Amazon SP-API Data Use

This page describes what Amazon Selling Partner API data SellerSync accesses on behalf of an authorising merchant, why each data type is needed, how buyer PII is protected, and what we never do with Amazon data.

SP-API roles requested

Inventory and Order Tracking · Product Listing · Amazon Fulfillment / Orders · Merchant-Fulfilled Shipping (Restricted PII) · Reports · Sales · Finance.

Restricted PII justification (AUP 4.1)

SellerSync uses restricted order delivery fields (buyer name, shipping address, buyer-anonymised email) only to create authorised fulfilment tasks for Amazon seller-fulfilled orders and return carrier/tracking confirmation to Amazon. Buyer PII is not used for marketing, CRM, retargeting, profiling, review solicitation, or non-Amazon communications. Buyer PII is purged within 30 days of order delivery.

Data minimisation

SellerSync only requests the SP-API roles strictly required to deliver the features listed above. Buyer PII is only retrieved for orders the merchant has chosen to route through SellerSync.

What we never do (AUP)

We do not sell, rent, or disclose Amazon seller or buyer data to any third party.
We do not use Amazon customer PII for marketing, retargeting, audience building, profiling, or review growth.
We do not contact Amazon buyers outside permitted Amazon workflows.
We do not aggregate one seller's Amazon data with another seller's data for benchmarking, resale, advertising, or competitive intelligence.
We do not use Amazon Information to build, train or improve a product that competes with Amazon.
We do not scrape Amazon properties or collect Amazon data outside the authorised SP-API.
We do not use Amazon data to train AI or large language models.
We do not request Seller Central usernames, passwords, or access keys — OAuth (Login with Amazon) only.

Subprocessors (AUP 4.6)

Lovable Cloud (AWS ap-southeast-2 / Sydney) — application hosting, PostgreSQL database, edge functions, authentication.
Amazon Web Services / SP-API — source of Amazon data.
Shopify — destination of fulfilment data for the merchant's own store, only for orders the merchant has chosen to route.

Retention

Buyer PII: deleted within 30 days after order delivery.
Non-PII Amazon data: ≤ 18 months unless law requires otherwise.
Security and audit logs: ≥ 12 months.

Seller authorisation and revocation

SellerSync only operates on Amazon data after the merchant has explicitly authorised it through Amazon's OAuth flow from Seller Central. Authorisation can be revoked at any time from Seller Central or from Settings inside SellerSync. See /data-deletion.

Operated by Miles Kay Australia LTD, ABN 90 372 903 515, Australia. SellerSync.pro is an independent software application and is not endorsed by, sponsored by, or affiliated with Amazon. Support: support@sellersync.pro · Privacy / DPO (Jared Sherwood): privacy@sellersync.pro · Security incidents: security@sellersync.pro.

Home · Features · Pricing · About · Amazon data use · Data protection · Security · Privacy · Terms · Delete my data · Contact