Amazon Data Privacy Notice
This notice explains how SpringCash LLC ("Spring", "we") collects, uses, stores, shares and deletes the data we receive from Amazon when you connect your Amazon seller account to Spring AI Seller Insights. Our general Privacy Notice covers everything else. Where the two differ for Amazon data, this notice applies.
1. Who we are
1.1 SpringCash LLC, 106 West 56th Street, Floor 3, New York, NY 10019, USA, is responsible for the data described here.
1.2 Questions and requests: privacy@spring.ai.
2. What we collect from Amazon
2.1 When you approve Spring in Seller Central, Amazon lets us read your account through the Selling Partner API. We collect:
- Account details: your selling partner ID, the marketplaces you sell in, and the authorization token Amazon issues to Spring.
- Orders: order ID, purchase date, status, marketplace, fulfillment and sales channel, and order amounts (item price, tax, shipping, discounts) with their currency. For each item: ASIN, seller SKU, product title, quantity and price.
- Payouts: each settlement Amazon pays you, with its dates and totals, the fees, refunds, promotions, chargebacks, reserves and adjustments inside it, and the last digits of the bank account Amazon paid.
- Account health: your Account Health Rating and the performance metrics Amazon reports for each marketplace.
- Inventory, only if you grant inventory access: FBA inventory quantities by SKU.
2.2 We do not collect your customers' personal information. We do not request Amazon's restricted buyer data (names, addresses, emails or phone numbers). We read Amazon's reports in memory and keep only the fields listed above.
2.3 We do not collect your Amazon password. You sign in on Amazon's own page.
3. How we use it
3.1 We use Amazon data only to provide Spring's services to the business that connected the account:
- to build your sales, payout, fee, account-health and inventory reports;
- to keep your account information in Spring current, and to alert our team when Amazon flags a problem with your seller account;
- to match your Amazon products to the same products in your other sales channels;
- to provide the other Spring services in your agreement with us, and to meet our legal obligations.
3.2 We do not sell Amazon data. We do not use it for advertising or marketing, we do not combine it across sellers to build market or competitive insights, and we do not show one seller's data to another.
4. How we store and protect it
4.1 Amazon data is stored in Spring's production database on Amazon Web Services in the United States. The database and its backups are encrypted at rest with AES-256.
4.2 The authorization token is encrypted a second time by our application, with keys held in a managed secrets store.
4.3 Amazon data is encrypted in transit with TLS 1.2 or higher: from Amazon to Spring, from our servers to our database, and from Spring to you.
4.4 The database is not reachable from the public internet. Staff access follows least privilege, requires two-step verification, is reviewed every quarter, and is removed when someone leaves. Our wider security program is described on our Security page.
5. Who we share it with
5.1 Spring staff who need Amazon data to support your account.
5.2 Service providers that host or process data on our behalf: cloud hosting, and the software our team uses to analyze data and support you, including AI model providers. They may use the data only to provide their service to Spring.
5.3 Anyone we are legally required to disclose it to, such as a court or regulator, and a successor if Spring is merged or sold, on the same terms as this notice.
5.4 We share Amazon data with no one else.
6. How long we keep it, and how to delete it
6.1 We keep Amazon data while your account is connected. After that we keep it only as long as we need it for the purposes in section 3 or to meet legal, tax and regulatory record-keeping requirements.
6.2 Disconnect. You can revoke Spring's access at any time in Seller Central under Apps and Services → Manage Your Apps. Once you revoke, we can no longer read your account and we stop collecting new data.
6.3 Delete. Email privacy@spring.ai from the address on your Spring account to ask us to delete your Amazon data. We delete it within 30 days, except records the law requires us to keep, which we delete when that requirement ends. Encrypted backups expire on their normal schedule.
7. Security incidents
7.1 If we detect a security incident involving Amazon data, we notify Amazon at security@amazon.com within 24 hours and notify affected sellers as the law and our agreements require.
8. Your rights
8.1 You can ask to access, correct or delete your data, or object to how we use it. See section 11 of our Privacy Notice, or email privacy@spring.ai.
9. Changes to this notice
9.1 We may update this notice. The date below shows the latest version.