Notice: This service and all legal terms are primarily intended for users in Mainland China. The service is hosted on Tencent Cloud (China) and billed in CNY via WeChat Pay.
Back to Home

Privacy Policy for EPUSH

Last updated: October 2026

Shenzhen Aixingjie Technology Co., Ltd. ("we", "us", or "our") operates EPUSH, an Amazon Selling Partner API (SP-API) application. Today EPUSH provides product listing and pricing tools. Additional modules (FBA, inventory and order tracking, buyer communication, feedback solicitation, and finance reports) are in development. This policy explains how we collect, use, store, protect, share, and delete information when you use our website and software.

Registered address: Room 1605, Unit 1, Building 3, Boyu Mansion, Hongrongyuan, Minqiang Community, Minzhi Subdistrict, Longhua District, Shenzhen, Guangdong, China.
Contact: sunhb@axjtech.com · +86 132 4038 4049

Scoped SP-API access. EPUSH requests only the SP-API roles listed in Section 1, which you approve during Login with Amazon. We access each role only when the related feature is available and you use it. We do not request Direct-to-Consumer Shipping or Tax Invoicing, and we do not generate shipping labels or tax invoices. Until Coming soon features launch, production use focuses on Product Listing and Pricing data.

1. Information We Collect (SP-API Roles)

We collect data you authorize through Login with Amazon / SP-API consent. EPUSH requests the following SP-API roles. Roles marked Available are used by live features; roles marked Coming soon are requested for features under development and are not used in production features until those modules launch:

Product Listing (Available) Product titles, descriptions, bullet points, images, attributes, SKUs, identifiers, listing status, A+ / enhanced brand content where authorized, and related catalog data for listings you create or manage.
Pricing (Available) Offer prices, competitive pricing inputs, and price update payloads for SKUs you manage in EPUSH.
Amazon Fulfillment (Coming soon) When this module launches: FBA-related logistics and shipment information you authorize so inventory can be sent to Amazon and fulfilled by Amazon to buyers.
Buyer Communication (Coming soon) When this module launches: seller–buyer message threads and related communication metadata needed to manage messages between your seller account and Amazon buyers.
Buyer Solicitation (Coming soon) When this module launches: data needed to solicit feedback from Amazon buyers within Amazon policy limits.
Finance and Accounting (Coming soon) When this module launches: financial and accounting report data needed to prepare seller finance reports. This role does not include information required to generate tax invoices.
Inventory and Order Tracking (Coming soon) When this module launches: inventory levels, order and fulfillment tracking status, and related operational data. This role does not include information required to generate shipping labels.
Account & Technical Data Seller ID, store name, EPUSH login credentials, IP address, browser type, and security audit logs.
Login with Amazon (LWA) / OAuth When you authorize EPUSH, Amazon provides OAuth authorization artifacts (including encrypted refresh tokens and authorized SP-API role scope). We use these solely to maintain your seller-authorized SP-API connection. We never receive or store your Amazon account password.

We do not use SP-API data for unrelated advertising. We do not sell your Personal Information, and we have not sold any personal information in the past 12 months.

2. How We Use Your Information

Currently available features:

Planned features (Coming soon; not live yet):

We do not use Amazon data for unrelated advertising, resale, or profiling. We do not request Direct-to-Consumer Shipping or Tax Invoicing roles. Optional AI features send only listing text you choose to process.

3. Data Security

Authorized Amazon data is isolated per account under RBAC with audit logging. All transmission—including EPUSH login, registration, and API traffic—uses TLS 1.2+ over HTTPS. Data at rest, including API tokens, EPUSH account credentials, and authorized Amazon content, is encrypted with AES-256-GCM on Tencent Cloud servers under contractual security obligations.

EPUSH utilizes isolated database instances and encrypted backups. Access to production databases is restricted to core operations personnel via bastion hosts, on a need-to-know basis. When Coming soon modules launch, related Amazon data will be handled under Amazon DPP requirements applicable to those roles.

4. Sub-processors & Data Sharing

Optional AI and translation features are user-initiated. We do not sell or rent your data for marketing, and we have not sold any personal information in the past 12 months. We may disclose information when required by law or to protect rights, safety, and security.

5. Amazon SP-API Compliance & Revoking Access

EPUSH complies with Amazon's Data Protection Policy (DPP), Acceptable Use Policy (AUP), and applicable Solution Provider Agreement terms. We access Amazon data only through the SP-API roles listed in Section 1 that you explicitly authorize during Login with Amazon (LWA) consent, and only to provide live features or Coming soon features after they launch, as described on our website.

We do not use Amazon data for unrelated advertising, resale, or profiling.

How to revoke SP-API authorization:

After revocation, we stop new SP-API calls promptly and remove stored refresh tokens and authorized Amazon data from live systems within 30 days, subject to encrypted backup cycles (see Section 7). You may also close your EPUSH account at any time.

6. International Data & Hosting

EPUSH is hosted on Tencent Cloud in the People's Republic of China. If you access the service from other regions, Amazon data you authorize may be processed and stored in China to provide the service, under the security controls described in this policy and Amazon DPP requirements.

7. Data Retention & Deletion

We retain authorized Amazon data and account information for as long as your account remains active. After account closure or revocation of SP-API authorization, we retain such data for up to 12 months (and in any event no longer than 18 months unless law or Amazon DPP retention rules require otherwise), or delete sooner if you request earlier deletion.

API tokens are removed when you revoke SP-API authorization or close your account, typically within 30 days, subject to encrypted backup cycles.

Upon confirmed deletion of your account or data, authorized Amazon data and personal information will be permanently erased from our live production systems within 30 days using industry-standard sanitization (such as NIST 800-88 or equivalent), subject to encrypted backup cycles and legal retention requirements. Security logs are retained for at least 12 months.

You may request access, correction, deletion, or that we stop processing your information by emailing sunhb@axjtech.com.

8. Data Breach Notification

If we become aware of a security incident that affects Information obtained through SP-API, we will investigate promptly, take remedial measures, notify affected users and regulators as required by applicable law, and notify Amazon at security@amazon.com within 24 hours of detecting the incident, as required by the DPP.

9. Cookies

We use cookies and similar technologies for authentication, session management, and security. You may control cookies in your browser; disabling them may limit functionality.

10. Changes

We may update this policy and will post revisions on this page with an updated "Last updated" date.

11. Contact Us

Email: sunhb@axjtech.com
Phone: +86 132 4038 4049
Company: Shenzhen Aixingjie Technology Co., Ltd.