Privacy & Data Handling Policy

2 · Information we collect

We aim to collect only what is necessary to provide our services:

• Contact information you provide directly — such as your name, email address, company, and the message you send us.
• Client operational data that a client authorises us to process to deliver a service — for example marketplace inventory, listing, order, shipment, and report data.
• Credentials and tokensrequired to connect to a client's authorised systems and marketplace accounts on their behalf.
• Basic technical logs generated when our systems run, used for monitoring, security, and troubleshooting.

We do not knowingly collect personal data beyond what is needed for the purposes described here.

3 · Amazon Selling Partner API data

When a client authorises us to operate an Amazon Selling Partner API integration on their behalf, we access only the data and authorisation roles required for the agreed workflow — for example inventory levels, listing state, order and shipment data, and Selling Partner API reports.

• We request the minimum scopes and roles necessary (least-privilege access).
• We use this data solely to deliver the inventory visibility, reporting, and operational workflows the client has engaged us for.
• We do not use Amazon-derived data for advertising, and we do not sell or share it for purposes unrelated to the engagement.

ARIA TEKNOLOGI INTELEGENSIA is an independent software provider and is not affiliated with Amazon. References to the Amazon Selling Partner API describe a data source we integrate with on behalf of clients.

4 · How we use data

We use the data described above to respond to enquiries, deliver and operate the agreed integrations and reporting, monitor and secure our systems, and meet legal or contractual obligations. We do not use client or marketplace data to build profiles for unrelated purposes.

5 · Storage & security

• Data is transmitted over encrypted channels and stored using encryption at rest.
• API credentials and tokens are held in managed secret storage — never in source code or plain-text logs.
• Access is granted on a least-privilege basis, and integration runs and data access are logged for auditability.

6 · Retention & deletion

We retain data only for as long as it is needed to deliver the agreed services or to meet legal obligations. On request, or on termination of an engagement, we delete or return client and marketplace data and revoke associated credentials, except where retention is required by law.

7 · Sharing & disclosure

We do not sell data. We share data only with infrastructure providers strictly necessary to operate our services (for example hosting), under appropriate confidentiality and security terms, or where required by law. Client and marketplace data is used solely to deliver the agreed workflows.

8 · International transfers

We operate from Indonesia and may use infrastructure located in other regions. Where data is transferred across borders, we take reasonable steps to ensure it remains protected to the standards described in this policy.

9 · Your rights & requests

You may request access to, correction of, or deletion of personal data we hold about you, and you may ask questions about how your data is handled. To make a request, contact us at hello@arialabs.id. For client and marketplace data we process on a client's behalf, requests are coordinated with that client.

10 · Changes to this policy

We may update this policy from time to time. Material changes will be reflected by updating the date above. Continued use of our services after an update constitutes acceptance of the revised policy.