Last updated: November 9, 2026
Controller
uandu GmbH is responsible for the processing of personal data in kaufIQ.
What kaufIQ does
kaufIQ calculates the profitability of marketplace sellers. It reads data from the marketplaces and advertising platforms a seller connects and combines sales with their costs.
Data we process
- Account data: name, email address, password (stored only as a hash), language, workspace and team memberships and invitations.
- Sign-in data: sessions with IP address and browser, to keep you signed in and protect your account.
- Connection data: access tokens and credentials of the platforms you connect, such as Amazon, OTTO, Temu, Shopify, Meta Ads and Google Ads, stored encrypted.
- Business data from these platforms: products, orders, returns, shipments, fees, payouts, stock, advertising and traffic figures.
- Orders can contain your customers' names and delivery addresses as the platform provides them. kaufIQ uses them only to show and calculate your orders and never contacts your customers.
- Files you upload, such as product costs, expenses and shipping rates.
Purposes and legal bases
- To provide kaufIQ under our contract with you (Art. 6(1)(b) GDPR).
- To keep the service secure and running, for example sign-in sessions, error logs and audit records (Art. 6(1)(f) GDPR).
- Your customers' data in your orders is processed on your behalf: for it you are the controller and we act as your processor (Art. 28 GDPR).
Access to your platforms
kaufIQ reads data from a platform only after you connect it and grant access there, for example on Amazon's consent screen. It uses that access only to read the data described here.
Data received from Amazon and the other platforms is used only for kaufIQ's own features. It is not sold, not used for advertising and not shared with third parties beyond the service providers below.
You can remove a connection at any time. kaufIQ then deletes the orders, stock, advertising and finance data imported through it.
Service providers and other recipients
We use service providers for hosting, databases and email delivery. They process data only on our instructions under data processing agreements.
If you connect an application such as an AI assistant to kaufIQ, it can read your reports only after you approve it on kaufIQ's consent screen, and you can revoke that access.
Cookies
kaufIQ uses only necessary cookies: a session cookie that keeps you signed in and a cookie that remembers your language. It uses no analytics or advertising cookies.
Retention
- Account and business data are kept while your account and workspace exist.
- Raw platform responses with order history are moved to an encrypted archive after 30 days and removed from the live database.
- Notifications are deleted after 90 days.
Security
Platform tokens and credentials are stored encrypted, connections use HTTPS, and access to diagnostic data is limited to administrators and logged.
Your rights
You have the right to access, rectification, erasure, restriction of processing, data portability and to object to processing, and you can lodge a complaint with a data protection supervisory authority. To exercise your rights, contact us using the details above.
Changes
We update this policy when kaufIQ changes how it processes personal data. The date above shows the current version.