1. Who we are
The DataSync Amazon connector ("the connector") is provided by DataGem Consulting, 4 Rue Principale, Linstroff, 57660 Grostenquin, France ("DataGem", "we"). DataGem is a separate company from your business and works only through the permissions you grant. This policy covers the information the connector handles when you connect an Amazon seller account. Visits to our website are covered by our general Privacy Policy.
2. Information we collect
- Account and contact details: the names and email addresses of the people who set up DataSync for your business, and your Google Cloud project ID and number.
- Google Cloud access: a key for a DataSync service account in your Google Cloud project, which DataSync uses to run the sync job and write to your BigQuery dataset.
- Authorization data: your selling partner ID, the regions and marketplace IDs you connect, and the OAuth tokens Amazon issues when you authorize DataSync.
- Report data: the rows of the three reports listed on this page, which DataSync requests from Amazon's Selling Partner API on your behalf. DataSync requests no restricted role, so Amazon leaves buyers' names, street addresses, email addresses and phone numbers out of these reports. They can still include each order's ship-to city, state or region, postal code and country, which Amazon treats as buyer personal information.
- Operational records: the status, start and end times and any error message of each sync run, plus the sync job's logs, which record row counts.
3. How we use it
Only to provide the connector to you: to authorize access, run the scheduled syncs, write your data to your BigQuery dataset, detect and fix failed runs, and answer your support requests. For the contact details of the people who set up DataSync, and any other personal data in your account and authorization data, we rely on our legitimate interest in providing DataSync to your business and keeping it secure (Article 6(1)(f) GDPR), or on our agreement with you where you contract with us in your own name (Article 6(1)(b) GDPR). For buyer data in the reports, we act only as your processor, as set out in the terms below.
We do not sell or rent this information, use it for advertising, share it with other sellers, or use it for any purpose other than providing the connector to you.
4. Where it is stored and how it is protected
- Report rows are written only to BigQuery in your own Google Cloud project, where you control access and retention. DataSync's database does not store them.
- The sync job normally runs in your Google Cloud project, and its logs stay there. If it cannot run there, DataSync can run it in DataGem's Google Cloud project instead: it still writes only to your dataset, and that run's logs are kept in DataGem's project. Logs record row counts and, when a value fails to load, can include that value.
- Account details, encrypted credentials and run records are stored in DataSync's database, hosted by Neon on Amazon Web Services in the United States. DataSync's services run on Google Cloud. Transfers outside the European Economic Area are covered by our providers' data processing terms, which include the European Commission's standard contractual clauses.
- Tokens and keys are encrypted with AES before storage, all traffic uses HTTPS (TLS), and our hosting providers encrypt stored data at rest.
- DataGem employees who operate DataSync can access your account details, authorization records, including tokens, and run records. Through DataSync's service accounts, they can also reach everything those accounts' administrator roles cover in your Google Cloud project, including the DataSync job, its logs and all BigQuery datasets, Cloud Storage buckets and secrets there. They use this access only to set up DataSync, fix failed runs and answer your requests. We recommend a Google Cloud project used only for DataSync.
5. Sharing
We share this information only with the providers that host DataSync and process data on our behalf (Google Cloud, and Neon on Amazon Web Services); with Amazon, when its Data Protection Policy requires it, for example to report a security incident or during a security audit; or where the law requires it. We never pass Amazon information to third parties for their own use.
6. Retention and deletion
- We keep account details, authorization data and run records while DataSync is connected to your account.
- When you revoke DataSync in Seller Central, when you ask us to stop, when Amazon asks us to, or when our access to your account otherwise ends (for example, an authorization you do not renew), we stop all syncs. Within 30 days, we permanently delete everything DataSync holds about your account: account and contact details, authorization data including tokens, the Google Cloud key and any copies of your service-account keys, and run records. We also remove the DataSync job and DataGem's access to your Google Cloud project. When you revoke DataSync in Seller Central, please also tell us, so we can act straight away.
- Report data in your BigQuery dataset belongs to you and stays under your control. You can delete it at any time. Until we remove the DataSync job, a run that receives no data from Amazon, for example after you revoke access, empties the tables it reloads; tables set up to build up history keep their rows.
7. Security incidents
If we detect an actual or suspected security incident affecting your data, we contain it, notify you without undue delay, and notify Amazon at security@amazon.com within 24 hours, as Amazon's Data Protection Policy requires.
8. Your rights
You can ask us to access, correct, export or delete your personal data, or to restrict or object to its processing, by writing to contact@datagem-consulting.com. If you are in the EU, the EEA or the UK, you can also lodge a complaint with your data protection authority; in France, the CNIL.
9. Changes to this policy
We will post any change on this page with a new date, and email connected sellers about significant changes.