Collection: email, name, company, phone, AWS account ID, LicenseArn, usage metrics, audit events.
Storage: protected databases in infrastructure managed by the seller outside AWS.
Usage: account provisioning, entitlement enforcement, metering, support, security.
Sharing: AWS Marketplace Metering and Entitlement APIs; no sale of personal data; no payment processors on this site.
Retention: account data for the subscription term; audit logs at least 1 year; backups 30 days.
Backup: automated daily snapshots with encryption at rest.
GDPR/CCPA requests: privacy@bestsaas.example.