Data Use Disclosure

Application: AMZ Operations Hub
API: Amazon Selling Partner API (SP-API)
Last updated: 2026-10-26

1. Purpose of the application

We operate Amazon seller accounts on behalf of their owners. The application automates routine operations: order processing, listing maintenance, inventory replenishment, advertising management and settlement reconciliation. A human account manager supervises every automated action.

2. Roles requested and justification

Role	Why it is needed
Product Listing	Create and update listings, prices, and inventory for managed stores
Orders	Retrieve orders, confirm shipment, issue refunds where authorized
Inventory and Fulfillment	Track FBA stock, create inbound plans
Amazon Advertising	Manage sponsored ads campaigns and pull performance reports
Finance and Accounting Reports	Download settlement reports to reconcile proceeds and service fees
Selling Partner Insights	Read account health and performance reports

3. How data flows

The seller authorizes the application through Amazon's OAuth consent screen.
We exchange the authorization code for a refresh token, encrypted at rest with AES-256-GCM.
Scheduled jobs pull only the reports and endpoints required for the roles above.
Data is stored in our own database in a dedicated tenant scope per seller account.
No data is transferred to any third party, except Amazon itself and infrastructure providers under data-processing agreements.

4. Security controls

TLS 1.2+ for all transport; tokens encrypted at rest; secrets held in a managed secret store.
Per-seller data isolation enforced at the query layer.
Access to production data limited to named personnel, logged and reviewed.
Authorization can be revoked by the seller at any time from Seller Central.

5. Data retention

Operational records are retained while the service agreement is active; deletion within 90 days of termination, except records required for tax and accounting purposes.

6. Contact

privacy@example.com