Privacy Policy for EPUSH

Last updated: August 2026

Shenzhen Aixingjie Technology Co., Ltd. ("we", "us", or "our") operates EPUSH, an Amazon Selling Partner API (SP-API) application for product listing and pricing. This policy explains how we collect, use, store, protect, share, and delete information when you use our website and software.

Registered address: Room 1605, Unit 1, Building 3, Boyu Mansion, Hongrongyuan, Minqiang Community, Minzhi Subdistrict, Longhua District, Shenzhen, Guangdong, China.
Contact: sunhb@axjtech.com · +86 132 4038 4049

No buyer PII / no restricted roles. This version of EPUSH requests only the Product Listing and Pricing SP-API roles. We do not request restricted roles such as Inventory and Order Tracking or Buyer Communication. We do not collect Amazon buyer personally identifiable information (PII) such as buyer name, shipping address, or phone number.

1. Information We Collect (SP-API Roles)

We collect data you authorize through Login with Amazon / SP-API consent. EPUSH requests only the following SP-API roles; we access each only as needed for listing features you use:

Product Listing Product titles, descriptions, bullet points, images, attributes, SKUs, identifiers, listing status, and related catalog data for listings you create or manage.

Pricing Offer prices, competitive pricing inputs, and price update payloads for SKUs you manage in EPUSH.

Account & Technical Data Seller ID, store name, EPUSH login credentials, IP address, browser type, and security audit logs.

Login with Amazon (LWA) / OAuth When you authorize EPUSH, Amazon provides OAuth authorization artifacts (including encrypted refresh tokens and authorized SP-API role scope). We use these solely to maintain your seller-authorized SP-API connection. We never receive or store your Amazon account password.

We do not use SP-API data for unrelated advertising. We do not sell your Personal Information, and we have not sold any personal information in the past 12 months.

2. How We Use Your Information

Create, update, translate, and optimize Amazon product listings you authorize.
View and update offer prices for listings you manage in EPUSH.
Import supplier product data you provide and map it to Amazon listing attributes.
Provide optional AI-assisted listing content when you opt in and pay per use.
Operate, secure, and improve EPUSH; process subscriptions and top-ups via WeChat Pay.
Comply with legal obligations and Amazon SP-API / Data Protection Policy (DPP) requirements.

We do not use Amazon listing or pricing data for unrelated advertising, resale, or profiling. We do not access orders, buyer messages, or buyer PII.

3. Data Security

Seller listing data is isolated per account under RBAC with audit logging. All transmission—including EPUSH login, registration, and API traffic—uses TLS 1.2+ over HTTPS. Data at rest, including API tokens, EPUSH account credentials, and listing content, is encrypted with AES-256-GCM on Tencent Cloud servers under contractual security obligations.

EPUSH utilizes isolated database instances and encrypted backups. Access to production databases is restricted to core operations personnel via bastion hosts, on a need-to-know basis.

4. Sub-processors & Data Sharing

Tencent Cloud — application hosting in China; processes data only under our instructions and confidentiality terms.
WeChat Pay — payment identifiers and transaction status for billing you initiate; we do not store full payment credentials.
Amazon — when you direct us to submit or retrieve listing or pricing data via SP-API.
Alibaba Cloud DashScope (Tongyi Qianwen) — only when you opt in to AI-assisted listing features and trigger generation. We send listing-related text you provide (such as titles, bullet points, descriptions, and keywords). We do not send order data or buyer PII.
LibreTranslate — only when you request machine translation of listing text. We send the listing content you choose to translate. We do not send order data or buyer PII.

Optional AI and translation features are user-initiated. We do not sell or rent your data for marketing, and we have not sold any personal information in the past 12 months. We may disclose information when required by law or to protect rights, safety, and security.

5. Amazon SP-API Compliance & Revoking Access

EPUSH complies with Amazon's Data Protection Policy (DPP), Acceptable Use Policy (AUP), and applicable Solution Provider Agreement terms. We access Amazon seller data only through the Product Listing and Pricing roles you explicitly authorize during Login with Amazon (LWA) consent, and only to provide the listing features described on our website.

We do not use Amazon data for unrelated advertising, resale, or profiling.

How to revoke SP-API authorization:

In Amazon Seller Central, go to Apps and Services → Manage Your Apps, find EPUSH, and revoke access; or
Email sunhb@axjtech.com to request disconnection or account closure.

After revocation, we stop new SP-API calls promptly and remove stored refresh tokens and authorized listing data from live systems within 30 days, subject to encrypted backup cycles (see Section 7). You may also close your EPUSH account at any time.

6. International Data & Hosting

EPUSH is hosted on Tencent Cloud in the People's Republic of China. If you access the service from other regions, listing and pricing data you authorize may be processed and stored in China to provide the service, under the security controls described in this policy and Amazon DPP requirements. We do not transfer Amazon buyer PII because we do not collect it.

7. Data Retention & Deletion

We retain authorized listing and pricing data and account information for as long as your account remains active. After account closure or revocation of SP-API authorization, we retain such non-PII data for up to 12 months (and in any event no longer than 18 months unless law requires otherwise), or delete sooner if you request earlier deletion.

API tokens are removed when you revoke SP-API authorization or close your account, typically within 30 days, subject to encrypted backup cycles.

Upon confirmed deletion of your account or data, authorized Amazon listing data and personal information will be permanently erased from our live production systems within 30 days using industry-standard sanitization (such as NIST 800-88 or equivalent), subject to encrypted backup cycles and legal retention requirements. Security logs are retained for at least 12 months.

You may request access, correction, deletion, or that we stop processing your information by emailing sunhb@axjtech.com.

8. Data Breach Notification

If we become aware of a security incident that affects Information obtained through SP-API, we will investigate promptly, take remedial measures, notify affected users and regulators as required by applicable law, and notify Amazon at security@amazon.com within 24 hours of detecting the incident, as required by the DPP.

9. Cookies

We use cookies and similar technologies for authentication, session management, and security. You may control cookies in your browser; disabling them may limit functionality.

10. Changes

We may update this policy and will post revisions on this page with an updated "Last updated" date.

11. Contact Us

Email: sunhb@axjtech.com
Phone: +86 132 4038 4049
Company: Shenzhen Aixingjie Technology Co., Ltd.