Amazon services privacy policy

Website and inquiry information

When you email us, you provide the business and contact details, project requirements, and other information included in your message. These messages are handled through the email services involved. We use them to respond to you, scope a project, and maintain correspondence about the engagement.

Our website hosting and font providers may receive technical request information, such as IP address, browser type, timestamp, and requested resource, when your browser loads a page. The contact links open your email application; this website does not operate a contact-form database.

Contact us to request access to, correction of, or deletion of inquiry information. We may need to retain correspondence for an active engagement, a dispute, or a legal obligation; we will explain any applicable limitation when responding.

Planned integration data

The final data scope will depend on the features in the engagement and the seller's authorization. Planned categories include:

• Seller authorization information: seller and marketplace identifiers, authorized permissions, and credentials issued for an authorized integration. The integration will use Amazon's authorization process; do not send your Seller Central username or password to us.
• Service data: the records needed for the features in your engagement. These may include listings and pricing, inventory, order identifiers and statuses, FBA and AWD shipment records, seller account and performance reports, and financial transactions and settlements.
• Communication workflow records: permitted messaging or solicitation actions and their status when those functions are included in the engagement.
• Integration logs: operational and security information needed to support and protect the integration, with log contents limited to that purpose.

The planned integration will limit collection to the authorized purpose. Its current scope does not include restricted buyer-address access for direct-to-consumer shipping, tax invoicing or remittance, in-home professional services, or restricted seller-support case access.

Planned integration use and sharing

Seller-authorized information will be used to provide the agreed workflows, reporting and support, troubleshoot issues, protect the integration, and meet legal obligations. The planned service will not sell Amazon service data, use it for advertising or review manipulation, or pool it across sellers to sell competitive insights.

Access will be limited to personnel with a business need, providers required to operate the integration, and seller-authorized business systems. These may include hosting, database, monitoring, and support providers. Actual providers and processing arrangements will be identified before production access; they must be assessed and bound to appropriate restrictions and safeguards.

The integration will exchange information with Amazon to perform authorized API operations. Disclosures may also be required by law. One seller's nonpublic information will not be provided to another seller or used by recipients for their own marketing.

Planned storage and safeguards

The integration's storage architecture, providers, and processing locations are being defined during development. We will document them, including any seller-authorized destinations, and update this notice before enabling production connections.

Controls planned for implementation and validation include encrypted transmission, encrypted integration credentials at rest, access limited by role and business need, multi-factor authentication for personnel access, seller-data separation or attribution, and security logging. Credentials must remain outside public source code and browser-delivered pages.

Incident-response and notification procedures will also be established before production access. These are development requirements; this notice does not claim they have already been implemented or independently certified.

Planned integration retention and deletion

The integration will retain service data only for the authorized purpose and as long as necessary for that purpose or a legal obligation. Retrieval must stop when authorization is revoked or the service ends.

The deletion workflow will be designed to securely remove Amazon service information, including live instances, within 30 days of the earliest applicable trigger: an Amazon deletion notice, seller revocation or termination, loss of authorization to process the information, or termination of participation in the relevant Amazon service. Any legally required retention must be limited to that legal purpose.

Backup handling, deletion at service providers, and prevention of deleted information being restored to active use must be documented and validated. The final retention schedule and deletion process will be reflected in this notice before production access.

Email hello@bravostarsystems.com to request deletion. Include your business name and enough information to identify the service; do not send passwords, access tokens, or buyer records by email. We may verify the requester's authority before acting.

Your choices and privacy requests

You may contact us to request access to, correction of, or deletion of personal information we hold, or to raise a concern about processing. Once an integration has been authorized, you can revoke that authorization through your Amazon account's app-management settings. Requests concerning information processed on a seller's behalf will be coordinated with that seller.

Your rights depend on applicable law and may include objection, restriction, portability, and complaint to a privacy authority. We do not discriminate against people for exercising applicable privacy rights.

Website inquiries and third-party services

The contact links on this website open your email application. Information you send is processed by the email services involved. The website's hosting and font providers may receive technical request information when your browser loads a page. This seller-services page does not itself connect to your Amazon account.

International processing

Bravostar is based in the United States. Website and email providers may process information in other countries. The Amazon integration's processing countries and any required transfer safeguards will be identified before production access.

Children

These services are intended for businesses and are not directed to children under 13.

Changes to this notice

We will update this notice as the integration is built and before enabling production connections. We will update the effective date when the notice changes and communicate material changes affecting an active engagement to the seller.

Contact

Bravostar Systems Inc.
Email: hello@bravostarsystems.com