Amazon SP API Terms and Data Use Addendum

Customer terms for Selling Partners and Vendors using the Inverge Amazon integration

These terms govern a customer’s use of Inverge services that connect to the Amazon Selling Partner API or other authorized Amazon services. They supplement the customer’s applicable Inverge order form, subscription agreement, and general terms. If these terms conflict regarding Amazon information, this addendum controls for that information.

1 Definitions

Amazon Information. Information obtained through an authorized Amazon service, including order, listing, inventory, settlement, and buyer or recipient information.

Amazon PII. Amazon Information that identifies or can reasonably be linked to an individual, including names, delivery addresses, phone numbers, and email addresses when provided.

Customer. The Selling Partner, Vendor, or other organization that authorizes its Amazon account for use with Inverge.

Authorized User. A person whom Customer permits to access its Inverge tenant for a legitimate business purpose.

2 Scope of the Amazon services

Inverge provides customer-directed functions for connecting an Amazon account, synchronizing enabled catalog and inventory data, retrieving and managing orders, supporting shipment and return workflows, and producing operational or accounting reports. Available functions depend on the customer’s subscription and configuration and are described in the Inverge Amazon Integration Functionality Guide.

3 Customer authorization and instructions

Customer authorizes Inverge to access and process Amazon Information solely to provide the configured services. Customer represents that it has authority to connect the Amazon account and instruct Inverge to process the information. Customer may revoke the Amazon authorization, disable a workflow, or terminate the service subject to applicable contractual obligations.

4 How Inverge uses Amazon Information

Inverge processes Amazon Information only as necessary to provide, secure, maintain, and support the customer-selected services and to comply with applicable law and Amazon requirements. Permitted purposes include:

• Authenticating and maintaining the customer’s Amazon connection.
• Publishing or synchronizing customer-authorized catalog, listing, price, and inventory data.
• Retrieving, presenting, and processing the customer’s orders, cancellations, returns, and shipment status.
• Using the minimum required Amazon PII to route and fulfill an order, obtain shipping rates, create a label, and provide tracking information.
• Processing settlement and financial information for reconciliation, accounting, and customer reporting.
• Detecting security events, preventing abuse, troubleshooting, and maintaining service reliability without placing Amazon PII in application or security logs.

5 Prohibited uses

Inverge does not sell Amazon Information, use it for interest-based advertising, create profiles for unrelated purposes, expose one customer’s information to another customer, or use buyer PII for marketing. Customer and its Authorized Users must not use, export, disclose, or retain Amazon Information for any purpose prohibited by law, Amazon policy, or this addendum.

6 Sharing and subprocessors

Inverge discloses Amazon Information only when required to provide the customer-directed service, when the customer instructs Inverge to do so, or when required by law. The principal transfer categories are:

Inverge evaluates service providers before use and periodically thereafter based on the provider’s role and risk. A current list or additional information is available from support@invergehq.com.

7 Security and access controls

Inverge maintains administrative, technical, and physical safeguards appropriate to the sensitivity of Amazon Information. These include encryption in transit and at rest, multi-factor authentication for administrative access, least-privilege role-based access, logging and monitoring, vulnerability and malware controls, tested tenant isolation, change management, incident response, backups, and personnel confidentiality obligations. No security measure eliminates all risk, but Inverge maintains controls designed to protect confidentiality, integrity, and availability.

8 Retention deletion and return

Amazon PII is retained only for the period necessary to complete the permitted transaction and is redacted after 20 days, with a maximum retention of 30 days unless a longer period is required by law. Encrypted backups are retained for 10 days and expire through normal backup rotation. Upon a valid deletion request or termination, Inverge deletes or renders inaccessible Amazon Information according to its documented deletion process and applicable Amazon requirements. Operational records that do not contain Amazon PII may be retained for legitimate accounting, security, legal, and service purposes.

9 Customer responsibilities

• Limit access to Authorized Users with a current business need and promptly remove access when that need ends.
• Maintain accurate account information, protect credentials, and use multi-factor authentication where provided or required.
• Use Amazon Information only for permitted commerce and fulfillment purposes.
• Configure shipping providers and other customer-directed integrations only when authorized to transmit the necessary data.
• Notify Inverge promptly of suspected unauthorized access, misuse, or disclosure.

10 Incidents and cooperation

Inverge maintains an incident response process and will investigate confirmed or suspected unauthorized access to Amazon Information. Inverge will notify affected customers as required by applicable law, contract, and Amazon requirements and will provide reasonable information needed for the customer’s response obligations.

11 Suspension and termination

Inverge may suspend the Amazon integration when necessary to protect Amazon Information, address misuse, comply with Amazon instructions or law, or respond to a security risk. When the service ends, the customer’s authorization to access Amazon services through Inverge ends, and retained Amazon Information is handled under Section 8.

12 Changes and contact

Inverge may update this addendum to reflect changes in the service, law, or Amazon requirements. Material changes will be communicated through the service, customer notice, or publication with a revised effective date. Questions, security notices, or deletion requests may be sent to support@invergehq.com. The public Amazon privacy notice is available at https://invergehq.com/amazon-privacy-data-handling/.

13 Acceptance

By authorizing an Amazon account for use with Inverge, accepting this addendum through an Inverge contracting or electronic acceptance process, or continuing to use the Amazon integration after receiving an updated addendum, Customer acknowledges and agrees to these terms. Inverge records the applicable version and acceptance information in its customer or contracting records.