Security
How we protect your Amazon data.
Plain statements of what we do. The full detail is in the Privacy Policy.
Encrypted in transit
Data moves between your browser, our systems and Amazon over encrypted connections (TLS).
Credentials protected
The authorization Amazon issues to us is stored encrypted (AES-GCM). We never ask for your Seller Central password or access keys.
Access is limited
Only people who need client data for their work can reach it, and each client's data stays associated with that client.
No cross-client sharing
We do not combine your data with other clients' data or show it to other clients.
Retention and deletion
We do not store buyer names, emails, phone numbers or street addresses. If buyer personal information is ever needed, we do not keep it longer than 30 days after order delivery, unless the law requires it. We keep other Amazon data only as long as needed to provide your service.
Deleted within 30 days
After you revoke access, your engagement ends, or Amazon tells us to, we permanently delete your Amazon data within 30 days. On request we confirm the deletion in writing.
Incidents
24-hour notice.
If a security incident affects Amazon data, we notify Amazon within 24 hours, and we notify affected clients. Our designated security incident contact is our Technology Lead.
To report a concern, email support@albertscott.com or call 516.345.8743.
Policies
We follow Amazon's rules.
We follow Amazon's Acceptable Use Policy and Data Protection Policy for applications that use the Selling Partner API.
Amazon data section of the Privacy Policy
Data access and permissions