InteliAds

InteliAds Sync — Chrome Extension Privacy Policy

Effective May 16, 2026

This policy covers the InteliAds Sync Chrome extension — a companion to the InteliAds web app at dashboard.inteliads.io. The extension exists for one purpose: to pull your KDP royalty data, KENP page reads, and book catalog from your KDP reports page into InteliAds so the dashboard can show you real per-book net profit instead of estimates.

We aim to keep this short and concrete rather than legally exhaustive. If anything is unclear, email support@inteliads.ioand we'll answer in plain language. This document is a companion to the main InteliAds Privacy Policy, which covers the rest of the Service.

1. The short version

  • The extension reads your own KDP report data from kdpreports.amazon.com using your already-authenticated browser session, and copies it into your private InteliAds account.
  • It never sees, stores, or transmits your Amazon or KDP password. All authentication happens between Chrome and Amazon directly, same as when you visit KDP yourself.
  • It only runs on KDP pages (kdp.amazon.com, kdpreports.amazon.com) and talks to one back-end (InteliAds' Supabase database). It does not read other tabs, browsing history, bookmarks, downloads, or any non-KDP page.
  • The data it copies is visible only to you in your InteliAds dashboard, protected by per-row database policies.
  • It does notcollect Amazon Ads data — those metrics flow into InteliAds via the official Amazon Advertising API on the server side. The extension's job is only the KDP side.

2. What the extension collects

From your KDP account

Each time the extension syncs, it captures responses from the KDP report API endpoints your browser would normally call when you view KDP reports. These responses contain:

  • Daily royalty totals per book (ASIN) — the real net royalty Amazon paid you, in the original currency.
  • Daily order counts per book, broken out by format (ebook, paperback, hardcover, audiobook).
  • Daily KENP page reads per book — Kindle Unlimited pages read, which translate into KU royalty revenue.
  • Book catalog metadata — title, author, ASIN, format, marketplace, and list price for the books in your KDP account.
  • Sync run logs — when each sync started, when it finished, how many days it covered, and any errors we hit. These let you see in the extension popup why a sync failed and let our support team help you debug.

From your browser (local-only)

The extension stores a small amount of state in Chrome's local extension storage so it can do its job without re-asking on every page load:

  • Your InteliAds login session (the same token your browser would hold if you were signed into the dashboard).
  • Captured KDP request templates (URL + headers structure, not your cookies) so the extension can replay them in the background. Cookies and authentication are handled by Chrome itself, not by us.
  • Your sync preferences: how often to sync, which KDP account is active, whether nightly correction is on.
  • The timestamp of the last successful sync, so the popup can show you when it last ran.

This local data lives on your computer in Chrome's chrome.storage.local. It's wiped when you uninstall the extension.

3. What the extension does NOT collect

  • Your Amazon or KDP password. Authentication happens in your own browser between you and Amazon. The extension never reads login forms, password fields, or session cookies.
  • Your browsing history outside KDP. The extension only injects scripts on kdp.amazon.com and kdpreports.amazon.com. It cannot see other tabs, your bookmarks, downloads, or any non-KDP page.
  • Amazon Ads metrics (impressions, clicks, spend, sales, ACOS, etc.). These come from the official Amazon Advertising API server-side, not from this extension.
  • Data from other Amazon Ads users in your account or any other KDP author. The extension only sees your own authenticated KDP session.
  • Analytics, tracking pixels, or third-party advertising cookies. The extension does not load any third-party scripts or trackers.

4. How the data flows

  1. You install the extension and sign in to its popup using your existing InteliAds account.
  2. You visit kdp.amazon.com normally and log in to KDP with your Amazon password, just as you would without the extension.
  3. While you're browsing KDP, a small content script records the shape (URL + headers) of the report API calls your browser makes. No cookies or auth tokens are read or stored.
  4. On a schedule (hourly by default, plus a nightly correction pass), the extension's service worker opens a hidden KDP tab in the background, replays those captured request shapes — letting Chrome attach your existing session cookies the same way it would for a page you opened manually — parses the JSON response, and writes the relevant numbers into your InteliAds Supabase account.
  5. The InteliAds dashboard then reads that data and shows it to you, joined against your Amazon Ads metrics.

From Amazon's perspective, every request the extension makes is identical to one you would make manually: same browser, same cookies, same IP address, same session. No API key, no OAuth grant, no third-party access path.

5. Why the extension needs each Chrome permission

Chrome requires us to list every permission the extension uses. Here's what each is for:

  • tabs & windows — open a hidden background tab on kdpreports.amazon.com when it's time to sync, then close it. The tab is never shown to you and never opened unless you have the extension installed and signed in.
  • scripting — inject the capture script into KDP pages so it can record the shape of report API requests. The script is scoped to KDP hosts only.
  • alarms — schedule the periodic sync (default: every hour) and the nightly correction pass. This is how Chrome MV3 extensions run code on a timer.
  • storage — store the local state listed in section 2 (sync preferences, captured templates, last sync time) in chrome.storage.local.
  • activeTab— read the current tab's URL when you click the extension icon, so the popup can offer the right action (e.g. "Connect this KDP account").
  • Host: https://kdp.amazon.com/* and https://kdpreports.amazon.com/*— required to read KDP report API responses on your behalf. The extension does nothing on these hosts you couldn't do yourself in the same browser.
  • Host: https://*.supabase.co/* — required to write the captured KDP data into your InteliAds account and to authenticate the extension against your InteliAds login.

The extension does not request host permissions for advertising.amazon.com, any other Amazon property, or any non-Amazon site.

6. Where the data is stored

The KDP data the extension copies is written to InteliAds' managed Postgres database (Supabase). The same Row-Level Security policies that protect the rest of your InteliAds account apply: every query is scoped to your user id, so no other InteliAds user — and no public reader — can access your data. Backups are encrypted at rest. Where Supabase offers EU regions we use them.

See the main InteliAds Privacy Policy sections on Security and International Transfers for the full picture.

7. Third parties involved

  • Amazon (KDP)— the source of your KDP data. The extension is a client of Amazon's own KDP report pages, the same ones you can visit in your browser. The relationship between you and Amazon is governed by Amazon's terms.
  • Supabase — managed Postgres database where the captured data is stored, same as the rest of InteliAds.

The extension does not talk to any other third party. It does not include analytics SDKs, advertising SDKs, error-reporting services, or any tracking pixel.

8. How long we keep it

  • KDP data in InteliAds — retained while your InteliAds account is active. Deleting your InteliAds account removes the linked kdp_account and all dependent rows within 30 days, in line with the main retention policy.
  • Local extension storage — wiped when you uninstall the extension, or whenever you explicitly sign out from the extension popup.
  • Sync logs — retained for up to 90 days so support can help you debug a sync failure, then rotated out.

9. Your rights

You have the same rights over data captured by the extension as over any other data InteliAds holds about you — see section 5 of the main Privacy Policy: access, correction, deletion, export, objection, restriction, withdrawal of consent, and the right to complain to your data protection authority.

In addition, you can:

  • Pause syncing at any time from the extension popup (the Auto-sync toggle). Existing data stays; no new data is captured.
  • Disconnect the extension by signing out from the popup. Local state is wiped. Data already in InteliAds stays until you delete your account.
  • Uninstall the extensionvia Chrome's extensions page. This removes all local state.
  • Delete already-synced KDP data by emailing support@inteliads.io. We'll confirm the deletion within 30 days.

10. Security

The extension uses TLS for every network request. The InteliAds session token stored in chrome.storage.localis the only credential on your machine; it is never exposed to non-extension pages. The extension's manifest declares the minimum permissions it needs and nothing more; you can audit them from the extension's Chrome details page or by reading the manifest in our public source repository.

If you suspect a security issue with the extension specifically, email support@inteliads.iowith the word "extension" in the subject line so we can prioritise it.

11. Children

The extension is a B2B tool intended for KDP authors and other professional book advertisers. It is not directed at children under 16 and we do not knowingly collect data from them.

12. Changes to this policy

The effective date at the top of this page is updated whenever this document changes. For material changes (new processors, broader data collection, additional permissions) we'll notify you in-app and via email before they take effect. Cosmetic edits (typos, clarifications) may happen without notice.

13. Contact

Questions, requests, complaints — email support@inteliads.io. We read every message and respond within one business day.