Privacy Policy

This Privacy Policy describes how Foshan Dajiao Riji Bags & Clothing Co., Ltd. ("we", "us", or "our"), operator of the XYJG (汐雅橘光) cross-border commerce data platform (the "Service"), collects, uses, stores, and protects information when sellers authorize our application through the Amazon Selling Partner API ("SP-API").

1. Information We Collect

When a selling account authorizes our application via Amazon's OAuth flow, we access and store only the data required to deliver the Service:

• Order information — order identifiers, item SKUs, quantities, order status, and fulfillment channel (FBA/FBM), retrieved through non-restricted SP-API roles.
• Inventory information — FBA inventory summaries (fulfillable, inbound, reserved, unfulfillable quantities).
• Authorization artifacts — OAuth refresh tokens issued by Amazon Login with Amazon (LWA), stored in encrypted form.
• Account information — the seller account identifiers and marketplace IDs needed to maintain the connection.

We do not request or store Restricted Data. The current version of the Service uses non-restricted roles only. We do not access, request, or retain buyer personally identifiable information (PII) such as buyer names, shipping addresses, or phone numbers. Should the functional scope change in the future, we will update this Policy and complete Amazon's required review before enabling such features.

2. How We Use Information

• Synchronizing orders and inventory on a scheduled basis (default every 15 minutes) to provide consolidated sales and inventory dashboards.
• Maintaining per-store authorization status, synchronization logs, and audit records for operational troubleshooting.
• Providing customer support and ensuring the security of the Service.

We use Amazon Information solely to provide the authorized Service. We do not sell Amazon Information, and we do not use it for advertising, marketing, or any purpose unrelated to the Service.

3. Data Sharing and Disclosure

We do not share Amazon Information with third parties except:

• Service providers acting on our behalf (e.g., cloud hosting), bound by confidentiality obligations and limited to what is necessary to operate the Service;
• When required by law, regulation, or valid legal process.

4. Data Security

• All data is transmitted over HTTPS (TLS) encrypted connections.
• OAuth refresh tokens are encrypted at rest using AES-256-GCM.
• Access to the Service is role-based; administrative actions are recorded in audit logs.
• Each selling account's data is logically isolated; store connections can be individually disabled or revoked.

5. Data Retention and Deletion

• We retain synchronized order and inventory data while the corresponding store authorization remains active.
• A store connection may be deactivated at any time from within the Service or by contacting us.
• Upon revocation of authorization or a deletion request, we delete the associated stored data and credentials within 30 days, except where retention is required by law.
• Amazon Information is deleted or otherwise rendered inaccessible when it is no longer necessary for the purpose for which it was collected, consistent with Amazon's Data Protection Policy.

6. Your Rights

You may request access to, correction of, or deletion of your data, or revoke a store's authorization, at any time by contacting us at +86 158 2067 3070. We respond to verified requests within five business days.

7. International Transfers

Data is processed on servers located in the United States and may be accessed from China for operational purposes, with the safeguards described in this Policy applied regardless of location.

8. Changes to This Policy

We may update this Policy from time to time. Material changes will be announced on this page with an updated effective date before they take effect.

9. Contact Us

For privacy questions, data access, or deletion requests, contact:
Foshan Dajiao Riji Bags & Clothing Co., Ltd. — +86 158 2067 3070