Privacy Policy

This Privacy Policy describes how Xiamen Yunzhongcheng Technology Co., Ltd. ("we", "us", or "our") collects, uses, stores, and protects data when you use Notice123 (the "Service"). The Service is a SaaS application that helps Amazon sellers manage inventory and track order events through the Amazon Selling Partner API (SP-API).

By using the Service, you agree to the practices described in this Privacy Policy. This policy is designed to comply with the Amazon Acceptable Use Policy (AUP) and Data Protection Policy (DPP).

1. Data We Access

1.1 Amazon Seller Data

We access data from your Amazon seller account exclusively through the Amazon Selling Partner API, and only after you have explicitly authorized our application via Amazon's OAuth workflow. The data we access includes:

• Inventory data: FBA inventory levels, SKU quantities, and inventory status information
• Order status data: Order identifiers, order status (Pending, Shipped, Delivered), and order item quantities
• Listing data: SKU identifiers and listing status for inventory management purposes

1.2 Data We Do NOT Access

We explicitly do not access or process:

• Personally Identifiable Information (PII) about Amazon customers, including names, addresses, email addresses, phone numbers, or payment details
• Buyer communication messages or buyer feedback
• Financial or banking information
• Data from Amazon's public-facing websites
• Data from external (non-Amazon) sources about Amazon Information

1.3 Account Data

When you create a Notice123 account, we collect your email address, name, and company information. This is used for account management and communication purposes only.

2. How We Use Data

We use the data accessed through the SP-API solely for the following purposes:

• Inventory management: Displaying your Amazon inventory levels and calculating stock consumption
• Inventory risk alerts: Monitoring inventory against your configured thresholds and sending alerts when stock is low
• Order notifications: Detecting order status changes and notifying you in real time
• Cancellation alerts: Detecting buyer-initiated cancellation requests and alerting you promptly
• Order-triggered workflows: Recalculating inventory consumption when order events are received

3. Data Sources

All Amazon Information is retrieved exclusively through the Amazon Selling Partner API. We do not retrieve Amazon Information from any external or non-Amazon sources.

4. Data Sharing

We do not share, sell, rent, lease, or otherwise distribute Amazon Information to any third party. Amazon Information accessed through the SP-API is processed solely within our application infrastructure to provide the Service to the authorized seller.

We do not aggregate data across different sellers' businesses or Amazon customers. Each seller's data is processed independently within a multi-tenant isolated architecture.

5. Data Security

5.1 Encryption

All data is encrypted in transit using TLS 1.2 or higher. Credentials (passwords, encryption keys, secret access keys) are stored securely and are never kept in public repositories, shared, or hard-coded into applications.

5.2 Access Controls

Access to Amazon Information is restricted based on job duties and business functions. We enforce role-based access control with the principle of least privilege. Multi-Factor Authentication (MFA) is enforced for all internal systems. Password requirements include a 12-character minimum with special characters, 365-day expiration, and annual rotation.

5.3 Network Security

We implement firewalls, intrusion detection/prevention systems (IDS/IPS), anti-virus/anti-malware protection, and network segmentation to safeguard data.

5.4 Incident Response

We maintain an incident response plan with defined roles, 6-month reviews, and 24-hour incident notification procedures. Any security incident involving Amazon Information will be reported to security@amazon.com within 24 hours of detection.

6. Data Retention

Amazon Information is retained only for as long as necessary to provide the Service to the authorized seller. When a seller revokes authorization or terminates their account, we delete all associated Amazon data within 30 days, except where retention is required by applicable law.

7. Your Rights

As an authorized seller, you have the right to:

• Revoke access: Disconnect Notice123 from your Amazon account at any time through Amazon Seller Central
• Request data deletion: Request that we delete your data from our systems
• Request data export: Request a copy of your non-Amazon account data
• Access transparency: Be informed about what data we access and for what purpose

To exercise any of these rights, contact us at contact@yzccn.com.

8. Compliance with Amazon Policies

Our application complies with the following Amazon policies:

• Acceptable Use Policy (AUP): We use SP-API data only for acceptable Amazon seller activities and only for sellers who have authorized us
• Data Protection Policy (DPP): We follow specific requirements for the receipt, storage, usage, transfer, and disposition of data accessed through the SP-API
• Solution Provider Agreement: We adhere to the terms of the Amazon Services API Solution Provider Agreement

9. Third-Party Services

We use cloud infrastructure providers to host and run the Service. These providers act as data processors and are bound by confidentiality agreements. They do not have access to Amazon Information beyond what is necessary for infrastructure maintenance.

We do not use any external (non-Amazon) data services that vend Amazon Information.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by email or through the Service. The updated policy will be effective immediately upon posting.

11. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

• Email: contact@yzccn.com
• Phone: +86 186-0591-8653
• Address: Xiamen Yunzhongcheng Technology Co., Ltd., Xiamen, Fujian, China