OrcaBid

Privacy Policy

Last updated: October 17, 2026 · Applies to the OrcaBid application and website

隐私政策

最近更新：2026 年 10 月 17 日 · 适用于 OrcaBid 应用及网站

1. Who we are

OrcaBid is developed and operated by Kmest Pty Ltd (“we”, “us”) for Amazon sellers and brand owners. OrcaBid provides advertising automation, sales and inventory analytics, listing monitoring, and FBA reimbursement claim-package preparation. Contact: support@orcabid.com.

2. Information we collect

  • Account information — your name and email address when you register or contact us.
  • Amazon Ads data — when you authorize OrcaBid through Login with Amazon (LWA), we receive an access token limited to the Amazon Ads scope (advertising::campaign_management). Through the Amazon Ads API we access your advertising profiles, campaigns, ad groups, keywords, and advertising performance reports (clicks, spend, orders, sales). We never receive or store your Amazon account password.
  • Amazon Selling Partner data — when you authorize OrcaBid through Amazon OAuth, SP-API may provide sales and traffic reports, ASIN-level sales, listings, inventory, FBA fulfillment, inbound shipment, reimbursement, financial-event and Seller Feedback data needed for the features you enable. The Sales and Traffic report requires the Brand Analytics role and is used for TACOS, ASIN sales and stock-cover analysis. The Seller Feedback report requires Selling Partner Insights and is used to display seller feedback and send optional low-rating alerts. Both uses are limited to the authorizing seller or brand owner.
  • Seller-provided reports — for reimbursement analysis, you may upload report files exported from your own Seller Central account. You review all prepared evidence and file every reimbursement case from your own Seller Central account. We never request your Seller Central password or access your bank details or disbursement settings.
  • Usage data — basic logs of how you use the application (pages viewed, actions taken), used to operate and improve the service.

3. How we use information

  • To provide the core service: building campaign structures, optimizing bids, harvesting keywords, applying negative keywords, and enforcing budget rules on your behalf, within the limits you configure.
  • To calculate TACOS, show ASIN sales and stock-cover analysis, monitor listings and Seller Feedback, send optional low-rating alerts, and prepare FBA reimbursement evidence for the seller or brand owner that authorized the connection.
  • To display performance and an auditable log of every automated action.
  • To communicate with you about the service.

We use Amazon Information solely to provide the features requested by the seller or brand owner that authorized access, consistent with Amazon policies. We do not sell Amazon Information, combine it across customers for unrelated purposes, use it for our own advertising, or disclose one seller’s information to another seller.

4. Service providers and data sources

Amazon Information is retrieved from Amazon Ads API and SP-API. The only non-Amazon source is an authorized seller who chooses to upload a copy of a report exported from their own Seller Central account. We do not obtain Amazon Information from data brokers or unrelated third parties.

  • Tencent Cloud hosts the OrcaBid application and database and processes data solely to provide infrastructure.
  • Resend processes only the email content and recipient information required to deliver account, security, or seller-enabled report emails.
  • Stripe processes billing and payment information. OrcaBid does not send Amazon Information to Stripe.

These providers act only as contracted processors needed to operate the service. They may not sell or use Amazon Information for their own purposes.

5. Data storage, security and retention

  • OAuth tokens are encrypted at rest. Amazon Information is encrypted in transit using TLS and protected by tenant isolation and least-privilege access controls.
  • We retain Amazon Information only while it is strictly necessary to provide the features you enable. When you disconnect an SP-API region, its authorization token and associated sales, inventory, listing, Seller Feedback, financial, fulfillment, reimbursement and claim-package data are deleted immediately from active systems. When you delete your account, all Amazon Information is deleted immediately from active systems, except information that applicable law requires us to retain. Encrypted disaster-recovery backups expire automatically within 14 days, are access-restricted, are not used for any business purpose, and any restored backup must have completed deletion requests reapplied before service resumes.
  • You can revoke OrcaBid’s access at any time from Seller Central’s Manage Your Apps page or, where applicable, Login with Amazon. Revocation stops future authorized API access and triggers the deletion process described above, always within Amazon’s 30-day limit.

6. Cookies

We use only essential cookies required for sign-in sessions. We do not use advertising or cross-site tracking cookies.

7. Your rights

Subject to applicable law (including GDPR where it applies), you may request access to, correction of, export of, or deletion of your personal data by contacting support@orcabid.com. We respond within 30 days.

8. Children

OrcaBid is a business tool and is not directed at children under 16. We do not knowingly collect data from children.

9. Changes

We may update this policy from time to time. Material changes will be announced in the application or by email. Continued use after changes take effect constitutes acceptance.

1. 我们是谁

OrcaBid 由 Kmest Pty Ltd（下称“我们”）开发和运营，面向亚马逊卖家及品牌所有者，提供广告自动化、销售与库存分析、Listing 监控以及 FBA 赔付申诉材料准备。联系方式：support@orcabid.com。

2. 我们收集的信息

  • 账户信息 — 你注册或联系我们时提供的姓名与邮箱。
  • 亚马逊广告数据 — 当你通过 Login with Amazon（LWA）授权时，我们获得仅限广告权限（advertising::campaign_management）的访问令牌，经由 Amazon Ads API 访问你的广告 profile、广告活动、广告组、关键词及广告表现报表（点击、花费、订单、销售）。我们绝不会获得或存储你的亚马逊账户密码。
  • 亚马逊销售伙伴数据 — 当你通过亚马逊 OAuth 授权时，SP-API 可按你启用的功能提供销售与流量报表、ASIN 级销售、Listing、库存、FBA 配送、入库货件、赔付、财务事件及 Seller Feedback 数据。销售与流量报表需要 Brand Analytics 权限，用于计算 TACOS、分析 ASIN 销量与库存可售天数；Seller Feedback 报表需要 Selling Partner Insights，用于展示卖家反馈及发送可选的低评分提醒。两种用途均仅限完成授权的卖家或品牌所有者。
  • 卖家自行提供的报表 — 进行赔付分析时，你可以上传从自己 Seller Central 导出的报表文件。所有证据均由你审核，并由你在自己的 Seller Central 账户内提交每个赔付 Case。我们不会索取你的 Seller Central 密码，也无法访问银行信息或放款设置。
  • 使用数据 — 应用使用的基础日志（页面访问、操作记录），用于运营和改进服务。

3. 我们如何使用信息

  • 提供核心服务：在你设定的范围内，代你生成广告结构、优化出价、收割关键词、添加否定词、执行预算规则。
  • 计算 TACOS、展示 ASIN 销量与库存可售天数、监控 Listing 与 Seller Feedback、发送可选的低评分提醒，并为完成授权的卖家或品牌所有者准备 FBA 赔付证据。
  • 向你展示表现数据，以及每个自动化动作的可审计日志。
  • 与你就服务进行沟通。

我们使用亚马逊信息仅用于向完成授权的卖家或品牌所有者提供其请求的功能，并遵守亚马逊政策。我们不出售亚马逊信息，不为无关目的跨客户合并数据，不将其用于我们自身的广告，也不会向其他卖家披露某一卖家的信息。

4. 服务商与数据来源

亚马逊信息由 Amazon Ads API 与 SP-API 直接提供。唯一的非亚马逊数据来源，是获授权卖家选择上传的、从其自己 Seller Central 导出的报表副本。我们不会从数据经纪商或无关第三方获取亚马逊信息。

  • 腾讯云托管 OrcaBid 应用和数据库，仅为提供基础设施而处理数据。
  • Resend 仅处理发送账户、安全或卖家主动启用的报告邮件所需的邮件内容与收件信息。
  • Stripe 处理账单和支付信息；OrcaBid 不会向 Stripe 发送亚马逊信息。

上述服务商仅作为运营服务所必需的受约束处理方，不得出售亚马逊信息或将其用于自身目的。

5. 存储、安全与保留

  • OAuth 令牌采用静态加密；亚马逊信息通过 TLS 加密传输，并由租户隔离和最小权限访问控制保护。
  • 亚马逊信息仅在提供你已启用功能所严格必要的期限内保留。断开某个 SP-API 区域后，其授权令牌以及相关销售、库存、Listing、Seller Feedback、财务、配送、赔付及申诉材料数据会从活动系统立即删除。删除账户后，全部亚马逊信息从活动系统立即删除，但适用法律强制要求保留的信息除外。加密灾难恢复备份会在 14 天内自动到期，仅限授权人员访问，不用于任何业务目的；如恢复备份，必须先重新执行已完成的删除请求，才可恢复服务。
  • 你可随时通过 Seller Central 的“管理您的应用”页面，或在适用时通过 Login with Amazon 撤销 OrcaBid 授权；撤销后停止后续授权 API 访问，并启动上述删除流程，且始终不超过 Amazon 规定的 30 天期限。

6. Cookie

我们仅使用登录会话所必需的 Cookie，不使用广告或跨站跟踪 Cookie。

7. 你的权利

在适用法律（包括适用时的 GDPR）范围内，你可联系 support@orcabid.com 请求访问、更正、导出或删除你的个人数据，我们将在 30 天内回应。

8. 未成年人

OrcaBid 是商业工具，不面向 16 岁以下未成年人，我们不会有意收集未成年人数据。

9. 政策变更

我们可能不时更新本政策，重大变更将在应用内或通过邮件通知。变更生效后继续使用即视为接受。