1. Introduction This Privacy Policy describes how FLW LLC (“we”, “our”, or “us”) collects, uses, and protects data when using our internal Enterprise Resource Planning (“ERP”) system that integrates with Amazon Selling Partner API (SP-API) and Amazon Ads API. Our ERP system is a private, internal application developed solely for managing and operating our own Amazon seller accounts and brands. It is not a publicly available application and is not offered to third-party sellers or external customers. ⸻ 2. Scope of This Policy This policy applies only to data accessed through: • Amazon Selling Partner API (SP-API) • Amazon Advertising API (Ads API) The application is used exclusively by authorized personnel within our organization. ⸻ 3. Data We Access Through Amazon SP-API and Ads API, our ERP may access the following categories of data related to our own seller accounts: a. Operational Data • Order information • Inventory and fulfillment data • Product and listing data • Settlement and financial reports b. Advertising Data • Campaign, ad group, keyword, and search term performance data • Advertising spend and performance metrics c. Personally Identifiable Information (PII) Where applicable, limited PII such as buyer name and shipping address may be accessed only as required for order fulfillment and internal operational purposes. ⸻ 4. How We Use the Data All data accessed via Amazon APIs is used strictly for internal business operations, including: • Inventory and order management • Financial reconciliation and reporting • Advertising performance monitoring and analysis • Internal analytics and decision-making We do not use the data for marketing to external parties, resell the data, or provide services to third-party sellers. ⸻ 5. Data Sharing and Disclosure We do not share, sell, transfer, or delegate access to data obtained via Amazon SP-API or Ads API to: • Other developers • Third-party applications • External service providers acting as independent data controllers All data is processed exclusively within our internal systems. ⸻ 6. Data Storage and Security We implement reasonable administrative and technical measures to protect data, including: • Restricted access limited to authorized personnel • Secure storage of API credentials and tokens • Internal access controls and monitoring Access tokens and refresh tokens are stored securely and are never exposed publicly. ⸻ 7. Data Retention Data obtained through Amazon APIs is retained only for as long as necessary to support internal business operations and reporting requirements, and is deleted or archived in accordance with our internal data retention policies. ⸻ 8. Compliance with Amazon Policies We comply with all applicable Amazon policies, including: • Amazon Acceptable Use Policy (AUP) • Amazon Data Protection Policy (DPP) • Selling Partner API Terms of Use • Amazon Ads API Terms ⸻ 9. Changes to This Policy We may update this Privacy Policy from time to time to reflect changes in our internal systems or compliance requirements. Updates will be reflected on this page. ⸻ 10. Contact Information If you have any questions about this Privacy Policy or our data practices, please contact us: Email: [email protected]