Privacy Policy

Last updated: 2026-10-26

AMZ Operations Hub ("we", "us") provides e-commerce operations services for Amazon sellers. This policy explains what data we access through the Amazon Selling Partner API, why we access it, and how it is protected.

1. Whose data we process

We process data belonging to the Amazon seller accounts that have explicitly authorized our application through Amazon's OAuth consent flow. Authorization is granted by the seller and can be revoked by the seller at any time in Seller Central.

2. What we access and why

Data category	Purpose
Order and shipment data	Fulfilling orders, generating shipping labels, customer service
Listing and catalog data	Creating and maintaining product listings, pricing, inventory updates
Inventory and FBA data	Replenishment planning and stock-out prevention
Advertising data	Managing and reporting on sponsored advertising campaigns
Financial and settlement reports	Reconciling sales proceeds and computing service fees
Account health and performance reports	Identifying policy risk before it affects the account
Buyer name and shipping address	Only where necessary to ship an order (FBM) or provide customer service

3. What we do not do

We do not sell, rent, or trade personal data.
We do not use buyer data for marketing or profiling.
We do not share data with third parties except our own service providers under contract, or where required by law.

4. How data is stored and protected

Credentials (refresh tokens) are stored encrypted with AES-256-GCM; plaintext tokens are never written to disk or logs.
Access is restricted to authorized personnel on a least-privilege basis.
Data is transmitted over TLS 1.2+.
Access tokens are short-lived; refresh tokens can be revoked by the seller at any time.

5. Retention and deletion

We retain operational data for as long as the service agreement is active. On termination, data is deleted within 90 days, except where retention is required by tax or accounting law. Sellers may request deletion at any time using the contact below.

6. Your rights

You may request access to, correction of, or deletion of your data, and you may revoke our application's authorization in Seller Central at any time (which immediately stops all data access).

7. Contact

Data protection contact: privacy@example.com