Amazon Privacy & Data Handling
How Inverge uses shares retains and protects Amazon information
This notice explains Inverge Incorporated's processing of information obtained through a customer's authorized Amazon connection. It is written for Amazon Selling Partners, Vendors, their Authorized Users, and individuals whose information may appear in an Amazon order. It supplements the general Inverge Privacy Policy and the Amazon SP API Terms and Data Use Addendum.
1 Who controls the information
The Amazon Selling Partner or Vendor that connects its account to Inverge determines why its Amazon order and customer information is processed. Inverge processes that information as a service provider to that customer and follows the customer's permitted instructions, applicable law, and Amazon requirements. Routine order processing and customer support are performed by the customer's authorized personnel, not Inverge personnel.
2 Information received and processed
| Category | Representative information | Why it is used |
|---|---|---|
| Account and store | Amazon store identifiers, authorization identifiers, connection and synchronization status | Connect the correct Amazon store to the correct Inverge tenant and maintain the integration. |
| Catalog and inventory | SKU, listing, product, price, quantity, and availability data | Publish or synchronize customer-authorized catalog and inventory information. |
| Orders | Amazon order identifiers, order number, line items, status, dates, amounts, taxes, discounts, and shipping service | Import, display, route, fulfill, cancel, return, reconcile, and report on customer orders. |
| Buyer and recipient PII | Name, company, delivery or billing address, city, state, postal code, country, phone or mobile number, and email when Amazon provides it | Fulfill the transaction, provide required customer service, process a return, and meet legal obligations. |
| Shipping | Recipient and address data, package details, carrier service, label and tracking information | Obtain rates, select a customer-directed shipping service, create a label, and report tracking. |
| Financial and settlement | Order totals, fees, settlement, return, and reconciliation data | Accounting, reconciliation, return processing, and customer reporting. |
3 How Amazon information is used
Inverge uses Amazon Information only to provide and protect the customer-selected Amazon integration. The principal uses are account connection, catalog and inventory synchronization, order and return management, fulfillment and shipping, settlement reconciliation, reporting, support, fraud and abuse prevention, and service security. Inverge does not sell Amazon Information, use buyer PII for advertising, or combine it across unrelated customers for profiling.
4 Who can access the information
- Authorized customer users can access only information belonging to their organization's tenant and only as permitted by their assigned role.
- A limited number of authorized Inverge administrators may access information when necessary for security, maintenance, incident response, or customer-requested support. Administrative access is logged and protected by multi-factor authentication.
- Other Inverge customers cannot access the information. Tenant isolation is implemented and tested.
5 Sharing and transfers
Inverge shares only the minimum information required for the following purposes:
| Recipient | Information and mechanism | Purpose |
|---|---|---|
| FedEx and UPS | Minimum shipment data through authenticated encrypted HTTPS APIs | Customer-selected rates, labels, shipment processing, and tracking. |
| Endicia | Minimum shipment data through an authenticated encrypted HTTPS API | Customer-selected postage, labels, shipment processing, and tracking. |
| Amazon Web Services | Encrypted application data and infrastructure telemetry within managed cloud services | Hosting, storage, backup, monitoring, and security operations. |
| Legal recipients | Information limited to the lawful request | Comply with law or protect legal rights, security, and users. |
Shipping providers do not receive direct access to the Inverge application or unrelated tenant data. Inverge reviews third parties based on risk before use and periodically thereafter.
6 Security safeguards
- Encryption in transit using TLS and encryption at rest using managed cloud encryption and key management.
- Least-privilege role-based access, multi-factor authentication for administrative access, and logged administrative activity.
- Tested tenant isolation, network protections, web application firewall controls, malware protection, vulnerability management, and security monitoring and alerting.
- Change management, backup, incident response, and personnel confidentiality controls.
- Application and security logs designed not to contain Amazon buyer PII.
7 Retention and deletion
Amazon PII is kept only as long as needed for the permitted order workflow. Inverge redacts Amazon PII after 20 days and does not retain it beyond 30 days unless a longer period is required by law. Encrypted backups are retained for 10 days and expire through normal rotation. Non-PII operational and accounting records may be retained as needed for security, reconciliation, legal, and service purposes. Valid deletion requests are handled under Inverge's documented deletion process and applicable Amazon requirements.
8 Choices requests and account disconnection
A customer administrator may disconnect the Amazon integration or contact Inverge to request assistance, access information, or initiate deletion subject to contractual, legal, and Amazon requirements. Individuals may submit a deletion request at https://invergehq.com/data-deletion-request/ or email support@invergehq.com. Inverge may need to verify identity and coordinate the request with the relevant Selling Partner or Vendor.
9 Changes to this notice
Inverge may update this notice to reflect changes in services, subprocessors, law, or Amazon requirements. The current version is published at https://invergehq.com/amazon-privacy-data-handling/ with its effective date. Material changes will be communicated through the service, direct customer notice, or an updated published notice as appropriate.
10 Contact
Inverge Incorporated 1220 Ulster Avenue B Kingston, NY 12401 support@invergehq.com https://invergehq.com/amazon-privacy-data-handling/
Ready for a walkthrough?
Inverge is a platform with the solutions to unlock your business’ potential and the power to scale with you. If you’re ready to see how we customize to your unique retail needs, enter your email for immediate access to a short walkthrough.
