Privacy Policy

1. Introduction

Seller Pilot ("Seller Pilot", "we", "us" or "our") provides a cloud-based operations and ERP platform that helps Amazon selling partners manage orders, inventory, listings, pricing, fulfillment, finance and analytics (the "Service"). This Privacy Policy describes how we collect, use, store, protect, share and delete information in connection with the Service.

We are committed to handling data responsibly and in accordance with applicable data protection laws, including the EU and UK General Data Protection Regulation (GDPR) where applicable, and with the Amazon Data Protection Policy (DPP) and Amazon Acceptable Use Policy that govern our use of the Amazon Selling Partner API (SP-API).

2. Information we collect

We collect the following categories of information:

2.1 Account & contact information

When you register or contact us, we collect information such as your name, business name, email address, phone number and role.

2.2 Amazon selling-partner data

With your explicit authorization, we access data from your Amazon Seller Central account through the SP-API. This may include orders, order items, shipment and fulfillment data, inventory, listings and catalog data, pricing data, financial and settlement data, performance metrics, and — where applicable to order processing — limited buyer information (see Section 3).

2.3 Usage & device data

We collect technical information such as log data, IP address, browser type, pages visited and timestamps to operate, secure and improve the Service.

2.4 Communications

If you contact us, we keep a record of that correspondence to respond to and support you.

3. Amazon Information & Personally Identifiable Information (PII)

"Amazon Information" means any data we obtain through the SP-API or from Amazon. Some of this data may include Personally Identifiable Information (PII) of Amazon customers — for example, a buyer's name and shipping address as needed to fulfill or analyze an order.

• We access Amazon Information only with the selling partner's explicit consent, granted through Amazon's official authorization flow.
• We use Amazon Information solely to provide the features the customer has enabled, and for no other purpose.
• We do not sell Amazon Information and we do not use it for advertising, to build buyer profiles, or share it with unauthorized third parties.
• We collect the minimum Amazon Information necessary, and we encrypt PII in transit and at rest.
• We retain PII no longer than 30 days after order delivery, except as required to comply with legal obligations, and we archive only where law requires.

Commitment: Our use of Amazon Information is designed to comply with the Amazon Data Protection Policy and Acceptable Use Policy. We restrict access to Amazon Information to personnel and systems that need it to operate the Service.

4. How we use information

We use the information described above to:

• Provide, operate, maintain and secure the Service;
• Sync and display your Amazon orders, inventory, listings, pricing, fulfillment and financial data;
• Automate workflows you configure (e.g., repricing, inventory alerts, reporting);
• Generate analytics and insights for your own business;
• Provide customer support and respond to your requests;
• Detect, prevent and address fraud, abuse and security incidents;
• Comply with legal obligations.

5. Legal bases for processing

Where GDPR applies, we process personal data on the following legal bases:

• Performance of a contract — to provide the Service you have requested;
• Consent — for example, the authorization you grant to connect your Amazon account;
• Legitimate interests — to secure, maintain and improve the Service, balanced against your rights;
• Legal obligation — to comply with applicable laws.

6. How we share information

We do not sell personal information. We share information only as follows:

• Service providers / sub-processors — vetted vendors (e.g., cloud hosting) that process data on our behalf under contractual confidentiality and security obligations;
• Legal & safety — where required by law, regulation, legal process, or to protect the rights, property or safety of users or the public;
• Business transfers — in connection with a merger, acquisition or asset sale, subject to this policy;
• With your direction — when you ask us to share data with a third party.

7. Data security

We implement administrative, technical and physical safeguards designed to protect your information, including encryption in transit (TLS 1.2+) and at rest (AES-256), role-based access control, multi-factor authentication, network isolation, logging and monitoring, and a documented incident response process. See our Data & Security overview for more detail.

8. Data retention

We retain personal data only as long as necessary for the purposes described in this policy or as required by law. Buyer PII obtained through the SP-API is retained for no longer than 30 days after order delivery unless a longer period is legally required. Upon termination of the Service or at your request, we delete or anonymize selling-partner data within 90 days, except where retention is legally mandated.

9. Your rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you;
• Request correction of inaccurate data;
• Request deletion ("right to be forgotten");
• Object to or restrict certain processing;
• Request data portability;
• Withdraw consent at any time, including by revoking Seller Pilot's access in Amazon Seller Central.

To exercise these rights, contact us using the details in Section 14. We will respond within the timeframe required by applicable law.

10. International data transfers

We may process and store information in countries other than your own. Where we transfer personal data across borders, we use appropriate safeguards (such as Standard Contractual Clauses) as required by applicable law.

11. Cookies & tracking

Our website and application use cookies and similar technologies that are strictly necessary to operate the Service and to remember your preferences, as well as limited analytics to understand usage. You can control cookies through your browser settings.

12. Children's privacy

The Service is intended for businesses and is not directed to children under 16. We do not knowingly collect personal data from children.

13. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version on this page and revise the "Last updated" date above. Material changes will be communicated through the Service or by email where appropriate.

14. Contact us

If you have questions about this Privacy Policy or wish to exercise your rights, contact us at:

Seller Pilot — Privacy Team
Email: guyue1592@gmail.com
Or use our Contact page.