Security

1.Infrastructure & Encryption

• In transit: all traffic between your browser and our platform uses HTTPS (TLS).
• At rest: your account password and marketplace authorisation tokens are encrypted or kept in protected form, and are never shown back in plain text.
• Isolation: each business's data is kept separate from every other business's data.
• Hosting: the platform runs on managed cloud infrastructure from established providers.

2.Access Control

• Role-based permissions let you decide what each member of your team can see and do.
• Our staff can access customer data only where needed to run or support the service, and access is removed when no longer needed.
• Passwords are never stored in readable form, and sessions end when you sign out.

3.Network & Devices

• Production systems are reachable only through the services the platform needs, behind firewall rules that block everything else.
• Staff devices that can reach customer data use screen locks and are kept up to date, and access is revoked when a device is lost or a person leaves.

4.Logging & Monitoring

• We record sign-ins, data access and administrative actions in audit logs.
• Logs are retained for 12 months and are reviewed when we investigate an alert, an error or a suspected incident.

5.Backups & Recovery

• Regular backups protect against accidental loss.
• Backups are kept only as long as needed for recovery, then removed. Data deleted on request is also removed from backups as they expire.

6.Vulnerability Management

• We keep servers and application dependencies up to date and apply security fixes promptly, starting with the most serious.
• We review reported vulnerabilities and fix confirmed issues.

7.Incident Response

• We investigate suspected incidents immediately, contain them, and revoke any affected credentials and tokens.
• Incidents affecting Amazon Information are reported to Amazon within 24 hours of detection. Affected customers are informed as required by law and by our agreements.
• After each incident we fix the cause and record what changed.

8.Data Retention & Deletion

We keep your data while your account is active. After you close your account we delete or anonymise your business data within 90 days, except records we must keep for tax, audit or legal reasons. Amazon Information follows the shorter 30-day rule described on the Amazon SP-API Security page. You can request deletion at any time. See the Privacy Policy for details.

9.Report a Vulnerability

If you find a security problem, please email speedecomsolution@gmail.com with the details. We will acknowledge your report and keep you informed as we fix it.