ScoutAI Data Policy

ScoutAI is an alerting and monitoring tool developed by Flapen – FZCO to help Amazon sellers stay informed about account changes, listing activity, advertising performance, reviews, inventory, and related events in real time. This policy explains how ScoutAI accesses, processes, stores, and protects data provided through the Amazon Selling Partner API (SP-API) and other integrations, including Brand Analytics for sellers who grant that permission.

1. Who We Are

ScoutAI is operated by:

Flapen – FZCO
Dubai, UAE
Website: https://flapen.com
Email: privacy@flapen.com

Flapen is responsible for ensuring that all personal and Amazon account data is handled securely and in compliance with Amazon's Data Protection Policy, Acceptable Use Policy, and all applicable SP-API program requirements.

2. Data Access Through Amazon SP-API

When you authorize ScoutAI through Login with Amazon (OAuth), we request access to specific roles under Amazon's Selling Partner API to deliver the app's functionality.

We access only the minimum data required to provide real-time alerts and automation features. These permissions enable ScoutAI to monitor your account and deliver meaningful, actionable notifications.

3. How We Use the Data

ScoutAI uses SP-API data solely to provide the following services:

• Real-time account alerts
• Monitoring of listing, review, inventory, and performance data
• Notifications delivered via Slack, email, or supported channels
• Optional insights for sellers who grant Brand Analytics access

ScoutAI never:

• Uses Amazon data for advertising or marketing
• Sells, rents, or shares data with third parties
• Uses seller data to build cross-account datasets
• Uses seller data to train external models
• Combines data from multiple sellers for benchmarking
• Processes data for any purpose not described in this policy

All usage complies strictly with Amazon's Developer Terms, Data Protection Policy, and SP-API program requirements.

3.1 Use of Brand Analytics Data

For sellers who grant access to the Brand Analytics role:

• ScoutAI processes BA data only to generate insights specific to the seller's own catalog
• BA data is not stored longer than required to generate these insights
• BA data is never aggregated, shared, or compared across sellers
• BA data is not used for machine learning model training or product development
• BA data is not exported to external vendors or third-party systems
• All BA data is deleted within 30 days of processing or immediately upon access revocation

This ensures full compliance with Amazon's Brand Analytics usage requirements.

4. Data Storage and Retention

All SP-API and personal data is stored using secure cloud infrastructure compliant with modern security and privacy standards, including GDPR principles.

Retention Rules

• SP-API operational data: retained only as long as needed to deliver alerts
• Brand Analytics data: deleted within 30 days of processing
• User profile & configuration data: retained until account deletion
• On revocation of permissions or app uninstall: all Amazon data is deleted within 30 days

ScoutAI stores no long-term historical Amazon data beyond what is necessary for alerting.

5. Access & Revocation

You are in full control of your data.

You may:

• Revoke SP-API access anytime in Seller Central → Apps & Services
• Request data deletion by emailing privacy@flapen.com
• Update or correct stored account information
• Request an export of your configuration data

Once access is revoked, all associated Amazon data is deleted within 30 days.

6. Use of Third-Party Services

ScoutAI uses trusted service providers for hosting and message delivery (e.g., Slack, email providers, secure cloud platforms).

These providers:

• Cannot access your Amazon Seller account
• Do not receive Brand Analytics data
• Do not store SP-API data beyond message delivery functions
• Are contractually required to protect confidentiality and security

ScoutAI never shares Amazon data with advertisers, data brokers, or unauthorized entities.

7. Security Measures

ScoutAI implements strong security protections, including:

• OAuth 2.0 authentication (no passwords stored)
• Encryption of all data in transit and at rest
• Strict internal access controls
• Regular security reviews and audits
• Segregation of seller data to prevent cross-account exposure

We take every reasonable measure to safeguard your information.

8. Your Rights

Depending on your region, you may have the right to:

• Access your data
• Request deletion or correction
• Withdraw consent
• Restrict certain processing
• Request an export of your configuration data

To exercise any of these rights, email: privacy@flapen.com

9. Children's Privacy

ScoutAI is intended for users 18+ only. We do not knowingly collect data from minors. If such data is identified, it will be deleted immediately.

10. Updates to This Policy

This policy may be updated to reflect product changes or legal requirements. When updates are made, we will revise the effective date at the top of this page. Continued use of ScoutAI constitutes acceptance of any updated terms.

11. Legal Notice

Amazon, Amazon Seller Central, SP-API, and related marks are trademarks of Amazon.com, Inc. or its affiliates. ScoutAI is an independent application and is not endorsed by Amazon.