Privacy policy

Scope and our role

This policy covers the 互拓ERP website, inquiries, account and workspace services, and Amazon business information processed with seller authorization. Business customers are responsible for the lawfulness of the information and member authorizations they provide. We process information for the applicable service, valid customer instructions and applicable rules.

Browsing does not require registration or store access. An authorized representative connects a store separately through official Amazon OAuth. A website visit or inquiry email does not authorize store access.

Account, contact and access records

Inquiries and support may include your name, company, email address, description and necessary attachments. Account and workspace services involve account identifiers, necessary contact details, company and membership relationships, business roles, subscription status, login security records and operation records.

Hosting services may process IP addresses, access times, request paths, browser information and necessary logs for page delivery, troubleshooting and security. We do not ask you to send seller passwords, authorization tokens or buyer personal information by ordinary email.

Authorized business information

Amazon information includes Seller and marketplace identifiers, existing listings and product mappings, orders and after-sales records without buyer contact details, FBA inventory, fees, settlements and inbound shipment information needed for authorized FBA workflows. Customer-maintained records include SKUs, suppliers and necessary business contacts, purchase orders, receipts, local inventory, costs, exchange rates and imported expenses.

互拓ERP does not request access to buyer personal information or retrieve, store, display, search, export or log Amazon buyer names, addresses, phone numbers or emails. Store credentials are separately protected on the server. Advertising expenses can be imported; optional read-only Ads API information is processed only when separately enabled and authorized.

Purposes of processing

Necessary information supports workspace access, membership and subscription verification, authorized synchronization, product matching, order and inventory views, profit and replenishment calculations, purchasing and receiving workflows, and FBA inbound actions explicitly confirmed by an authorized user.

Contact details support inquiries, service assistance and security or data requests. Necessary security and audit records support permission checks, recovery, abuse prevention and operation tracing. Amazon information is used for the authorized business purpose, not sold, used to build advertising audiences or disclosed to other customers.

Cookies and browser information

This static website sets no analytics, advertising or tracking cookies, uses no browser local storage and embeds no third-party analytics scripts. Contact links open an email application; you decide whether to send a message.

ERP account services use authentication information necessary for login and session security. Third-party websites and email services have their own privacy rules. Review those rules when you use their services.

Storage and safeguards

Workspace isolation and business permissions govern reads, writes, exports and background tasks. Long-lived store credentials are encrypted on the server. Pages, ordinary exports and logs do not expose usable plaintext credentials. Important operations retain necessary security audit summaries.

We apply access controls, transmission and storage safeguards, recovery measures and incident procedures appropriate to the risks. Authorized personnel access information only for necessary duties. Protect your account and promptly report suspected unauthorized access.

Sharing and service providers

Cloud infrastructure, identity and subscription, email or technical support providers may process the information needed to deliver the service. We require providers to protect information for the agreed purpose. Workspace members receive access according to the customer’s authorization and business permissions.

Confirmed external actions, such as FBA inbound, transmit necessary operation data to Amazon. We verify legally required disclosure requests and limit their scope. Changes of ownership or purpose do not by themselves authorize broader processing of personal information except as permitted or required by applicable law.

Providers and processing locations

Website hosting, ERP infrastructure and email may use different providers. Contact our privacy email for the storage locations, providers and processing arrangements applicable to your service. The public inquiry address uses Outlook email; sending a message involves processing by the relevant mail providers for delivery.

Where cross-border processing requires specific notices, consent or other procedures, we follow the applicable requirements. Website language and supported Amazon marketplaces do not identify the location of data storage.

Retention, revocation and deletion requests

We retain information only as needed for stated service purposes or applicable legal obligations. Website records, inquiries and account information are deleted when those purposes end and no necessary retention basis remains. Contact our privacy email for access, correction, return or deletion requests.

Amazon deletion deadline: subject to legally required retention below, we will permanently and securely delete applicable Amazon information within 30 calendar days of the earliest of: Amazon requesting deletion; a customer revoking authorization, ending the service or otherwise removing access; our determining that we lack authority to access or process the information; or our participation in the relevant Amazon services ending or expiring. Access stops when authorization is lost. Verification, renewal or account freezing does not extend this deadline.

Deletion covers source records, derived records containing the information, reports, exports, caches, copies and live or network-accessible instances. Applicable backup information is also removed or made unrecoverable through secure disposal, preventing restoration of deleted information. We follow applicable industry sanitization standards, such as NIST SP 800-88, and provide written deletion confirmation when Amazon requests it.

Required retention is limited to the minimum information needed for an applicable legal, tax or regulatory obligation. We record its basis, scope and period, restrict access and purpose, and securely delete it when that basis expires. Ordinary commercial arrangements or possible future renewal do not justify indefinite retention of Amazon information.

Customer-provided purchasing, receiving and local inventory records containing no Amazon information follow their service purpose, valid processing arrangements and applicable legal obligations. Amazon information in mixed records remains subject to the rules above. Store credential destruction after unlinking, formal cancellation, revocation or a confirmed security incident is handled separately from business-information deletion.

Email xiamenbaiyilai@outlook.com with the request type and relevant workspace. We verify necessary identity and authority and explain the outcome or applicable retention basis. Earlier deadlines imposed by law or Amazon take precedence.

Your choices and rights

Subject to applicable law, you may request access, a copy, correction, deletion or restricted processing, withdraw consent, and raise questions or complaints. Requests involving company workspace records require appropriate company authorization to protect other members and customers.

Manage seller authorization through Amazon’s official channels. Revocation affects synchronization and operations that rely on that authorization, without changing the lawfulness of earlier processing. Email the privacy contact on this page with the request type and scope. We verify necessary identity information, handle the request and respond.

A business service

互拓ERP serves businesses and their authorized representatives, not children. Do not submit information about minors unrelated to the business service. Contact our privacy email if such information is submitted by mistake.

Updates and contact

The update date appears on this page. We provide appropriate notice of material changes to purposes, information scope or important rights, and obtain consent where required. Contact 厦门佰亿莱网络科技有限公司 at xiamenbaiyilai@outlook.com for privacy and security matters.