Privacy & Data Protection Policy

What We Collect

We collect information you provide directly and data from your interactions with our services:

  • Account Information: Name, email, company details, payment information

  • Usage Data: How you interact with our platform, preferences, performance metrics

  • Technical Data: IP address, browser type, device information, cookies

  • Communication Records: Support tickets, emails, call recordings

How We Use Your Data

Core Operations

  • Deliver our services and fulfill agreements

  • Process payments and manage accounts

  • Provide customer support

  • Improve platform performance

Business Intelligence

  • Analyze usage patterns and optimize features

  • Generate insights for strategic decisions

  • Conduct market research

Communications

  • Send service updates and notifications

  • Share relevant business opportunities

  • Marketing communications (with your consent)

Data Sharing

We share your information only when necessary:

Service Providers: Third-party tools that help us operate (payment processors, analytics, cloud storage)

Business Partners: When collaborating on specific projects or opportunities you've engaged with

Legal Requirements: To comply with laws, court orders, or protect our rights

Business Transfers: In case of merger, acquisition, or sale of assets

We never sell your personal data to third parties.

Privacy & Data Protection Policy for Amazon Information

1. Data Collection

We collect only the minimum data necessary to fulfill orders:

  • Customer name and shipping address

  • Order details (SKUs, quantities, order ID)

  • No payment information is collected or stored

2. Data Processing

  • Data accessed only for order fulfillment and shipping label generation

  • Automated processing for FBA prep and compliance

  • No data mining, profiling, or marketing use

3. Data Storage

  • Stored in encrypted AWS RDS databases (AES-256)

  • Located in US-East region data centers

  • Access restricted by role-based permissions

  • No offshore data storage

4. Data Usage

Amazon Information is used exclusively for:

  • Generating shipping labels

  • Creating pick lists for warehouse operations

  • Processing returns

  • Updating order status in Seller Central

5. Data Sharing

  • Shared only with shipping carriers (FedEx, UPS, USPS) for delivery

  • Only name and address provided to carriers

  • No sharing with marketing partners or third parties

  • No sale of data

6. Data Retention & Disposal

  • Order data retained for 90 days after shipment

  • Automatic deletion after retention period

  • Secure overwriting of deleted data

  • Backup copies also deleted after 90 days

7. Security Measures

  • TLS 1.2+ encryption for data in transit

  • AES-256 encryption for data at rest

  • Multi-factor authentication required

  • Regular security audits every 180 days

  • SOC 2 Type II compliance

8. Incident Response

  • 24-hour notification to Amazon at [email protected]

  • Immediate containment and investigation

  • Affected user notification within 72 hours

  • Documented remediation process

9. Access Controls

  • Individual user accounts with unique credentials

  • Quarterly access reviews

  • Immediate revocation upon employee termination

  • Audit logs maintained for 1 year

10. Compliance

This policy complies with:

  • Amazon Data Protection Policy

  • Amazon Services API Developer Agreement

  • CCPA/GDPR requirements

  • Industry standard security practices

Your Rights

Access & Control

  • View what data we have about you

  • Update or correct your information

  • Delete your account and associated data

  • Export your data in standard formats

Communication Preferences

  • Opt out of marketing emails anytime

  • Adjust notification settings

  • Request specific communication channels

Geographic Rights

  • EU/UK residents have additional rights under GDPR

  • California residents have rights under CCPA

  • Contact us to exercise any privacy rights

Data Security

We implement industry-standard security measures including encryption, access controls, and regular security audits. However, no system is 100% secure—we'll notify you of any significant breaches.

Data Retention

We keep your information only as long as needed for business purposes or legal requirements. Account data is typically retained for 7 years after closure for financial and legal compliance.

International Transfers

Our primary operations are in the United States. If you're outside the US, your data may be transferred and processed here under appropriate safeguards.

Cookies & Tracking

We use essential cookies for platform functionality and optional analytics cookies to improve performance. You can control cookie preferences in your browser settings.

Third-Party Services

Our platform integrates with external services (payment providers, analytics tools, etc.). Their privacy practices are governed by their own policies.

Children's Privacy

Our services are designed for business use and not intended for individuals under 16. We don't knowingly collect data from minors.

Updates

We may update this policy as our business evolves. Significant changes will be communicated via email or platform notifications.

Contact Us

Questions about this policy or your data?

Email: [email protected]

For data requests or privacy concerns, our team typically responds within 48 hours.