Privacy Policy for EPUSH
Shenzhen Aixingjie Technology Co., Ltd. ("we", "us", or "our") operates EPUSH, an Amazon Selling Partner API (SP-API) application. Today EPUSH provides product listing and pricing tools. Additional modules (FBA, inventory and order tracking, buyer communication, feedback solicitation, and finance reports) are in development. This policy explains how we collect, use, store, protect, share, and delete information when you use our website and software.
Registered address: Room 1605, Unit 1, Building 3, Boyu Mansion,
Hongrongyuan, Minqiang Community, Minzhi Subdistrict, Longhua District, Shenzhen,
Guangdong, China.
Contact:
sunhb@axjtech.com
· +86 132 4038 4049
1. Information We Collect (SP-API Roles)
We collect data you authorize through Login with Amazon / SP-API consent. EPUSH requests the following SP-API roles. Roles marked Available are used by live features; roles marked Coming soon are requested for features under development and are not used in production features until those modules launch:
We do not use SP-API data for unrelated advertising. We do not sell your Personal Information, and we have not sold any personal information in the past 12 months.
2. How We Use Your Information
Currently available features:
- Create, update, translate, and optimize Amazon product listings you authorize.
- View and update offer prices for listings you manage in EPUSH.
- Import supplier product data you provide and map it to Amazon listing attributes.
- Provide optional AI-assisted listing content when you opt in and pay per use.
- Operate, secure, and improve EPUSH; process subscriptions and top-ups via WeChat Pay.
- Comply with legal obligations and Amazon SP-API / Data Protection Policy (DPP) requirements.
Planned features (Coming soon; not live yet):
- Support FBA inbound and logistics workflows you authorize.
- Track and analyze inventory and order status (without generating shipping labels).
- Manage buyer messages and solicit buyer feedback within Amazon policies.
- Prepare finance and accounting reports (without generating tax invoices).
We do not use Amazon data for unrelated advertising, resale, or profiling. We do not request Direct-to-Consumer Shipping or Tax Invoicing roles. Optional AI features send only listing text you choose to process.
3. Data Security
Authorized Amazon data is isolated per account under RBAC with audit logging. All transmission—including EPUSH login, registration, and API traffic—uses TLS 1.2+ over HTTPS. Data at rest, including API tokens, EPUSH account credentials, and authorized Amazon content, is encrypted with AES-256-GCM on Tencent Cloud servers under contractual security obligations.
EPUSH utilizes isolated database instances and encrypted backups. Access to production databases is restricted to core operations personnel via bastion hosts, on a need-to-know basis. When Coming soon modules launch, related Amazon data will be handled under Amazon DPP requirements applicable to those roles.
4. Sub-processors & Data Sharing
- Tencent Cloud — application hosting in China; processes data only under our instructions and confidentiality terms.
- WeChat Pay — payment identifiers and transaction status for billing you initiate; we do not store full payment credentials.
- Amazon — when you direct us to submit or retrieve authorized SP-API data for live listing and pricing features, and later for Coming soon modules when those features launch.
- Alibaba Cloud DashScope (Tongyi Qianwen) — only when you opt in to AI-assisted listing features and trigger generation. We send listing-related text you provide (such as titles, bullet points, descriptions, and keywords). We do not send order, buyer message, or finance data to AI providers.
- LibreTranslate — only when you request machine translation of listing text. We send the listing content you choose to translate.
Optional AI and translation features are user-initiated. We do not sell or rent your data for marketing, and we have not sold any personal information in the past 12 months. We may disclose information when required by law or to protect rights, safety, and security.
5. Amazon SP-API Compliance & Revoking Access
EPUSH complies with Amazon's Data Protection Policy (DPP), Acceptable Use Policy (AUP), and applicable Solution Provider Agreement terms. We access Amazon data only through the SP-API roles listed in Section 1 that you explicitly authorize during Login with Amazon (LWA) consent, and only to provide live features or Coming soon features after they launch, as described on our website.
We do not use Amazon data for unrelated advertising, resale, or profiling.
How to revoke SP-API authorization:
- In Amazon Seller Central, go to Apps and Services → Manage Your Apps, find EPUSH, and revoke access; or
- Email sunhb@axjtech.com to request disconnection or account closure.
After revocation, we stop new SP-API calls promptly and remove stored refresh tokens and authorized Amazon data from live systems within 30 days, subject to encrypted backup cycles (see Section 7). You may also close your EPUSH account at any time.
6. International Data & Hosting
EPUSH is hosted on Tencent Cloud in the People's Republic of China. If you access the service from other regions, Amazon data you authorize may be processed and stored in China to provide the service, under the security controls described in this policy and Amazon DPP requirements.
7. Data Retention & Deletion
We retain authorized Amazon data and account information for as long as your account remains active. After account closure or revocation of SP-API authorization, we retain such data for up to 12 months (and in any event no longer than 18 months unless law or Amazon DPP retention rules require otherwise), or delete sooner if you request earlier deletion.
API tokens are removed when you revoke SP-API authorization or close your account, typically within 30 days, subject to encrypted backup cycles.
Upon confirmed deletion of your account or data, authorized Amazon data and personal information will be permanently erased from our live production systems within 30 days using industry-standard sanitization (such as NIST 800-88 or equivalent), subject to encrypted backup cycles and legal retention requirements. Security logs are retained for at least 12 months.
You may request access, correction, deletion, or that we stop processing your information by emailing sunhb@axjtech.com.
8. Data Breach Notification
If we become aware of a security incident that affects Information obtained through SP-API, we will investigate promptly, take remedial measures, notify affected users and regulators as required by applicable law, and notify Amazon at security@amazon.com within 24 hours of detecting the incident, as required by the DPP.
9. Cookies
We use cookies and similar technologies for authentication, session management, and security. You may control cookies in your browser; disabling them may limit functionality.
10. Changes
We may update this policy and will post revisions on this page with an updated "Last updated" date.
11. Contact Us
Email:
sunhb@axjtech.com
Phone:
+86 132 4038 4049
Company: Shenzhen Aixingjie Technology Co., Ltd.