Data Handling Policy

Privacy & Amazon SP-API Data Handling Policy

Effective Date: July 10, 2026

Overview

This policy describes how our organization collects, processes, stores, uses, shares, and disposes of Amazon Selling Partner API (SP-API) data.

Our SP-API application is a private, internal application used exclusively to operate and manage our own Amazon selling business, including order management, shipping label purchasing, inventory management, and fulfillment operations. We do not provide this application or Amazon data access to third parties.

Information We Collect

Through Amazon SP-API, we may access information necessary for our business operations, including:

Order information
Shipment information
Inventory information
Product listing information
Reports provided through Amazon SP-API
Limited customer information required for order fulfillment, such as recipient name, shipping address, and order identifiers

We only request and use the minimum data necessary to perform authorized business functions.

How We Use Amazon Data

Amazon data is used solely for legitimate business purposes, including:

Processing customer orders
Purchasing shipping labels
Managing inventory
Managing product listings
Tracking shipments
Accounting and operational reporting
Complying with Amazon policies and applicable legal obligations

Amazon data is not used for advertising, marketing, profiling, or any purpose unrelated to operating our Amazon seller account.

Data Storage and Protection

Amazon information is stored only when necessary to support business operations.

We protect Amazon data through appropriate administrative and technical safeguards, including:

Restricted access to authorized personnel only
Individual user authentication
Role-based or least-privilege access
Secure network protections and firewalls
Endpoint security protections
Encryption of data in transit using HTTPS/TLS
Regular software and security updates

Access Control

Access to Amazon information is granted only to authorized personnel whose job responsibilities require it.

Each authorized user has unique login credentials. Access permissions are reviewed periodically and revoked promptly when no longer required.

Data Sharing

We do not sell, rent, or disclose Amazon data to third parties except:

As required to fulfill our own Amazon orders using authorized service providers;
When required by applicable law;
When required by Amazon's Selling Partner API policies.

Data Retention

Amazon data is retained only as long as necessary for business operations, accounting, legal, tax, or regulatory requirements.

When Amazon data is no longer required, it is securely deleted or otherwise disposed of using reasonable industry practices.

Incident Response

If we become aware of unauthorized access to Amazon information, we will promptly investigate the incident, take appropriate corrective actions, and comply with Amazon's notification requirements where applicable.

Policy Updates

We may update this policy from time to time to reflect operational, legal, or Amazon policy changes. The latest version will always be available on this page.