1 Commerce Privacy Policy

Last Updated: July 23, 2025

At 1 Commerce ("we," "us," "our"), we value your privacy and are committed to protecting your data. This Privacy Policy explains how we collect, use, disclose, secure, and retain information, particularly in connection with your use of our services and our access to the Amazon Selling Partner API ("SP-API").

This policy applies to visitors of our website, our clients, and the data we process on behalf of our clients through the Amazon SP-API.

1. Information We Collect

We collect information to provide and improve our services. This information can be categorized as follows:

1.1 Information You Provide to Us

When you fill out forms, request a consultation, or sign up for our services, we collect information you provide directly. This may include your name, email address, phone number, company name, and other business details.

1.2 Information We Access via Amazon Selling Partner API (SP-API)

When you grant our application access to your Amazon Seller Central account, we programmatically access and process information required to provide our services. This data ("Amazon Information") is handled in strict accordance with Amazon's policies. This may include:

• Seller Information: Account details, business reports, and other non-public information.
• Order and Fulfillment Information: Order details, product information, pricing, quantities, and fulfillment status.
• Personally Identifiable Information (PII): We may access PII as defined by Amazon's DPP, such as buyer names, shipping addresses, and phone numbers, strictly for the purpose of fulfilling orders and meeting tax and legal requirements as permitted by Amazon.

2. How We Use Your Information

Our use of information is purposeful and limited.

2.1 General Use

We use the information you provide directly to respond to your inquiries, provide tailored services, manage your account, improve our website, and send you relevant updates about our services.

2.2 Use of Amazon Information

We use Amazon Information exclusively for purposes permitted by the Amazon Services API Developer Agreement and Acceptable Use Policy. This includes:

• Providing the features and functionality of our application.
• Fulfilling merchant-fulfilled orders.
• Calculating and remitting taxes, and producing legally required documents like tax invoices.
• Assisting with customer service inquiries related to orders.
• We will never use Amazon Information for marketing, advertising, or any purpose other than providing the agreed-upon services.

3. Data Sharing and Disclosure

We are committed to maintaining the confidentiality of your information.

• We do not and will not sell, rent, or trade Amazon Information to any third party.
• We may share information with third-party service providers (e.g., cloud hosting providers) who are contractually obligated to protect the data and use it only to perform services on our behalf.
• We will only disclose information if required by law, such as in response to a subpoena, court order, or other valid legal process.

4. Data Security

We implement and maintain a comprehensive security program with physical, administrative, and technical safeguards to protect information from unauthorized access, use, alteration, or destruction. Our security measures are consistent with industry-leading standards and Amazon's DPP requirements, including:

• Access Control: Access to Amazon Information is strictly limited to authorized personnel on a "need-to-know" basis following the principle of least privilege. We enforce Multi-Factor Authentication (MFA) for all accounts with access to sensitive data and conduct regular access reviews.
• Encryption: All Amazon Information is encrypted in transit using secure protocols (TLS 1.2+). All Personally Identifiable Information (PII) is encrypted at rest using industry-standard encryption algorithms (e.g., AES-256).
• Network Protection: We use network firewalls, intrusion detection and prevention systems, and other network protection controls to safeguard our systems from unauthorized access.
• Incident Response: We maintain an Incident Response Plan to detect and handle security incidents. In the event of a security incident affecting Amazon Information, we will notify Amazon within 24 hours of detection and take immediate steps to remediate the incident.

5. Data Retention and Deletion

We retain information only for as long as necessary to fulfill the purposes for which it was collected or to comply with legal obligations.

• Personally Identifiable Information (PII): In accordance with Amazon's policy, PII retrieved through the SP-API is retained for no longer than 30 days after order shipment. Data is retained beyond this period only as necessary to meet legal requirements, including tax or regulatory obligations.
• Data Deletion: Upon your request or upon termination of your service, we will securely and permanently delete your data in accordance with industry-standard sanitization processes (such as NIST 800-88). If requested by Amazon, we will certify in writing that all Amazon Information has been securely destroyed.

6. Your Rights and Choices

You have rights over your personal data. You can request to access, correct, or delete the information we hold about you. If you wish to exercise these rights or have any concerns about your privacy, please contact us using the details below.

7. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal and regulatory reasons. Any changes will be posted on this page, and the updated policy will be effective immediately upon posting. We encourage you to review this policy periodically.

8. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your information, please contact us at: