Amazon Data Handling & Security Policy (Evoltti / Voltti)
Evoltti (“we”) collects and processes Amazon Selling Partner API (SP-API) data solely to operate our own Amazon seller account(s), including demand planning, inventory management, order fulfillment, customer support, and financial reconciliation.
Collection
We access Amazon data through SP-API using approved credentials and permissions. We collect only the minimum data necessary to support our internal operational tools.
Processing & Use
Amazon data is used for internal analytics, forecasting, inventory optimization, shipment/order tracking, listing and pricing management (where permitted), and accounting reconciliation. If buyer Personally Identifiable Information (PII) is accessed via restricted roles, it is used only to fulfill orders, manage shipping/returns, and resolve customer issues.
Storage & Security
Amazon data is stored in secured systems with encryption in transit (TLS) and at rest. Access is protected by unique user accounts, MFA, least-privilege role-based access controls (RBAC), and logging/monitoring. Network protections (firewalls/VPC rules/IP allowlists), endpoint protection, and vulnerability management are used to reduce risk.
Sharing
We do not sell Amazon data. We share Amazon information only as required to perform our operations (e.g., with shipping carriers) and only the minimum necessary to complete the service.
Retention & Disposal
We retain buyer PII and other Amazon data for 31–90 days after order shipment, unless a longer period is required for legal, accounting, dispute/chargeback, or operational obligations. After retention, data is securely deleted or anonymized. Backups follow the same retention and deletion standards.
Employee Access
Only authorized personnel with a business need may access Amazon data. Access is reviewed periodically and revoked promptly upon role change or offboarding.
Incident Response
We maintain an incident response process to investigate and remediate security events and will notify Amazon according to applicable policy requirements.
Contact
For privacy or security inquiries: [email protected]