Privacy Policy

Last updated: November 7, 2026

This Privacy Policy explains how Patara Bilişim Ltd. Şti. ("Patara Consulting", "we", "us") collects, uses, stores, shares and deletes information when you use PataraWeb 2.0 (the "Application"), our web application for Amazon sellers and agencies at admin.consultpatara.com. Our public website consultpatara.com is covered by the website privacy policy.

1. Who we are

Patara Bilişim Ltd. Şti. (trading as Patara Consulting)
Yıldıztepe Mah. 144.Sk. No: 10/4, Altındağ, Ankara, Türkiye
Email: admin@consultpatara.com · Phone / WhatsApp: +90 534 051 4651

We are the data controller for the personal data of the Application's users. For data that a seller or agency brings into the Application about its own business, staff or clients, that seller or agency decides what is connected, and we process it on its behalf to provide the service.

2. Information we collect

We collect only what is needed to provide the features a user or their organization turns on. Integrations are optional and are connected by the user or by an administrator of their agency.

2.1 Sign-in and account

2.2 Amazon seller and advertising data

After a Selling Partner authorizes the Application through Amazon's official authorization flow, and only within the permissions granted, we retrieve: sales and traffic, orders at an aggregated level (per product and day), advertising campaigns, targets, search terms and performance, listings and catalog data, FBA inventory and shipments, returns, reimbursements and fees, Account Health and seller feedback, and — for brand owners — Brand Analytics reports. The Application does not request or store personally identifiable information about Amazon customers (buyer names, addresses, emails or phone numbers).

2.3 Google Calendar (optional, per user)

If you connect your own Google Calendar on your Profile page, we read your calendar list and events. Details are in section 3.

2.4 Other integrations (optional, per agency or per user)

2.5 Agency records

Agencies can keep their own records in the Application, such as clients, tasks, employee profiles and payroll. Sensitive fields (identity numbers, social security numbers, salary and bank details) are stored encrypted and are visible only to the agency's administrators.

2.6 Technical data

IP address, browser and device type, pages requested and error information in server logs; browser push subscriptions if you turn on notifications.

3. Google user data

Scopes we request. Sign-in uses only openid, email and profile. Google Calendar is requested separately, only when you click "Connect Google Calendar" on your Profile page, with read-only scopes calendar.events.readonly and calendar.calendarlist.readonly. We never write to your Google Calendar.

What we access and store. Your calendar list (to let you choose calendars) and, for the calendars you choose, events from 7 days in the past to 60 days ahead: title, start and end time, all-day flag, location, video-meeting link, organizer, attendees' names, emails and responses, your own response and whether the event was cancelled. We do not store event descriptions or attachments. The refresh token is stored encrypted (AES-256-GCM).

How we use it. Only to show you your own meetings in the Application (Calendar page, Welcome page, header) and to send you the meeting reminders you set (in the app, as browser notifications and, if you turn it on, as a Slack direct message to you). Your calendar data is visible only to you — no other user, including administrators, can see it.

Sharing. We do not sell Google user data, do not share it with third parties except as needed to provide these features (our hosting provider), and do not use it for advertising.

Retention and deletion. Events older than 30 days are deleted every night. When you click "Disconnect" on your Profile page, we revoke the token with Google and delete the token and all stored events. You can also remove the Application's access at myaccount.google.com/permissions.

Limited Use. PataraWeb 2.0's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular: we use Google user data only to provide and improve the user-facing features described above; we do not transfer it to others except as necessary to provide those features, to comply with law, or as part of a merger or acquisition with notice to you; we do not use it for advertising; we do not allow humans to read it unless you give us permission for specific messages, it is necessary for security purposes or to comply with law, or it is aggregated and anonymized for internal operations; and we do not use it to develop, improve or train generalized artificial intelligence or machine learning models.

4. How we use information

We do not sell personal data and do not use it for advertising or profiling.

5. Amazon data: our commitments

6. Sharing and service providers

We share data only with providers that help us run the Application, under confidentiality and data protection obligations, and only as needed for the feature in use:

We may disclose information when required by law or to protect the rights and safety of our users and of Patara Consulting.

7. How we protect data

8. Retention and deletion

To request deletion of your data, email admin@consultpatara.com.

9. Cookies and browser storage

The Application uses one essential session cookie to keep you signed in and short-lived cookies to protect the sign-in flow. Your browser's local storage keeps display preferences (language, theme, filters). We do not use advertising or third-party tracking cookies.

10. International transfers

The Application is hosted in the United States. When you use it from Türkiye, the European Economic Area or elsewhere, your data is transferred to and processed in the United States, with the safeguards described in this policy and as permitted by applicable law.

11. Your rights

Depending on where you live, including under Turkish Law No. 6698 on the Protection of Personal Data (KVKK) and the EU General Data Protection Regulation (GDPR), you may have the right to access, correct, delete, restrict or port your personal data, to object to its processing and to withdraw consent. You can disconnect integrations at any time in the Application. To exercise your rights, email admin@consultpatara.com; we answer within 30 days. You may also complain to your data protection authority.

12. Children

The Application is a business tool and is not intended for anyone under 18. We do not knowingly collect data from children.

13. Changes to this policy

We may update this policy. The latest version is always published on this page with its date; significant changes are announced in the Application.

14. Contact

Questions about this policy or our data practices: admin@consultpatara.com · +90 534 051 4651 · Patara Bilişim Ltd. Şti., Yıldıztepe Mah. 144.Sk. No: 10/4, Altındağ, Ankara, Türkiye.