Privacy Policy

1. Introduction and Scope

This Privacy Policy explains how TrueRoyalties LLC ("TrueRoyalties", "we", "us", or "our") collects, uses, stores, shares, and protects personal information in connection with the TrueRoyalties website (trueroyalties.com), web application, browser extension, and related services (together, the "Service").

TrueRoyalties helps Amazon KDP authors and publishers see one honest number — their real net profit (Net Profit = Royalties − Ad Spend) — by connecting their Amazon KDP royalty data with their Amazon Advertising spend across every marketplace.

Who this policy applies to. This policy applies to people who create a TrueRoyalties account, visitors to our website, and anyone whose personal information we process in connection with the Service.

Our role. TrueRoyalties LLC is the data controller of the personal information described in this policy. By using the Service, you authorize us to fetch reporting data from the Amazon accounts you connect, on your behalf, and to store it and generate profitability reports for you. By accessing or using the Service, you confirm that you have read and understood this Privacy Policy.

2. Information We Collect

2.1 Information you provide directly

• Account and identity: your email address and, optionally, your name. We authenticate you with one-time email codes (OTP), so we do not store a password for your TrueRoyalties account.
• Connection authorizations: the tokens or credentials you voluntarily provide to link your Amazon KDP and Amazon Advertising accounts. We never extract these without your permission, and we use them only to retrieve your reporting data.
• Billing information: your billing name, email, and subscription details. Payments are processed by Stripe; we do not store your full payment card number or bank details. We retain transaction records such as amounts, dates, plan, and the processor-assigned transaction identifiers.
• Communications: support requests, feedback, and any messages you send us.

2.2 Amazon KDP and Amazon Advertising data we collect on your behalf

• KDP royalty data: sales and royalty records from your connected KDP account, including date/time, marketplace (US, UK, DE, FR, ES, IT, JP, and others), ASIN/title, format, units sold, and royalty amounts.
• Amazon Advertising data: advertising metrics from your connected Amazon Ads account, including campaigns, spend, impressions, clicks, and attributed sales, per marketplace.

This data is read-only reporting data, collected solely to display your figures and to compute your net profit inside the Service.

2.3 Information we collect automatically

• Device and connection information: IP address and approximate location, browser type and version, operating system, and referring URL.
• Usage and analytics data: the pages and features you access, the actions and events you trigger, clicks and navigation paths, session frequency and duration, and diagnostic information such as errors. We collect some of this through first-party and third-party product-analytics and error-monitoring tools (see Section 7), which may set cookies or use similar technologies and may record your interactions with our interface (for example, session replays) to help us understand usage and improve the Service.

3. What We Do Not Collect

TrueRoyalties is not designed to, and does not intentionally, collect:

• Your bank account numbers or full payment card numbers (Stripe processes payments).
• Your Amazon account password, or passwords for any third-party service you connect. We never ask for them, and our support team will never request your TrueRoyalties sign-in codes or any third-party password.
• Your readers' or customers' personal data — we work with your aggregated sales and advertising figures, not your buyers' identities.
• Your home address or phone number, unless you voluntarily provide it (for example, on an invoice or a support request).

4. How We Use Your Information

We use the information above to:

• Provide the core Service: continuously calculate your net profit per book and overall, across every connected marketplace.
• Sync your KDP royalty and Amazon Advertising data and keep your dashboard up to date.
• Manage your account, authenticate sign-ins, and process your subscription and billing.
• Provide customer support and respond to your requests.
• Maintain security, prevent fraud and abuse, and enforce our terms.
• Measure and analyze how the Service is used (product analytics) to understand engagement, diagnose problems, and prioritize improvements.
• Improve and develop the Service, using aggregated or anonymized data wherever possible.
• Comply with our legal, tax, and accounting obligations.

We do not use your KDP or advertising data to advertise to you, and we never sell it. We may occasionally need to access your data to resolve a support case; where we do, we limit access to what is necessary and, where appropriate, inform you.

De-identified and aggregated data. We may create de-identified, aggregated, or anonymized data from the information we hold and use and retain it for any lawful business purpose, including operating, securing, analyzing, and improving the Service. Such data does not identify you and is not subject to this Privacy Policy; we maintain it in de-identified form and do not attempt to re-identify it, except as needed to test our de-identification process.

5. Legal Bases for Processing (GDPR)

Where the GDPR applies, we rely on the following legal bases:

• Performance of a contract: to create and manage your account, deliver the Service, and process your subscription.
• Legitimate interests: to secure the Service, prevent fraud, understand usage in aggregate, and improve our product — balanced against your rights.
• Consent: for any optional marketing communications and non-essential cookies. You may withdraw consent at any time.
• Legal obligation: to keep billing and tax records and to respond to lawful requests.

We do not make decisions producing legal or similarly significant effects about you based solely on automated processing. The net-profit figures we compute are informational reporting, not automated decisions about you.

6. How We Share Your Information

We do not sell your personal information, and we do not share it with third parties for their own marketing or for cross-context behavioral advertising. We share information only in these limited cases:

• Service providers (subprocessors): trusted vendors that operate parts of the Service on our behalf, under contract and only to the extent needed (see Section 7).
• Legal requirements: where required by law, court order, or an enforceable governmental request.
• Protection and enforcement: where we believe in good faith it is necessary to protect our rights, property, or safety, or those of our users or others; to investigate, prevent, or address fraud, security, or technical issues; or to enforce our Terms of Service and other agreements.
• Business transfers: if TrueRoyalties LLC is involved in a merger, acquisition, financing, reorganization, or sale of assets, your data may transfer as part of that transaction; we will provide notice before your personal information becomes subject to a different privacy policy.
• With your consent: for any other purpose you explicitly authorize.

7. Subprocessors

To deliver the Service, we rely on a small number of trusted third-party providers ("subprocessors"), each engaged under contract, bound by its own data-protection obligations, and given access only to the data it needs for its function. We use subprocessors in the following categories:

• Cloud infrastructure and database hosting — to run the Service and store your account data and computed figures.
• Payment processing — to handle subscriptions and billing (this provider handles card details directly; we never store them).
• File and object storage — to store any files you upload.
• Transactional email delivery — to send your sign-in codes, receipts, and account notices.
• Product analytics and error monitoring — to understand how the Service is used and to detect, diagnose, and fix problems.

We do not disclose the individual identities of our subprocessors in this policy. We may add, remove, or replace subprocessors as our Service evolves, provided they are held to equivalent data-protection standards. Where required by law, a current list of the specific subprocessors that process your personal data is available on request at hello [at] trueroyalties [dot] com.

8. Amazon KDP and Advertising Data

• We access your Amazon KDP and Amazon Advertising data only with your explicit authorization, and in accordance with Amazon's applicable terms and program policies.
• Our access is read-only for reporting purposes. We never modify your Amazon account, listings, pricing, or campaigns, and we never place orders on your behalf.
• We use this data solely to display your reporting and to calculate your net profit inside the Service. We never share your Amazon data publicly or sell it.
• You can revoke our access at any time by disconnecting the integration or deleting your account; when you do, your stored connection credentials are deleted.

The Service integrates with, and may link to, third-party services we do not control — including Amazon (KDP and Advertising) and Stripe. Your use of those services, and their handling of your information, is governed by their own terms and privacy policies. We are not responsible for the privacy or security practices of any third party, and we encourage you to review their policies.

9. Data Security

We protect your data with technical and organizational measures, including:

• Encryption in transit: all connections to the Service use HTTPS/TLS.
• Encryption at rest: your data — including your connection credentials — is encrypted at rest by our infrastructure providers using strong, industry-standard encryption.
• Passwordless authentication: we sign you in with one-time email codes, so there is no TrueRoyalties password to be stolen or reused.
• Payment isolation: card details are handled entirely by Stripe, a PCI DSS Level 1 certified payment processor; they never touch our servers.
• Access controls: access to production data is limited on a least-privilege basis.
• Ongoing review: we review our security practices and our vendors on a regular basis.

Your responsibility. Because we sign you in with one-time codes sent to your email, you are responsible for keeping secure the email account associated with your TrueRoyalties account — anyone with access to that inbox can sign in.

No method of transmission or storage is ever 100% secure, and we cannot guarantee absolute security. In the event of a data breach affecting your personal information, we will notify you and the relevant authorities to the extent and within the timeframes required by applicable law.

10. Data Retention

We keep your data only as long as we need it for the purposes described in this policy:

11. Deleting Your Account

You can delete your TrueRoyalties account at any time from your account settings or by contacting us. When you do, we delete your synced KDP and advertising data and your stored credentials within the timeframe above. As noted in Section 10, we may retain a minimal record (such as billing history or an account identifier) where necessary to comply with our legal, accounting, audit, or tax obligations, to prevent fraud, to resolve disputes, and to establish, exercise, or defend legal claims, or where otherwise required or permitted by law.

12. International Data Transfers

TrueRoyalties LLC operates in the United States, and your data may be stored and processed there or in other countries where we or our subprocessors maintain facilities. For transfers from the EEA, the UK, or Switzerland to countries without an adequacy decision, we rely on appropriate safeguards, including the European Commission's Standard Contractual Clauses and the UK International Data Transfer Agreement.

13. Your Privacy Rights

Rights available to everyone. Depending on where you live, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Delete your data.
• Export / port your data in a structured, machine-readable format.
• Opt out of marketing communications at any time.

EEA, UK, and Swiss residents (GDPR). You additionally have the right to restrict or object to certain processing, to withdraw consent without affecting prior processing, and to lodge a complaint with your local supervisory authority.

California residents (CCPA/CPRA). You have the right to know what personal information we collect, to delete or correct it, and to opt out of the "sale" or "sharing" of personal information. TrueRoyalties does not sell or share personal information as those terms are defined under the CCPA.

To exercise any of these rights, email us at hello [at] trueroyalties [dot] com. We will respond within the timeframe required by applicable law — generally within 30 days.

To protect your information, we may need to verify your identity before we act on a request, and we may decline to act on — or charge a reasonable fee for — requests that are manifestly unfounded, excessive, or repetitive, to the extent permitted by law. If you use an authorized agent to submit a request on your behalf, we may require proof of that authorization. Exercising your rights will not lead to discriminatory treatment.

14. Cookies and Tracking

We use cookies and similar technologies (such as local storage) for two purposes:

• Essential cookies keep you signed in and make the Service work. These are always active because the Service cannot function without them.
• Analytics and performance cookies help us understand how the Service is used — which features are used, where errors occur, and how we can improve. We use these only to analyze usage of our own Service; we do not use them to build advertising profiles or to track you across other websites for advertising.

We do not sell or share your personal information and do not use advertising or cross-context behavioral tracking cookies. Where the law requires it, we ask for your consent before setting non-essential (analytics) cookies, and you can withdraw that consent at any time. You can also control cookies through your browser settings, though disabling essential cookies may break parts of the Service.

15. Marketing Communications

Any marketing email we send includes a one-click unsubscribe link. When you unsubscribe, we stop sending marketing messages promptly. We may still send you essential transactional messages (such as sign-in codes, billing receipts, and important account or security notices), because these are needed to operate the Service.

16. Children's Privacy

The Service is intended for professional authors and publishers and is not directed to anyone under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us personal data, contact us and we will delete it.

17. Changes to This Privacy Policy

We may update this policy from time to time. When we make material changes, we will update the "Last updated" date above and notify you by email or with an in-app notice before the changes take effect, where required by law. Your continued use of the Service after the effective date means you accept the revised policy.

18. Contact Us

If you have any questions about this Privacy Policy or how we handle your data, contact us at:

TrueRoyalties LLC
4405 Jager Dr NE, Rio Rancho, NM 87144, USA
Email: hello [at] trueroyalties [dot] com