This page describes how Floynk uses data obtained through the Amazon Selling Partner API (SP-API). It is written for Amazon SP-API application reviewers and for sellers who want full transparency on how their Amazon data is handled.
Summary
Floynk is a SaaS platform that connects a seller's own Amazon Seller Central account(s) to their own Bol.com, Mirakl and e-commerce (Shopify, WooCommerce) channels. Access is always initiated by the seller through the official Amazon OAuth consent flow. Floynk never asks for, stores, or uses another seller's credentials.
For each seller, Floynk uses the Amazon Selling Partner API strictly to operate that seller's own account.
Requested roles and how Floynk uses each
| Requested role | What Floynk does with it |
|---|---|
| Inventory and Order Management | Pull the seller's own orders, write shipment confirmations, sync their own inventory across their own channels. |
| Direct-to-Consumer Shipping | Submit the seller's own shipment acknowledgements and tracking. |
| Pricing | Adjust the seller's own listing prices within limits they set (min/max). Competitive signals are used only to move the seller's own price inside their own bounds. |
| Product Listing | Create and update the seller's own listings from their PIM. |
| Tax Invoicing | Upload the seller's own VAT-compliant invoices for VAT Calculation Service. |
| Amazon Fulfillment | Read the seller's own FBA inventory and inbound shipments. |
| Selling Partner Insights | Populate the seller's own dashboard with their own sales/revenue figures. Used exclusively per-seller; never aggregated across sellers. |
| App Management | Manage OAuth tokens for the seller's own installation. |
What Floynk does NOT do
- Floynk does not sell, resell, rent, license, syndicate, publish or redistribute Amazon data in any form.
- Floynk does not aggregate Amazon data across sellers. There is no "market analytics" or "competitor intelligence" product.
- Floynk does not provide customer-level PII to any other seller.
- Floynk does not retrieve or process Brand Analytics data.
- Floynk does not use Amazon data to train AI models, and does not send Amazon PII to Anthropic or any other AI provider. Scrubbing is enforced server-side; see security measures section 10.
Data isolation
All Amazon data is scoped per seller in a multi-tenant Supabase Postgres database. Row-Level Security policies enforce per-seller isolation at the query level so that it is not possible, by design, for one seller's Floynk user to read another seller's Amazon data.
Data retention
Amazon Personally Identifiable Information (buyer names, email addresses, shipping addresses, phone numbers) is retained for a maximum of 30 days from order completion, after which it is anonymised.
The only exception is the minimum order and invoice metadata required to be retained for 7 years under Dutch tax law (Wet op de omzetbelasting, art. 35a and the general bewaarplicht under Boek 2 BW). That retained metadata does not include buyer email addresses or phone numbers.
Sub-processors and hosting
Primary processing takes place in the European Union:
- Database: Supabase Pro on AWS eu-central-1 (Frankfurt, Germany).
- Compute: Hetzner Falkenstein (FSN1) and Nuremberg (NBG1), Germany.
Full sub-processor list: /sub-processors. Full security posture: /security-measures. Data processing agreement: /data-processing.
Contact
For questions about Amazon data handling, data subject requests or security-related disclosure, contact privacy@floynk.com.