Privacy Policy

Information We Collect

1. Account Information

• Name, email address, and contact information
• Company name and business information
• Account credentials and authentication data
• Billing and payment information (processed by third-party payment processors)

2. Marketplace Data (via OAuth Consent)

• A. Information from Amazon SP-API

  If you connect your Amazon Seller account to JP Sales, we collect and process:

  • Order details (items, status, shipping info)
  • Inventory data (stock levels, SKUs)
  • Customer-related data (as allowed by Amazon policies)
  • Marketplace account identifiers

• B. Information from Other Marketplaces

  • We may also collect similar data from Flipkart, Shopify, WooCommerce, and other integrated channels, based on your authorization.

3. Usage and Analytics Data

• Platform usage patterns and feature interactions
• Performance metrics and error logs
• Device information and browser data
• IP addresses and location data (for security purposes)

How We Use Your Information

Primary Business Operations

• Provide ecommerce automation services across multiple platforms
• Synchronize orders, inventory, and product data between marketplaces
• Generate reports, analytics, and business insights
• Process and manage orders, shipments, and fulfillment
• Provide customer support and technical assistance

Service Improvement

• Analyze usage patterns to improve platform features
• Monitor system performance and prevent errors
• Develop new features and automation capabilities
• Ensure security and prevent fraudulent activities

Amazon SP-API Data Handling

As a certified Amazon SP-API public developer, we strictly adhere to Amazon's data usage policies:

• Consent-Based Access: We only access your Amazon data with your explicit OAuth consent
• Scoped Permissions: We request only the minimum necessary API scopes for our services
• No Data Sharing: We never sell or share your Amazon marketplace data with third parties
• Secure Processing: All SP-API data is encrypted in transit and at rest
• Compliance: We maintain full compliance with Amazon SP-API Developer Terms

Data Sharing and Disclosure

We DO NOT:

• Sell your personal or business data to third parties
• Share marketplace data for advertising purposes
• Access your data without explicit permission
• Use your data for our own business advantage

We MAY Share Data With:

• Service providers (hosting, payments, analytics) under strict data processing agreements
• Shipping and logistics partners (only shipping-related data with your consent)
• Legal authorities when required by law or to protect our legal rights
• Business successors in case of merger or acquisition (with prior notice)

Data Security

We implement comprehensive security measures to protect your data:

• All data is stored in encrypted databases and transmitted via SSL.
• Access is restricted to authorized personnel only using role-based access control.
• Sensitive information (like Amazon tokens) is encrypted at rest and during transmission.
• We maintain audit logs of all system access and data usage.
• Encryption: AES-256 encryption at rest, TLS 1.3 for data in transit
• Access Controls: Multi-factor authentication and role-based access
• Infrastructure: SOC 2 Type II compliant cloud infrastructure
• Monitoring: 24/7 security monitoring and threat detection
• Auditing: Regular security audits and penetration testing

Cookies and Tracking Technologies

We may use cookies and similar technologies to:

• Maintain sessions
• Understand usage behavior
• Improve our service experience
• You can manage cookie settings via your browser preferences.

Data Retention

• Account Data: Retained while your account is active plus 90 days after deletion
• Order Data: Retained for 7 years for tax and compliance purposes
• Analytics Data: Aggregated data retained for 5 years for business insights
• Audit Logs: Security and access logs retained for 7 years
• Marketplace Data: Deleted within 30 days after API access is revoked

Your Privacy Rights

You have the following rights regarding your personal data:

• Access: Request a copy of your personal data we hold
• Correction: Request correction of inaccurate personal data
• Deletion: Request deletion of your personal data (subject to legal requirements)
• Portability: Request a copy of your data in a machine-readable format
• Restriction: Request limitation of processing under certain circumstances
• Objection: Object to processing based on legitimate interests
• Withdraw Consent: Revoke OAuth permissions for marketplace integrations

To exercise these rights, contact us at privacy@jpsales.in

International Data Transfers

Your data may be transferred to and processed in countries other than your country of residence. We ensure adequate protection through:

• Standard Contractual Clauses approved by European Commission
• Adequacy decisions for transfers to approved countries
• Binding Corporate Rules for intra-group transfers
• Your explicit consent where required

Contact Us

If you have questions about this Privacy Policy or our data practices, contact us:

• Email: privacy@jpsales.in
• Data Protection Officer: dpo@jpsales.in
• Address: JPSales, Office No 423, Landmark Arcade, Sanala Road, Morbi, Gujarat. 363641, India

Policy Updates

We may update this Privacy Policy periodically to reflect changes in our practices or applicable laws. We will notify you of material changes by email or through our platform. Your continued use of our services after such modifications constitutes acceptance of the updated Privacy Policy.