Privacy Policy

Last Updated: April 23, 2026

ZW TECHNOLOGY LIMITED ("we," "our," or "us") is committed to protecting the privacy and security of Amazon sellers who use our ERP suite. This Privacy Policy describes how we collect, use, store, share, and delete information when you use www.zhanwangtech.com, haul.zhanwangtech.com, ads.zhanwangtech.com, api.zhanwangtech.com, and the underlying ZW Technology Seller ERP platform (collectively, the "Service"). This policy is issued in accordance with Amazon’s Data Protection Policy (DPP), Acceptable Use Policy (AUP), and the Amazon Developer Solution Provider Agreement.

1. Information We Collect

Account Information: Name, email address, company name, phone number, and billing information provided when you register.

Amazon Seller / Vendor / Amazon Business credentials: SP-API refresh tokens, LWA client IDs, and Seller IDs authorized to our application through Amazon’s Login-with-Amazon OAuth flow.

Amazon data retrieved via authorized APIs:

• Catalog and listing data (titles, attributes, variations, A+ content, images)
• Pricing data (list prices, Buy Box status, competitor offers)
• Inventory & order data (stock levels, orders, shipments, returns)
• Finance data (settlement reports, payouts, fee-category breakdowns)
• FBA / AWD / Logistics data (inbound shipments, storage, reimbursements)
• Messaging and Solicitation events (order-message events, review requests)
• Brand Analytics reports (Search Query Performance, Market Basket, Item Comparison, Repeat Purchase, Top Search Terms, Demographics) — for brand-registered sellers only, and only when explicitly authorized
• Advertising campaign data (Sponsored Ads, DSP, AMC, Amazon Attribution)
• Amazon Business B2B data (B2B pricing, purchase orders, sustainability certifications)

Usage Data: Platform interaction logs, device information, browser type, and pages visited.

Communication Data: Information you provide when contacting support.

2. How We Use Your Information

• Provide, maintain, and improve the ZW Technology ERP modules you have enabled.
• Execute authorized API calls on your behalf (list, price, message, report, etc.).
• Generate dashboards, recommendations, and reports inside your workspace.
• Detect anomalies and protect against fraud or policy violations.
• Respond to support inquiries and communicate about service updates.
• Comply with legal obligations.

3. Amazon SP-API Data Usage

We access Amazon Selling Partner API data only to provide the specific ERP module a seller has enabled. Specifically we use:

• Listings API / Product Type Definitions API / Catalog Items API: Create, edit, and retrieve product listings (Module 1 & 10).
• Feeds API: Submit bulk listing, pricing, and inventory feeds (Module 1, 2, 3).
• Product Pricing API: Retrieve Buy Box, competitive pricing, and apply repricing rules (Module 2 & 10).
• Orders API / FBA Inventory API / Merchant Fulfillment API / Returns API: Order processing, inventory tracking, and returns handling (Module 3).
• FBA Inbound API / Shipping API / AWD APIs: Manage FBA shipments, AWD transfers, and Amazon Logistics (Module 4).
• Finances API / Invoices API: Settlement reports, payouts, fee reconciliation (Module 5).
• Messaging API / Solicitations API / Feedback Reports: Buyer communication and Request-a-Review automation (Module 6).
• Reports API (Brand Analytics): Retrieve Brand Analytics reports — Search Query Performance, Market Basket Analysis, Item Comparison and Alternate Purchase, Repeat Purchase Behavior, Top Search Terms, and Demographics — for brand-registered sellers only, to generate listing and catalog recommendations inside the seller’s own workspace (Module 7). Brand Analytics data is never exported, resold, or used to target individual consumers.
• Amazon Business APIs: B2B catalog, pricing, purchase orders, sustainability certifications (Module 9).
• Sellers API / Selling Partner Insights: Verify marketplace participation and surface account health information (Module 3, 9, 12).

Beyond SP-API, we also use the Amazon Advertising API, Amazon Marketing Cloud, and Amazon Attribution API for Modules 8 and 11 — for sellers who grant those specific authorizations.

We do not sell, rent, share, or otherwise disclose your Amazon data to any third party. We do not use Amazon data to target individual Amazon buyers, build buyer-profile datasets, or compete with Amazon or with Amazon sellers outside of the services explicitly authorized.

4. Data Storage and Security

• Encryption in transit: TLS 1.2+ on every connection between your browser, our platform, and Amazon APIs.
• Encryption at rest: AES-256 for all SP-API credentials (refresh tokens, LWA client secrets) and any cached report data.
• Credential isolation: SP-API credentials are scoped per tenant (seller account) and loaded only when required for an authorized API call.
• Password hashing: Account passwords are salted and hashed; never stored or logged in plain text.
• Access control: Production systems restricted to authorized personnel with two-factor authentication. All administrative actions are logged.
• Data minimization: We fetch only the SP-API resources needed to produce the requested functionality and avoid retaining Personally Identifiable Information (PII) about Amazon buyers.
• Incident response: In the event of a data incident affecting Amazon data, we will notify Amazon and affected sellers within 24 hours, as required by Amazon’s Data Protection Policy.

5. Amazon Data Protection Policy (DPP), Acceptable Use Policy (AUP), and Solution Provider Agreement Compliance

ZW Technology operates in full compliance with the Amazon SP-API Data Protection Policy, the Acceptable Use Policy, and the Amazon Developer Solution Provider Agreement. In particular:

• We process Amazon Information only for the authorized use cases described in Sections 2 and 3.
• We do not use Amazon Information to compete with Amazon or with Amazon sellers outside of the services explicitly authorized by the seller.
• We do not combine Amazon Information with data from other sources to create buyer profiles.
• We do not use Brand Analytics data to target, contact, or identify individual Amazon buyers.
• We retain Amazon Information only for as long as necessary to provide the services (see Section 7) and delete it on seller request or upon account termination.
• All subprocessors (hosting, backup, email) are bound by contractual obligations that meet or exceed the DPP requirements.
• We maintain an internal data-security program, access logs, and annual security review.

6. Data Sharing and Disclosure

• With Your Consent: When you explicitly authorize sharing for a specific integration.
• Service Providers: Trusted infrastructure providers (cloud hosting, backup, transactional email) bound by confidentiality and data-protection agreements.
• Amazon: Through official SP-API / Advertising / Attribution API calls to fulfill your requests.
• Legal Requirements: When required by law, regulation, or legal process.
• Business Transfers: In connection with a merger, acquisition, or sale of assets, with prior notice to you.

7. Data Retention

We retain your account data for as long as your account is active. Cached Amazon report data is retained up to 13 months for historical analytics; Brand Analytics report data is retained up to 4 weeks unless you explicitly pin a report. Upon account termination or seller request, we delete Amazon data within 30 days.

8. Your Rights

• Access: Request a copy of the data we hold about you.
• Correction: Request correction of inaccurate data.
• Deletion: Request deletion of your account and data.
• Portability: Request your data in a machine-readable format.
• Revoke Access: Revoke SP-API / Advertising / Attribution authorization at any time from Amazon Seller Central → Apps & Services → Manage Your Apps.

9. Cookies

Our website uses essential cookies to maintain session state and language preference. We do not use third-party advertising cookies. You can control cookie settings through your browser preferences.

10. International Data Transfers

Your data may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place in accordance with applicable data-protection laws and Amazon’s regional DPP requirements.

11. Children’s Privacy

Our Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be announced via in-product notice and by updating the "Last Updated" date above.

13. Contact Us

Questions, data requests, or incident reports:

ZW TECHNOLOGY LIMITED
Shenzhen, Guangdong, China
Email: ad@zhanwangtech.com
Website: www.zhanwangtech.com

14. Trademarks

Amazon, Amazon Seller Central, Amazon Selling Partner API (SP-API), Amazon Advertising, Sponsored Products, Sponsored Brands, Sponsored Display, Amazon DSP, Amazon Marketing Cloud, Brand Analytics, Amazon Haul, Amazon Business, Fulfillment by Amazon (FBA), Amazon Warehousing & Distribution (AWD), Amazon Logistics, and all related logos and trademarks are trademarks of Amazon.com, Inc. or its affiliates. ZW TECHNOLOGY LIMITED is an independent third-party software provider and is not affiliated with, endorsed by, or sponsored by Amazon.com, Inc.