Privacy Policy

1. Introduction

Shenzhen Huatian Power Technology Co., Ltd. is a technology company specializing in Amazon seller tools and AI-powered customer service solutions. This Privacy Policy applies to all information collected through our website, products, services, and Amazon SP-API integrations.

By using our services, you agree to the collection and use of information in accordance with this policy. We are committed to complying with applicable data protection laws, including the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and Amazon's Data Protection Policy (DPP) requirements.

2. Data Collection

2.1 Information You Provide Directly

When you use our services, you may voluntarily provide us with the following information:

• Account Information: Name, company name, email address, phone number, and account credentials
• Contact Form Data: Inquiry details, business requirements, and communication preferences
• Product Trial Applications: Enterprise information, business needs descriptions, and usage scenarios
• Technical Support Requests: Issue descriptions, system environment information, and relevant log files

2.2 Amazon Seller Data via SP-API

When you authorize our application to access your Amazon Seller account through the Amazon Selling Partner API (SP-API), we collect only the minimum data necessary to provide AI-powered customer service automation:

• Seller Account Data: Seller ID, marketplace information, and store configurations (for authentication and service setup)
• Messaging Data: Buyer-seller message content, conversation threads, and message metadata (for AI auto-reply and message management)
• Order Data: Order details and fulfillment status (for order-related customer inquiries only)
• Product Catalog Data: Product listings and descriptions (for product-related customer inquiries only)

We do not collect any financial information, inventory data, pricing data, sales reports, business analytics, or any data beyond what is required for customer service message automation.

2.3 Automatically Collected Information

When you visit our website or use our services, we automatically collect the following information:

• Usage Data: IP address, browser type and version, operating system, and device information
• Service Logs: Access times, pages visited, session duration, and click behavior

2.4 Cookies and Tracking Technologies

We use cookies and similar tracking technologies on our website. A cookie is a small text file stored on your device when you visit a website. We use the following types of cookies:

Third-Party Cookies: We do not use third-party advertising cookies or share cookie data with third-party advertisers. We may use first-party analytics tools to understand website usage patterns. No personal data from cookies is shared with Amazon or any other third party.

Your Choices: You can control and manage cookies through your browser settings. Most browsers allow you to block or delete cookies. Please note that blocking strictly necessary cookies may affect website functionality. To learn more about managing cookies, visit your browser's help documentation.

3. Data Use

We use the collected personal information for the following purposes:

• Service Provision: To provide, maintain, and improve our products and services, including Amazon SP-API integrations
• Customer Communication: To respond to your inquiries and provide technical support and after-sales service
• Service Improvement: To analyze user behavior data and optimize product functionality and user experience
• Compliance Requirements: To meet legal, regulatory, and contractual obligations, including Amazon DPP requirements
• Security: To detect, prevent, and address fraud, abuse, and security issues
• Marketing Activities: To send product updates, promotional offers, and relevant information (only with your consent)

We will not use your data for purposes incompatible with those described above without first obtaining your consent.

4. Data Storage

We store your data securely in accordance with industry best practices and applicable legal requirements:

• Storage Location: Data is stored on secure servers located in data centers with SOC 2 and ISO 27001 certifications. Primary data centers are located in China, with backup facilities in other regions as needed.
• Retention Period: We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required by law. Specifically, all Personal Identifiable Information (PII) obtained through Amazon SP-API — including buyer names, addresses, contact information, and order details — is permanently deleted within 30 days after the related order is completed or fulfilled. Upon service termination or revocation of API access, all SP-API data is deleted within 30 days.
• Encryption at Rest: All stored data is encrypted using AES-256 encryption standards.
• Data Minimization: We collect only the minimum amount of data necessary to provide our services effectively.
• Data Backup: Regular encrypted backups are maintained to ensure data availability and integrity.

5. Data Protection

We implement comprehensive security measures to protect your personal information:

• Encryption in Transit: All data transmitted between your browser and our servers is protected using TLS/SSL encryption.
• Encryption at Rest: Sensitive data stored in our systems is encrypted using AES-256 encryption.
• Access Controls: Strict role-based access control (RBAC) and multi-factor authentication (MFA) mechanisms limit access to authorized personnel only.
• Security Audits: Regular security assessments, vulnerability scans, and penetration tests are conducted by independent third parties.
• Employee Training: All employees receive regular training on data security and privacy protection.
• Incident Response: We maintain a documented incident response plan to address any security breaches promptly. Affected users and Amazon will be notified in accordance with applicable requirements.
• Amazon DPP Compliance: Our security practices meet or exceed Amazon's Data Protection Policy requirements, including annual security assessments and penetration testing.

6. Data Sharing

We do not sell your personal information. We may share your information only under the following circumstances:

• Service Providers: We may share necessary information with trusted partners who provide technical support, data analytics, payment processing, and other services on our behalf. All service providers are bound by data processing agreements.
• Legal Requirements: We may disclose information when required by law, legal proceedings, or government requests.
• Business Transfers: Information may be transferred in connection with mergers, acquisitions, or asset sales, with appropriate safeguards in place.
• Safety and Security: Information may be shared to protect the legitimate rights and interests of the Company, our users, and the public.

Amazon SP-API Data Handling

Regarding data obtained through Amazon SP-API:

• We will never sell, share, or disclose Amazon SP-API data to any third party except as necessary to provide the authorized services.
• Amazon SP-API data is processed exclusively for the purpose of providing the services you have authorized.
• We do not use Amazon SP-API data for marketing, advertising, or any purpose unrelated to the authorized service.
• Upon termination of our services or revocation of API access, we will delete all Amazon SP-API data in accordance with our data deletion procedures.

6A. Amazon SP-API Data Commitment

As an application developer integrating with Amazon Selling Partner API (SP-API), we are committed to full compliance with Amazon's Data Protection Policy (DPP). The following principles govern all SP-API data handling:

Purpose Limitation

All data obtained through Amazon SP-API is used exclusively for providing AI-powered customer service automation on behalf of the seller. This includes automated message responses, order status inquiries, and product-related customer support. We do not use SP-API data for marketing, advertising, profiling, resale, or any purpose unrelated to the authorized customer service functions.

We do not use Amazon SP-API data for any form of data mining, data profiling, or advertising purposes. All data processing is strictly limited to the customer service automation functions you have explicitly authorized.

Minimum Necessary Data

We only access the minimum data necessary to provide our AI customer service functionality. Specifically, we request API permission scopes limited to:

• Messaging: Read and respond to buyer-seller messages
• Orders: Read order information to provide context-aware customer support
• Listings: Read product information to assist with product-related inquiries

We do not request access to any data categories beyond what is required for these stated purposes. Our API permission scopes are directly aligned with the business functions we provide.

No Sharing or Selling of Seller / Buyer Data

We never share, sell, rent, or otherwise disclose any Amazon seller data or buyer data obtained through SP-API to any third party. This includes but is not limited to:

• Seller identity, store information, or business metrics
• Buyer names, addresses, contact information, or purchase history
• Message content between buyers and sellers
• Order details, financial data, or inventory information

SP-API data is used exclusively to deliver the services you have authorized and is never used for advertising, marketing, profiling, or any unrelated purpose.

Amazon DPP Compliance

Our data handling practices are designed to meet or exceed Amazon's Data Protection Policy requirements:

• All SP-API data is encrypted in transit (TLS 1.2+) and at rest (AES-256)
• Access to SP-API data is restricted to authorized personnel with a legitimate business need
• We maintain audit logs of all SP-API data access
• We undergo regular security assessments and penetration testing
• Upon service termination or access revocation, all SP-API data is permanently deleted within 30 days
• We report security incidents affecting SP-API data to Amazon within the required timeframe

7. Data Deletion

You have the right to request the deletion of your personal data. Here is how the process works:

7.1 How to Request Deletion

You may request deletion of your data by:

• Sending an email to support@ht9000.com with the subject line "Data Deletion Request"
• Contacting us by phone at +86 13927472318
• Submitting a request through our contact form

7.2 Response Timeframe

• We will acknowledge your request within 3 business days.
• We will complete the deletion process within 30 days of verifying your identity.
• For Amazon SP-API data deletion requests, we will comply within the timeframe specified by Amazon's Data Protection Policy.

7.3 Exceptions

We may retain certain data where required by law, for legitimate business purposes (e.g., fraud prevention), or to fulfill legal obligations. In such cases, we will inform you of the specific reason and the expected retention period.

8. User Rights

Under applicable data protection laws, including GDPR and CCPA, you have the following rights:

• Right of Access: You have the right to request access to the personal information we hold about you.
• Right of Correction: You have the right to request correction of inaccurate or incomplete personal information.
• Right of Deletion: Under certain conditions, you have the right to request the deletion of your personal information.
• Right to Restrict Processing: You have the right to request that we restrict the processing of your personal information.
• Right to Data Portability: You have the right to receive your personal information in a structured, commonly used, and machine-readable format.
• Right to Object: You have the right to object to data processing based on legitimate interests.
• Right to Withdraw Consent: You have the right to withdraw previously given consent at any time.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your privacy rights (CCPA).

9. Children's Privacy

Our services are not directed to children under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have inadvertently collected personal information from a child under 16, we will take immediate steps to delete such information from our records.

If you are a parent or guardian and believe that your child has provided us with personal information, please contact us at support@ht9000.com so that we can take appropriate action.

10. Contact Us

If you have any questions, concerns, or suggestions regarding this Privacy Policy or our data practices, please do not hesitate to contact us:

• Company: Shenzhen Huatian Power Technology Co., Ltd.
• Email: support@ht9000.com
• Phone: +86 13927472318
• Address: Building 14, Room 104, Taoyuancun, Xili Longzhu Avenue, Nanshan District, Shenzhen, Guangdong, China

We are committed to working with you to resolve any privacy-related concerns promptly and fairly.