Business access boundaries
LoopAds has application-level access controls for organizations, members, stores and products. Business data access is evaluated against the user’s role and assigned scope. Account administration and Amazon authorization require the relevant management permissions.
Your organization should review member access when responsibilities change, and remove permissions that are no longer needed.
Authorized connections
Current Amazon connections are handled through LianLian services. Authorization, available data and permitted actions depend on the connected account and the permissions granted.
This website does not request an Amazon password or accept access tokens. Complete any connection only through the authorization flow provided for your service; send questions through our contact address rather than emailing credentials.
Reviewable actions
The product includes permissions, approval controls and operational records for advertising workflows. The controls that apply depend on the action and the operating settings selected for the service.
Review the affected account, action and scope before approving a change or enabling ongoing operation. Contact support if an action appears inconsistent with your instructions.
Security information for your review
Before connecting business data, you may request information about the intended deployment, credential handling, data locations, service providers, retention and incident contacts.
We will address a security questionnaire against the service being proposed and the evidence available for that deployment. Please contact us if your organization has specific control or assurance requirements.
Report a security concern
Email [email protected] with the subject “Security report”. Include the affected URL or feature, a description, approximate time and safe reproduction steps. Please exclude passwords, tokens and other customers’ information.
Please do not access data without authorization, disrupt services or publicly disclose a concern before giving us an opportunity to investigate. We will acknowledge the report, record a reference for follow-up, assess its scope and urgency, and agree an appropriate way to exchange sensitive details. We investigate and contain confirmed issues, provide progress updates, and explain the resolution or further steps to the reporter. Notifications to affected parties and platforms are handled under the applicable requirements. Sending a report does not create a paid bug-bounty arrangement.