J0hn by OCHO LLC

Privacy Policy

Effective October 27, 2026

J0hn is a private OCHO LLC tool for authorized Amazon reporting and project work. This policy explains what connection data the tool can access, why it is kept and how to request its removal.

Information the tool handles

Depending on the connection and work you authorize, J0hn may access or retain:

• Your Google account email address and basic profile information needed to identify the connected account.
• Authorized Gmail message headers, message bodies, attachments and links needed to locate and retrieve reports or perform a specifically instructed email task.
• Downloaded Amazon reports, their original source files, historical report records and related project information.
• Connection authorization credentials, delivery references, processing logs and timestamps needed to operate the connection and trace report changes.

Gmail read/write access is broader than a report-only inbox filter. It can technically permit reading, composing, sending and organizing email. The reporting workflow uses it to locate report emails, download files and manage labels. Composing or sending email requires specific operator instructions.

Amazon information and permitted use

The current reporting workflow is limited to supported advertising campaign and product reports. It does not offer processing of Amazon buyer names, addresses or other buyer personal information. Order or fulfillment integrations require a separate assessment and any required Amazon authorization before activation.

Amazon information is used only for the applicable authorized business and permitted reporting purpose. It must not be sold, repurposed for unrelated work, or pooled across clients for shared benchmarks. OCHO is independent of its clients and needs its own applicable permissions; a Gmail connection does not grant Amazon account or API access.

How information is used and stored

OCHO uses this information to identify the authorized account, retrieve requested reports, preserve original files, maintain consistent reporting history, track revisions, troubleshoot processing and organize related project work.

Original reports and derived records may be kept in OCHO’s server and storage systems. Operational logs can retain source references and timestamps. This website does not ask visitors to connect an account; connections are managed through the private operator workflow.

Protection and service providers

Reporting records are stored separately from this public website. The current reporting store uses restricted server accounts, private file permissions and a database that is not exposed to the public network. Credentials are kept outside public pages and source-code repositories. Administrative file transfers use encrypted connections.

The current storage services are DigitalOcean for OCHO’s reporting server and Google Drive for retained report copies. Cloudflare serves this public website and receives the ordinary connection information needed to deliver web pages. The J0hn pages contain no account-connection form or analytics scripts. Contact email is handled through the recipient’s email service.

Authorized access and analysis

Authorized OCHO operators, including employees, agents or contractors with an approved business need, may view specific messages, files or report records when the account holder has affirmatively authorized that access. Access may also be necessary for security investigations, troubleshooting or legal obligations, within the limits of Google’s policies.

Hosting and storage providers process information for those services. Operator-assisted work may involve OpenAI’s Codex; any use of that or another AI provider with report information requires a permitted purpose, the necessary consent and compatible provider terms and settings. The recipient, information and purpose must be disclosed before a new transfer. Google-derived information remains subject to Google’s Limited Use requirements.

Before sharing Amazon information with a hosting, storage or AI provider, OCHO must establish that the sharing is permitted, disclose the recipient and purpose to the applicable client, and put the required confidentiality and data protection obligations in place. Any additional Amazon approval required by the applicable service must be obtained first. Client consent alone does not remove Amazon’s restrictions.

Amazon materials must not be used by OCHO or its providers to develop or improve language, multimodal or other machine-learning models. AI analysis, where permitted, must use a reviewed provider and settings that honor those restrictions. Google-derived information remains subject to Google’s Limited Use rules. Connecting Gmail alone does not authorize unrelated AI processing.

Information may also be disclosed where necessary to comply with applicable law or investigate security issues. OCHO’s permitted use of Google-derived data does not include selling it or using it for advertising.

Google API data and Limited Use

OCHO commits to handling and transferring information received from Google APIs in accordance with the Google API Services User Data Policy, including its Limited Use requirements. These requirements also apply to records derived from Google API data.

Retention and deletion

Records are retained only while necessary for their authorized purpose or a legal obligation. Preserving original files and revisions does not create an indefinite right to keep them. Deletion requirements cover original exports, database records and retained copies.

For information governed by Amazon’s Data Protection Policy, deletion is required within 30 days of the earliest applicable trigger: Amazon’s deletion notice, the client revoking authorization or ending access, OCHO determining it is no longer entitled to process the information, or termination of participation in the service. Legally required retention is limited to that legal purpose. Amazon buyer personal information, if a separately authorized workflow is introduced, is subject to the policy’s limit of 30 days after order delivery unless longer retention is required by law. Other Amazon services may impose separate or earlier deletion requirements.

To request deletion of connection data, reports or related records, email walker@workwithocho.com and identify the connected account and the records concerned. OCHO will verify and handle the request subject to applicable rights, service requirements and legally required retention. Requests may also concern access, correction, or stopping processing or sharing. A technical disconnection does not itself erase stored files, but required deletion deadlines still apply.

Disconnecting Google

You can revoke J0hn’s future Google access through your Google Account connections. Revoking access stops future access under that authorization. It does not itself erase previously retained files. OCHO must still stop unauthorized processing and apply any deletion duties described above. Use the contact above to request deletion or clarify whether authorization for the underlying reporting work has also ended.

Report a security concern

Email walker@workwithocho.com with the subject “J0hn security concern,” the affected account or workflow, the approximate time and a brief description. Do not send passwords, tokens or report files in the initial message. OCHO will investigate and make any notifications required by applicable Amazon policies, Google policies or law.

Questions and policy changes

OCHO LLC operates J0hn. Contact walker@workwithocho.com with privacy questions or requests. Changes to this policy will be posted here with an updated effective date. A new use of Google account data requires any additional notice and consent required by Google’s policies.