Privacy

What we hold, and why.

Cleave connects to your Amazon account, so it is fair to ask exactly what that means. This page answers it in plain English rather than boilerplate.

Last updated 8 August 2026Applies to cleaveos.com and the Cleave OS application

Cleave OS is operated by Jack2Media, an independent Amazon agency based in Bristol, United Kingdom. For UK GDPR purposes Jack2Media is the data controller for this website and the early-access list, and processes connected Amazon account data on behalf of the seller who connected it. Contact: [email protected].

Cleave is not open to the public yet. The form on the home page registers interest — it does not connect anything and does not grant access. Accounts are invited by hand while the product is built. If you have only visited the website, the first section below is the whole story for you.

What the website collects

The marketing site you are reading carries no third-party analytics, no advertising pixels and no tracking cookies. It loads no third-party scripts at all.

It does keep a simple count of its own traffic, because we need to know whether anyone is interested. That count records nothing that identifies you — no IP address, no cookie, no device fingerprint, no profile. A stored row is four things: that a visit happened, the date, whether the browser was a phone or a desktop, and which website linked you here. That is the entire record, and it cannot be traced back to a person.

Visit countOne row per visit: the date, phone-or-desktop, and the referring site's name (for example “youtube.com” — never the full link you clicked, so any search terms or identifiers in it are discarded before anything is written down). Kept on our own servers and never shared.

Early-access formYour name, email address, Amazon experience level and whether you operate your own brand or client accounts. Used to gauge interest and to contact you about Cleave — nothing else. Stored until you ask us to remove it, and never passed to anyone.

Session cookieOne strictly necessary cookie (cleave-auth) is set only after you sign in. It keeps you signed in and does nothing else. There is no cookie banner because there is nothing to consent to.

Browser storagePreferences such as theme and saved views are kept in your own browser's local storage. The visit count uses one session-storage flag so a page refresh is not counted twice. Both are cleared when you close the tab or clear your browser, and neither leaves your device.

What the product holds once an account is connected

When a seller connects an Amazon account, Cleave pulls that account's data through Amazon's official APIs under the authorisation the seller grants, and holds it so the product can answer questions about it:

Orders, order items, refunds, fees, settlements and payout records
Inventory, restock and forecast data
Listing content, catalogue attributes and product images
Advertising campaigns, spend and search-term performance
Search Query Performance and other Amazon-published reporting
Operating data the seller supplies themselves: costs, VAT settings, purchase orders, tags, goals, notes, brand assets and uploaded reports

This is business data about a seller's own account. It is used to run that seller's Cleave workspace and for nothing else. It is not sold, not shared with other Cleave users, and not used for advertising.

Where data goes

Cleave runs on infrastructure controlled by Jack2Media in the United Kingdom. Beyond that, data reaches a third party only where a specific feature requires it:

AmazonThe source of connected account data, via the Selling Partner API and Advertising API.

CloudflareSits in front of the site and routes traffic to it, so it processes connection data such as IP addresses in the ordinary course of serving the page.

AI providersThe creative and drafting features call model providers (currently OpenAI, Google, Groq and Anthropic). Only the material needed for that specific request is sent — for the creative tools that means product, listing and keyword material, not your settlement or bank records.

Market data providersDataDoe, Keepa and DataForSEO supply advertising, pricing and keyword context. Requests to them carry product and keyword identifiers, not your account financials.

AppleIf you install Cleave to your home screen and enable notifications, Apple's push service delivers them. Turning notifications off stops this entirely.

Why we are allowed to hold it

Performing our contract with you — running the Cleave workspace you asked for.
Your consent — joining the early-access list. Withdraw it at any time by emailing us and the entry is deleted.
Our legitimate interests — keeping the service running, secure and free of abuse, and replying to enquiries.

How long it is kept

Connected account data is kept while the account is active, and deleted on request when it is not. Early-access entries are kept until the list is retired or you ask to be removed. Ask for deletion and it is deleted — there is no dark pattern here and no retention period you have to argue your way out of.

Your rights

Under UK GDPR you can ask for a copy of your data, ask for it to be corrected or deleted, ask us to restrict or stop processing it, and ask for it in a portable form. Email [email protected] and we will action it. If you are not satisfied with how we handle it, you can complain to the Information Commissioner's Office.

Changes

When this page changes, the date at the top changes with it. Material changes to how account data is handled will be sent to connected sellers by email rather than quietly edited in.

Ask us anything about this

A privacy page that raises more questions than it answers has failed. Email [email protected] and you will get a direct answer from the people who built the product. The security page covers how the data is protected, including what is not yet in place.

Back to Cleave OS