Privacy policy
Who we are
Aiden Commerce ("Aiden", "we") is operated by Soft Flair Ltd, registered in England and Wales Company No. 16027641, registered office: 128 City Road, London, EC1V 2NX, United Kingdom. We provide analytics, reimbursement-recovery, invoicing and tax-preparation software to Amazon marketplace sellers. For the purposes of UK and EU data-protection law we act as a processor of buyer personal data on behalf of the seller (the controller), and as a controller of seller account data.
What we collect
- Seller account data: your name, email, business details, and configuration you enter.
- Marketplace data you authorise via Amazon's Selling Partner API: orders, financial events, inventory, advertising metrics, and — solely where legally required for invoicing — buyer name, address and VAT number.
- Technical data: logs necessary to operate and secure the service.
We do not sell personal data, and we do not use buyer personal data for any purpose other than producing the legal documents and tax records the seller is obliged to create.
How we protect it
- Encryption in transit (TLS 1.2+) and at rest; API credentials and buyer personal data are stored with authenticated encryption.
- Access on a least-privilege basis; every write action against a seller account is recorded in an immutable audit log.
- We request only the Amazon API roles each feature requires, consistent with Amazon's Acceptable Use Policy and Data Protection Policy.
Retention and deletion
Buyer personal data obtained through the Selling Partner API is retained no longer than 30 days after order delivery, except where it must appear on invoices and tax records that the seller is legally required to keep, in which case only the data required by law is retained for the statutory period, encrypted, and then deleted. Sellers can request export or deletion of their account data at any time at the address below.
International transfers & your rights
Where UK or EU personal data is processed outside those territories, we rely on appropriate safeguards such as standard contractual clauses. Depending on where you live, you may have rights to access, correct, delete, or port your personal data, and to object to or restrict processing. To exercise them, contact us; you may also complain to your supervisory authority (in the UK, the ICO).
Sub-processors
We use infrastructure providers to host the service. A current list of sub-processors is available on request. Each is bound by data-protection terms no weaker than this policy.
Contact
aiden@softflair.co.uk · Soft Flair Ltd, registered in England and Wales Company No. 16027641, registered office: 128 City Road, London, EC1V 2NX, United Kingdom.