Amazon Data Protection Policy

This Amazon Data Protection Policy describes how WEB3 TREK, INC., operator of TrekO.ai, protects Amazon Information accessed through the Amazon Selling Partner API (SP-API).

1. Purpose

The purpose of this policy is to ensure that Amazon Information is accessed, used, stored, protected, retained, and deleted in accordance with Amazon's Acceptable Use Policy, Data Protection Policy, and applicable SP-API security requirements.

2. Scope

This policy applies to all Amazon Information accessed, processed, stored, or transmitted by WEB3 TREK, INC. through TrekO.ai marketplace integrations, including seller account information, product listing information, pricing information, inventory information, order-related information, OAuth authorization tokens, and associated security credentials.

3. Authorized Use

TrekO.ai accesses Amazon Information only after an authorized Amazon seller grants permission through Amazon's approved OAuth authorization process. Amazon Information is used solely to provide requested marketplace integration services, including:

• Creating and managing Amazon product listings.
• Synchronizing inventory across supported marketplaces.
• Synchronizing pricing information.
• Monitoring listing status.
• Managing multi-channel marketplace operations.
• Supporting seller account management within TrekO.ai.

4. Prohibited Use

Amazon Information is never sold, rented, transferred, licensed, or used for unrelated purposes.

WEB3 TREK, INC. does not use Amazon Information for advertising, marketing, profiling, data brokerage, or any purpose not expressly authorized by the seller.

5. Access Control

Access to Amazon Information is restricted to authorized personnel, systems, and services with a legitimate business need. Administrative access is limited, monitored, and reviewed on a regular basis.

• Access follows the principle of least privilege.
• Role-based permissions are utilized whenever practical.
• Multi-Factor Authentication (MFA) is enabled where supported.
• Access permissions are reviewed periodically.
• Unnecessary access is removed promptly.

6. Credential and Token Protection

Amazon access tokens, refresh tokens, OAuth credentials, API keys, client secrets, and related authentication information are treated as confidential security information.

• Secrets are stored using protected environment variables or approved secure storage.
• Secrets are never intentionally committed to public repositories.
• Credentials are rotated if compromise is suspected.
• OAuth tokens are revoked when sellers disconnect Amazon from TrekO.ai.

7. Encryption

Amazon Information is protected during transmission using HTTPS/TLS. Secure encrypted communication is required between TrekO.ai, Amazon SP-API, cloud infrastructure, and approved marketplace integrations.

8. Data Retention

Amazon Information is retained only for as long as necessary to provide requested marketplace integration services, comply with legal obligations, maintain security, resolve operational issues, or support authorized seller activities.

Information no longer required is securely deleted, anonymized, or otherwise disposed of using appropriate security practices.

9. Data Deletion

Authorized sellers may request deletion of Amazon-related information associated with their TrekO.ai account by contacting: support@treko.ai.

WEB3 TREK, INC. will verify the request and delete or anonymize applicable Amazon Information unless retention is required by law, security obligations, or legitimate operational requirements.

10. Third-Party Sharing

WEB3 TREK, INC. does not sell, share, or disclose Amazon Information to unauthorized third parties.

Amazon Information may be processed only by approved service providers necessary for operating TrekO.ai, including secure cloud infrastructure, authentication services, and payment processing providers when applicable.

11. Monitoring and Logging

Authentication events, API activity, administrative actions, system access, and security-related events may be logged to support:

• Security monitoring.
• Fraud prevention.
• Operational troubleshooting.
• Incident investigations.
• Compliance with Amazon SP-API requirements.

12. Incident Response

If WEB3 TREK, INC. determines that a security incident involves Amazon Information or Amazon Selling Partner API data, Amazon will be notified at security@amazon.com within twenty-four (24) hours of confirmation in accordance with Amazon's SP-API Data Protection Policy.

Incidents are investigated, documented, contained, remediated, and reviewed in accordance with the TrekO.ai Incident Response Policy.

13. Policy Review

This Amazon Data Protection Policy is reviewed at least once every six (6) months and updated whenever significant operational, technical, security, marketplace, or regulatory changes occur.

14. Compliance

WEB3 TREK, INC. is committed to protecting Amazon Information and maintaining security practices consistent with Amazon's Acceptable Use Policy, Amazon's Data Protection Policy, Amazon Selling Partner API requirements, and recognized industry security practices.

15. Contact

Questions regarding this Amazon Data Protection Policy may be directed to:

WEB3 TREK, INC.
Email: support@treko.ai
Website: https://treko.ai