Privacy Policy
Last updated: 15 October 2026
Company: Tech-Magnet LLC
Address: 325 N St. Paul Street, Suite 3100, Dallas, TX 75201, USA
Privacy Contact: privacy@tech-magnet.com
Security Contact: security@tech-magnet.com
1. Scope
This Privacy Policy describes how Tech-Magnet LLC collects, processes, stores, uses, protects, shares, and deletes buyer and order information obtained through the Amazon Selling Partner API (SP-API).
It applies to our websites, applications, integrations, and internal business systems that handle Amazon Information.
2. Information We Collect
We collect only the Amazon Information necessary for permitted business operations, which may include:
Buyer name
Shipping and delivery address
Telephone number
Email address, when provided and permitted
Amazon order identifiers
Product details, quantities, prices, and order status
Shipping methods, tracking details, and fulfillment status
Security and operational event information that excludes Amazon customer PII unless legally required
We follow the principle of data minimization.
3. Purpose of Processing
Amazon Information is processed only for authorized business and fulfillment activities, including:
Importing and managing Amazon orders
Preparing packing slips and shipping labels
Processing shipments and dispatch instructions
Tracking delivery status
Supporting customer returns and order-related inquiries
Maintaining necessary accounting and legally required records
Providing operational reporting and system support
Amazon buyer information is not used for unrelated advertising, marketing profiling, or unauthorized commercial purposes.
4. Lawful and Authorized Use
Amazon Information is accessed and processed only through approved SP-API permissions and authorized application workflows.
Employees and services can access only the information necessary to perform their assigned responsibilities.
We do not sell Amazon buyer information.
5. Data Sharing and Subprocessors
Amazon buyer and order information is not sold, rented, or shared with advertising or marketing organizations.
Authorized infrastructure and security services may process information where necessary to operate and protect our applications.
Our approved cloud infrastructure includes Microsoft Azure services for:
Application hosting
Database and secure storage
Encrypted backup and recovery
Key and secret management
Security monitoring and incident detection
Amazon Information is not disclosed to unauthorized third parties.
6. Data Hosting and Residency
Our primary application processing and storage operate within Microsoft Azure infrastructure in the United States.
The primary hosting region includes Azure US East 2, with geographically separated backup and disaster-recovery arrangements.
Access to protected data is restricted through approved network controls and individual authorization.
7. Data Security and Encryption
We maintain technical and organizational security measures to protect Amazon Information.
These include:
TLS 1.2 or higher for protected network communications
AES-256 encryption at rest for applicable databases, storage, and backups
Azure Key Vault for secure management of encryption keys and application secrets
Azure firewall and network access restrictions
Non-public database access
Role-based access control
Multifactor authentication for privileged users
Managed endpoint security and restrictions on removable media
Centralized security logging and alerting through Azure Monitor and Log Analytics
Access is limited to authorized users and services with a legitimate business need.
8. Amazon PII Retention and Deletion
Amazon Personally Identifiable Information is retained only as long as required for authorized fulfillment operations.
Amazon PII is securely deleted or irreversibly anonymized within 30 days after order delivery, unless a longer retention period is specifically required by applicable law.
Any legally required extended retention is limited to the minimum necessary information and used exclusively for the relevant legal, tax, or regulatory obligation.
Non-PII information is retained only as long as necessary for documented business purposes or applicable legal obligations.
Deletion controls apply to active databases, temporary files, archives, and backup systems in accordance with Amazon’s applicable data protection requirements.
Access to information is also terminated and data is deleted when required by authorization revocation, termination, or applicable Amazon deletion instructions.
9. Security Monitoring and Audit Logs
Security events are collected and monitored through Azure Monitor and Azure Log Analytics.
Monitoring includes authentication failures, unauthorized access attempts, administrative changes, unusual API activity, and suspected data movement.
Amazon customer PII is excluded from application and security logs unless its inclusion is required by applicable law or regulation.
Security logs are protected by access restrictions and retained for a minimum of 12 months.
Authorized personnel investigate security alerts and document findings, containment actions, and corrective measures.
10. Personal Devices and Data Transfer Restrictions
Amazon Information may be accessed only through approved systems and authorized business environments.
Unauthorized downloading, copying, or transferring of Amazon PII to personal mobile phones, USB drives, removable media, or unmanaged devices is prohibited.
Endpoint controls and monitoring detect suspicious attempts to transfer protected information and generate alerts for investigation.
11. Testing and Application Development
Development and testing activities use synthetic, anonymized, or masked information.
Amazon production PII is not routinely used in development environments.
Exceptional troubleshooting access is subject to approval, monitoring, restricted permissions, and secure deletion after the authorized activity.
Application security is maintained through vulnerability assessments, code reviews, software dependency monitoring, remediation tracking, and controlled releases.
12. Backup and Disaster Recovery
Encrypted backups are maintained for system availability and disaster recovery.
Backup storage is protected through Azure security controls and geographically separated recovery arrangements.
Authorized recovery procedures include restoring data, verifying database integrity, and testing application functionality.
Recovery procedures are tested quarterly.
The disaster-recovery targets are:
Recovery Time Objective (RTO): 24 hours
Recovery Point Objective (RPO): Up to 24 hours
Amazon PII retention and deletion restrictions continue to apply to backups and recovered information.
13. Security Incident Response
Tech-Magnet LLC maintains documented incident response procedures to manage unauthorized access, database compromise, credential exposure, and suspected data leakage.
Response activities include detection, investigation, containment, remediation, recovery, and preventive review.
Incidents involving Amazon Information are reported to security@amazon.com within 24 hours of detection, in accordance with Amazon SP-API requirements.
For security-related concerns, contact security@tech-magnet.com.
14. Privacy Rights and Requests
Individuals may submit requests regarding access, correction, or deletion of personal information, subject to applicable laws and Amazon data handling requirements.
Requests may be submitted to:
Where applicable, requests are verified and processed according to relevant privacy and data protection obligations.
15. Children’s Privacy
Our services are intended for business and commercial use and are not directed toward children under 16 years of age.
16. Changes to This Policy
Tech-Magnet LLC may update this Privacy Policy to reflect changes in legal requirements, Amazon SP-API policies, security procedures, or business operations.
Updates will be published on this page with a revised Last Updated date.