Privacy Policy

Last updated: September 28, 2026 · Resilien LLC

1. Who We Are

Conduvit is a data integration and connection service operated by Resilien LLC ("Resilien", "we", "us"), 201 Specialty Point, Sanford, FL 32771, USA. Conduvit holds the platform authorizations behind Resilien's applications — Veypar (business.veypar.com), Nimbus (engine.itsnimbus.com) and the MatrixBOS client portal (bos.matrixbos.com). When you connect a platform account from one of those applications, Conduvit is the application that asks for your permission, stores the resulting credential, and retrieves data on your behalf.

This Privacy Policy describes how we collect, use, store, protect, share and delete personal and business data obtained through Conduvit, including data from the Amazon Selling Partner API (SP-API), Google APIs, Shopify, Meta and Intuit QuickBooks Online.

2. Data We Collect

We collect the following categories of data:

  • Account data: Name, email address, and company information provided when you sign up, request a quote, or contact us.
  • Amazon seller data: SP-API data retrieved from your connected Amazon Seller Central account, including orders, inventory, financial events, product listings, pricing data, and analytics reports, as authorized by you through Amazon's OAuth flow.
  • Google user data: Data from the Google services you choose to connect — Google Ads, Search Console, Google Analytics and Google Business Profile — as described in Section 4.
  • Other platform data: Orders, payouts and listings from Shopify; advertising performance and spend from Meta; accounting records from Intuit QuickBooks Online — each only after you authorize the connection through that platform's own consent flow.
  • Usage data: Technical logs, pipeline run records, and system events for the purpose of service reliability and security monitoring.

3. How We Use Your Data

We use data collected exclusively to:

  • Deliver the Conduvit data integration service to your authorized account, through the Resilien application you connected from
  • Maintain and improve platform reliability and performance
  • Respond to support requests and communications
  • Comply with legal obligations and the policies of the platforms we connect to, including Amazon's Data Protection Policy (DPP) and the Google API Services User Data Policy

We do not sell, rent, or share your data with third parties for marketing or advertising purposes.

4. Google User Data

Conduvit connects to Google services only when you (or a person you have authorized) choose Connect in one of Resilien's applications and approve the request on Google's consent screen. The consent screen names Conduvit and lists exactly what is requested. We request the following, and use each only as described:

  • Google Ads (auth/adwords): to read the list of advertising accounts you can access and, for the accounts you choose, campaign structure, performance reports, spend, billing status and invoices; and, when you use Nimbus's campaign-management features, to create and change campaigns, ads, budgets, assets, conversion actions and audiences in those accounts on your instruction or under automation rules you have enabled.
  • Google Ads Data Manager (auth/datamanager): to upload, to your own Google Ads account, the customer lists and conversion events you provide for Customer Match and conversion measurement. Contact details are hashed as Google's specification requires before upload.
  • Google Search Console (auth/webmasters): to read search performance and site information for the websites you choose.
  • Google Analytics (auth/analytics.readonly): to read reports for the Analytics properties you choose.
  • Google Business Profile (auth/business.manage): to read and update the business listings (locations) you choose.
  • Email address (auth/userinfo.email): to show you which Google account is connected and to manage that connection.

How we use it. We use Google user data solely to provide the features of the Resilien application you connected from — reporting, reconciliation and campaign management for your own accounts. We do not use it to serve advertising, do not sell it, do not use it for any purpose unrelated to the feature you enabled, and do not use it to develop, improve or train generalized artificial-intelligence or machine-learning models. People at Resilien read Google user data only with your consent (for example, during a support request you opened), for security or abuse investigation, to comply with applicable law, or after it has been aggregated and anonymized.

Where it is stored. The refresh token Google issues is encrypted with AES-256-GCM and stored in a Cloud SQL database on Google Cloud in the United States; the encryption key is held in Google Cloud Secret Manager. Short-lived access tokens are minted from it when needed and are not persisted. Reports we retrieve (for example daily spend, invoices and search performance) are stored in BigQuery on Google Cloud, separated by customer.

Who it is shared with. Google user data is shared only with the Resilien-operated application(s) you use (Veypar, Nimbus, MatrixBOS) so that they can show it to you; with Google Cloud as our infrastructure provider, acting as a data processor; and where required by law. We do not transfer Google user data to any other third party.

How to stop. You can disconnect at any time from the Connections or Access page of the application you connected from. Disconnecting stops all use of the credential, and when it is the last connection for that Google account we also revoke the grant with Google. You can also remove Conduvit's access at any time at myaccount.google.com/permissions. To have stored credentials and retrieved Google data deleted, email systems@resilien.com; we complete deletion within 30 days.

Limited Use. Conduvit's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

5. Amazon Information

Amazon Information accessed through SP-API is used solely for the purposes authorized by you and consistent with Amazon's Acceptable Use Policy and Data Protection Policy. We do not combine Amazon Information with data from external non-Amazon sources. Amazon customer personally identifiable information (PII) is handled in strict accordance with Amazon's DPP, including retention limits of no longer than 30 days after order delivery unless required by law.

6. Data Storage & Security

All data is stored on Google Cloud Platform (GCP) infrastructure, which holds SOC 2 Type II and ISO 27001 certifications. Data is encrypted at rest using AES-256 and in transit using TLS 1.2 or higher. Access is governed by GCP IAM with least-privilege principles. Credentials are stored in GCP Secret Manager or encrypted at the application level, and are never hardcoded.

7. Data Retention

We retain your account data for as long as your subscription is active and for a reasonable period thereafter as required by law or legitimate business need. Platform connection credentials are retained only while the connection is live. Retrieved platform data, including Amazon seller data and Google user data, is retained per your subscription plan terms. You may request deletion of your data at any time by contacting us at systems@resilien.com.

8. Data Sharing

We do not share your data with external parties except:

  • The Resilien-operated applications you use (Veypar, Nimbus, MatrixBOS), which present the data to you
  • GCP (our infrastructure provider, acting as a data processor)
  • As required by applicable law or regulatory authority
  • In response to a valid legal process, with prior notice to you where permitted

9. Your Rights

You have the right to access, correct, or delete your personal data. To exercise these rights, contact us at systems@resilien.com. We will respond within 30 days.

10. Security Incidents

In the event of a security incident affecting Amazon data, we will notify Amazon at 3p-security@amazon.com within 24 hours of detection, in compliance with Amazon's Data Protection Policy. We will notify affected users, and other platforms whose data is affected, as required by applicable law and platform policy.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated date. Continued use of Conduvit after changes constitutes acceptance of the revised policy.

12. Contact

For privacy-related questions, contact Resilien LLC, 201 Specialty Point, Sanford, FL 32771, USA — systems@resilien.com