Flapen Amazon Data Policy
Última actualización: September 18, 2026
Flapen is an account-management platform for Amazon brands, built by Flapen - FZCO. You connect your own Seller Central account. Flapen then runs listings, pricing, FBA shipments, buyer messaging, review requests, finance reporting, certifications, and sales analytics from one workspace. This policy covers the data you grant through the Amazon Selling Partner API, called SP-API below. It also covers the Amazon Ads API and Amazon Marketing Cloud. It explains how Flapen accesses, stores, and protects that data.
1. Who We Are
Flapen is operated by:
Flapen – FZCO
Dubai, UAE
Website: https://flapen.com
Support: hello@flapen.com
Privacy: privacy@flapen.com
Security: hello@flapen.com
Flapen is responsible for ensuring all personal and Amazon account data is handled securely and in compliance with Amazon's Data Protection Policy, Acceptable Use Policy, and SP-API program requirements. Flapen is not affiliated with Amazon.com, Inc. or its subsidiaries.
2. Roles Requested Through Amazon SP-API
When you authorize Flapen through Login with Amazon, we request the SP-API roles below. Each role is a named permission tied to one feature. We request no restricted role, so we never receive a buyer's name, address, phone number, or message content.
| Role | Purpose |
|---|---|
| Product Listing | Create and update listings, fix listing quality issues, manage A+ content, check listing restrictions, and estimate fees for new products. |
| Pricing | Read list prices and offers for your own SKUs and apply your own pricing rules. |
| Amazon Fulfillment | Track inbound FBA shipments from creation to receipt and monitor FBA inventory. Read the FBA inventory, planning, restock, fee, storage, returns, and reimbursement reports. |
| Buyer Communication | Send permitted buyer messages, such as order issue and delivery follow-ups, through the Messaging API on your behalf. |
| Buyer Solicitation | Send review and feedback requests through the Solicitations API within Amazon's rules. |
| Selling Partner Insights | Read marketplace participation and account performance to show account health and connection status. |
| Finance and Accounting | Import financial events, settlements, and referral fee previews to build per-SKU profit and loss statements. |
| Inventory and Order Tracking | Sync orders and order items without buyer details, compute sales velocity, and build reorder and restock recommendations. |
| Sustainability Certification | View and submit product sustainability certifications for brands that hold them. |
| Amazon Logistics | Get Amazon Shipping rates, buy labels, retrieve documents, and track parcels for orders you fulfill yourself. You enter the ship-to details. |
| Amazon Warehousing and Distribution | Monitor AWD inventory and shipments for brands that replenish FBA through AWD. |
| Brand Analytics | Read your own sales and traffic, search query performance, and Data Kiosk datasets. Report sessions, conversion, and Buy Box share. |
Seller Central app notifications use Amazon's App Integrations opt-in. It carries no data role. It lets Flapen alerts appear inside Seller Central.
For Amazon Ads, Flapen requests the campaign management scope under the Amazon Ads API program, in a separate consent flow. Amazon Marketing Cloud access comes from your own AMC instance, which you link to Flapen yourself.
3. How We Use the Data
Flapen uses Amazon data only to provide its product features:
- Product research and niche scoring from public Amazon data.
- Listing optimization grounded in the seller's own catalog and ad performance.
- Profit forecasts and unit economics from the seller's own fees, sales, and inventory.
- Account health, inventory, and review monitoring for the seller's own SKUs.
- Advertising and AMC analytics for the seller's own campaigns.
Flapen never:
- Uses Amazon data for advertising or marketing of Flapen.
- Sells, rents, or shares Amazon data with third parties.
- Combines SP-API data across sellers to build benchmarks or datasets.
- Uses seller data to train external models.
- Resells Amazon data in any form.
Our niche and keyword research tools use publicly available marketplace information and third-party keyword search-volume data from DataForSEO. They never draw on a connected seller's SP-API data. SP-API data serves only the seller who granted it, and we never pool or compare it across sellers.
Market figures on our public research pages are statistical estimates modeled from those public pages. Units sold, revenue, conversion and return rates are our own modeled numbers. They are not Amazon reported data, and Amazon does not supply them to us.
All usage complies with Amazon's Developer Terms, Acceptable Use Policy, and SP-API program requirements. We enforce strict tenant isolation: one seller's data is never visible to another seller's account.
3.1 Personally Identifiable Information (PII) Handling
Flapen requests no restricted role, so it does not access buyer names, shipping addresses, phone numbers, or buyer-seller messages. Order sync reads order and item data without those fields. If Flapen ever requests a restricted role, this policy changes first, and the controls below apply from the first fetch:
- Encrypted at rest with AES-256.
- Never written to logs or error trackers.
- Never sent to AI inference providers.
- Never used to train models.
- Never aggregated across sellers.
- Deleted within 30 days of fetch.
Today Flapen stores marketplace participation data for each connected account. Order, listing, inventory, and finance sync ship module by module. Each module falls under the retention table in section 4.
3.2 Use of Brand Analytics Data
For sellers who grant access to the Brand Analytics role:
- Brand Analytics data is processed only to generate insights for the seller's own catalog.
- Brand Analytics data is not stored longer than required to generate those insights.
- Brand Analytics data is never aggregated, shared, or compared across sellers.
- Brand Analytics data is never used for model training or product development.
- Brand Analytics data is never exported to external vendors.
- All Brand Analytics data is deleted within 30 days of processing or immediately on access revocation.
4. Data Retention
Flapen separates retention rules by data type. PII has a hard ceiling regardless of subscription state. Non-PII operational data is retained while the seller has an active Flapen account.
| Data type | Retention |
|---|---|
| Buyer PII (names, addresses, phone, messages) | Maximum 30 days from fetch. No exceptions other than legal or tax hold. |
| Brand Analytics datasets | Deleted within 30 days of processing. |
| SP-API operational data (listings, inventory, sales, ads) | Retained while the Flapen account is active. Deleted within 30 days of cancellation or revocation. |
| User profile and account configuration | Retained until account deletion. |
| Encrypted refresh tokens | Retained until revocation; deleted within 24 hours after revocation. |
5. Access and Revocation
You are in full control of your data.
To revoke access or request deletion, see the Data Deletion page for the full procedure. In summary:
- Revoke SP-API access at any time in Seller Central → Apps & Services → Manage Your Apps.
- Email privacy@flapen.com to request export, correction, or deletion of your stored data.
Once access is revoked, all associated Amazon data is deleted within 30 days.
6. Sub-Processors
Flapen uses the third-party services below to operate the platform. Each is contractually required to protect the confidentiality and security of the data they process. Only the two hosting providers touch SP-API data, as the last column shows.
| Vendor | Purpose | Region | Receives SP-API data? |
|---|---|---|---|
| Vercel | Application hosting and edge functions. | US, EU | Yes, in transit only. Nothing is stored. |
| Supabase | Postgres database and object storage. | EU | Yes. Rows are encrypted at rest. |
| Sentry | Error and performance monitoring. | EU | Error reports only, scrubbed of Amazon data before send. |
| Anthropic | AI inference for listing optimization and assistant features. | US | No. AI features receive no SP-API data. |
| OpenAI | AI inference for selected features. | US | No. AI features receive no SP-API data. |
| Amplitude | Product analytics on Flapen's own UI. | US | No. Only Flapen's own UI events. |
| Mux | Video hosting for marketing and onboarding content. | US | No. |
Flapen never shares Amazon data with advertisers, data brokers, or unauthorized entities.
7. Security
Flapen treats every byte of Selling Partner data as confidential. Our public commitments:
- Encryption at rest: AES-256 for refresh tokens and any PII columns.
- Encryption in transit: TLS 1.2 or higher on every internal and external connection.
- Multi-factor authentication: required on every staff account with access to the hosting, database, and source-control systems that store Amazon data.
- Least-privilege access: role-based access to production systems with a documented quarterly access review.
- Audit logging: internal staff actions on customer accounts are logged. PII access logging applies from the first PII ingest.
- Incident response: a written plan, reviewed every six months. We notify security@amazon.com within 24 hours of detecting an incident that involves Amazon Information. Regulators follow where the law requires it.
- Vulnerability disclosure: reports to hello@flapen.com are acknowledged within 5 business days.
8. Your Rights
Depending on your region, you may have the right to:
- Access your data.
- Request deletion or correction.
- Withdraw consent.
- Restrict certain processing.
- Receive an export of your configuration data.
To exercise any of these rights, email privacy@flapen.com.
9. Children's Privacy
Flapen is intended for users aged 18 and older. We do not knowingly collect data from minors. If such data is identified, it will be deleted immediately.
10. Updates to This Policy
This policy may be updated to reflect product changes or legal requirements. When updates are made, we will revise the effective date at the top of this page. Continued use of Flapen constitutes acceptance of any updated terms.
11. Legal Notice
Amazon, Amazon Seller Central, SP-API, Amazon Advertising, Amazon Marketing Cloud, and related marks are trademarks of Amazon.com, Inc. or its affiliates. Flapen is an independent application and is not endorsed by Amazon.