Security and privacy reporting

Report a security issue

Email security@marketplaceadpros.com to report a vulnerability, a suspected security incident, or exposed credentials that affect Marketplace Ad Pros, our API, our MCP server, or data we hold for you.

It helps if you include:

• what you found and where (URL, API endpoint or MCP tool)
• steps to reproduce it, or the evidence that made you suspect an incident
• what data you think could be reached
• how to reach you, if you'd like updates

Please don't include real customer data, passwords or access tokens in the email. Describe them instead and we'll ask for what we need.

What happens next

• We acknowledge your report within 3 business days.
• We investigate, keep you updated if you've given us a way to reach you, and tell you when it's fixed.
• If a report shows that your data or your clients' data was affected, we tell you without undue delay, and no later than 72 hours after confirming it: what happened, what data was involved, what we've done, and what you should do.

We don't run a paid bug bounty.

Good-faith research

We won't take legal action against anyone who reports a vulnerability in good faith and:

• uses only their own account and data, and doesn't access, change or delete anyone else's
• stops and tells us as soon as they reach data that isn't theirs
• doesn't degrade the service (no load or denial-of-service testing, no spam)
• doesn't use social engineering, phishing or physical attacks
• gives us a reasonable time to fix the issue before telling anyone else, and agrees the date with us

Amazon's own systems, Seller Central, Vendor Central and the Amazon Ads console are not ours to test. Report issues there to Amazon.

API and Partner Connect customers

If you suspect a security incident affecting data you received through our API, MCP server or Partner Connect, or think one of your API keys or webhook signing secrets has leaked, email security@marketplaceadpros.com right away with what you know. Send updates as you learn more, and keep your logs.

Privacy requests

To ask what personal information we hold about you, or to have it corrected or deleted, email support@marketplaceadpros.com. Our Privacy Policy explains what we collect and why.