Privacy-Policy

Privacy Policy

Last Updated: May 2026 Organisation: Agromato Contact: techagromotive@gmail.com

1. Overview

Agromato operates a private, internal automation system that integrates with Amazon Selling Partner API (SP-API) exclusively for the purpose of managing and fulfilling orders placed on Amazon.in. This policy describes how Amazon data is collected, processed, stored, used, shared and disposed of within our system.

2. Data Collected

We access the following data from Amazon SP-API solely for order fulfilment purposes:

  • Amazon Order ID
  • Order status and purchase date
  • Number of items in the order
  • Order total amount
  • Easy Ship pickup slot information
  • Shipping label PDF generated by Amazon Easy Ship

We do not collect, store or process any of the following:

  • Buyer names
  • Buyer email addresses
  • Buyer phone numbers
  • Payment information or card details
  • Any data unrelated to order fulfilment

3. How Data is Processed

All Amazon data is processed as follows:

  • Data is fetched in real time from Amazon SP-API over an encrypted HTTPS connection (TLS 1.2 or higher)
  • Data is held temporarily in RAM only during the printing process
  • A temporary PDF file is created in the /tmp directory (RAM-based tmpfs filesystem) for printing
  • The temporary file is permanently deleted immediately after the print job is sent
  • No data is written to any physical disk or persistent storage at any point

4. Data Storage

Agromato does not store Amazon Information at rest.

  • No databases are used
  • No cloud storage is used
  • No physical disk writes occur
  • All processing happens in volatile RAM and is discarded within seconds
  • The /tmp directory used during processing is mounted as tmpfs (RAM-based) and is automatically cleared on system restart

5. Data Retention

Amazon Information is retained only for the duration of the printing process — typically less than 30 seconds per order. No Amazon data is retained beyond this period. No archives or backups of Amazon Information are maintained.

6. Data Sharing

Agromato does not share Amazon Information with any third party under any circumstances. The system is a private internal tool used exclusively by the business owner. No Amazon data is:

  • Sold or rented to any party
  • Shared with marketing or analytics platforms
  • Transmitted to any external server or cloud service
  • Used for any purpose other than printing shipping labels for fulfilment

7. Data Security

We implement the following security controls to protect Amazon Information:

  • All API communication uses HTTPS with TLS 1.2 or higher
  • The Raspberry Pi running the integration is on a private network behind a router firewall
  • Remote access is restricted exclusively to ZeroTier VPN with device-level authentication
  • All public ports on the device are closed
  • SSH access requires key-based authentication — password login is disabled
  • SP-API credentials are stored with chmod 600 file permissions accessible only by the authorised system user
  • USB ports are disabled on the device to prevent unauthorised data extraction
  • Automatic security updates are applied daily via unattended-upgrades
  • Failed login attempts are automatically blocked via fail2ban
  • System access logs are retained for 90 days and reviewed weekly

8. Access Controls

Amazon Information is accessible only to the sole proprietor of Agromato. No employees, contractors or third parties have access to the system or any Amazon data processed by it.

9. Incident Response

In the event of a suspected security breach or unauthorised access:

  1. SP-API credentials will be immediately revoked via the Solution Provider Portal
  2. All Amazon account passwords will be changed immediately
  3. MFA will be reviewed and re-enabled on all accounts
  4. The incident will be reported to security@amazon.com within 24 hours of detection
  5. Amazon Seller Support will be notified via a support case

Incident Management Point of Contact: Renick Andrews — renickandrew@gmail.com | +91 7760533625

10. Buyer Rights

Agromato does not store any buyer Personally Identifiable Information (PII). As no PII is retained beyond the printing process, there is no data to access, correct or delete. Buyers may contact us at techagromotive@gmail.com for any privacy related queries.

11. Policy Updates

This policy will be reviewed and updated annually or whenever there is a material change to our data handling practices. The Last Updated date at the top of this page reflects the most recent revision.

12. Contact

For any questions regarding this privacy policy or our data handling practices:

Agromato Bangalore, India Email: techagromotive@gmail.com Phone: +91 7760533625 Website: www.agromato.in