia Consumer Data Protection Act (VCDPA), the Colorado Privacy Act (CPA), the Connecticut Data Privacy Act (CTDPA), the Texas Data Privacy and Security Act (TDPSA), and similar laws in other states — you may have the following rights regarding your personal information:

• Right to know / access. You may request that we disclose the categories and specific pieces of personal information we have collected about you.
• Right to delete. You may request that we delete the personal information we have collected from you, subject to certain exceptions.
• Right to correct. You may request that we correct inaccurate personal information we maintain about you.
• Right to opt out of sale or sharing. We do not sell or share your personal information for cross-context behavioral advertising. As such, there is no sale or sharing to opt out of. For more details, see our Do Not Sell or Share page.
• Right to non-discrimination. We will not discriminate against you for exercising any of your privacy rights.
• Right to appeal. If we deny your privacy request in whole or in part, you may appeal our decision by contacting us. We will respond to your appeal in accordance with the applicable state law timeline.

To exercise any of these rights, please visit our Data Rights Request page or contact us at info@megaficus.com. We will respond within 45 calendar days (or the shorter timeframe required by your state’s law) of receiving a verifiable request. We honor applicable rights regardless of your location and will not discriminate against you for exercising them.

8. Global Privacy Control (GPC)

We honor the Global Privacy Control (GPC) signal. If your browser or device sends a GPC signal, we treat it as a valid opt-out request under applicable state privacy laws. Because we do not sell or share personal information, honoring the GPC signal has no practical effect on your experience, but we respect the signal as a matter of principle and legal compliance.

9. Children’s privacy

The Service is intended for business use only. It is not directed to, and may not be used by, anyone under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, contact us at info@megaficus.com and we will promptly delete it.

10. Cookies and sessions

We use a single, strictly necessary session cookie to keep you signed in and to secure your session. This cookie is essential to the operation of the Service. We do not use third-party advertising cookies, analytics trackers, or any cross-site tracking technologies. For full details, see our Cookie Policy.

11. Categories of personal information (CCPA disclosure)

The following table summarizes the categories of personal information we collect, as defined by the California Consumer Privacy Act:

We do not collect sensitive personal information (as defined by CCPA/CPRA), biometric data, geolocation data, or any other categories of personal information beyond those listed above.

12. Changes to this policy

We may update this policy from time to time. When we do, we will revise the effective date shown at the top of this page. The effective date always reflects the latest version. Your continued use of the Service after an update means you accept the revised policy. For material changes, we will notify you through the dashboard before the changes take effect.

13. Contact us

Questions or requests regarding this policy can be sent to info@megaficus.com or by mail to Megaficus Joint Stock Company, GP Invest Building, 170 La Thanh St, O Cho Dua, Hanoi, 10000.