Privacy, authorization, and control — clearly explained.

1. Scope and who we are

Swanyo is a software product and service brand operated by PETRIX GLOBAL LIMITED (派瑞克斯环球有限公司), a company incorporated in Hong Kong under Company No. 80525791.

For this Privacy Notice, PETRIX GLOBAL LIMITED is the operator of the Swanyo website and service and is responsible for the personal information described below. "Swanyo", "we", and "us" refer to this service and its legal operator.

Swanyo is a business-to-business software service for sellers, brands, advertisers, and their authorized teams. Available capabilities connect to the Amazon Selling Partner API (SP-API) and Amazon Ads API. Swanyo is also developing a direct Google Ads API integration using its own OAuth application and developer token for authorized reporting, diagnostics, recommendations, and individually confirmed campaign actions.

In this notice, “Amazon Information” means information obtained from Amazon APIs or derived from that information, and “Google Ads Information” means information obtained from the Google Ads API or derived from that information. Some capabilities are introduced in stages. We do not collect information for a capability until it is enabled and used by an authorized business. Swanyo is an independent service and is not owned, operated, or endorsed by Amazon or Google.

2. Information we process

Depending on the connected platform, roles, accounts, marketplaces, and Swanyo features that an authorized business chooses to use, we may process:

• Account and business information: name, work email, company or team name, password hash, and account role.
• Amazon authorization information: OAuth authorization codes, access and refresh tokens, seller and advertiser identifiers, marketplace and region identifiers, and granted roles or permissions. Swanyo does not ask for or receive your Amazon username or password.
• Product and listing information: ASINs, SKUs, catalog attributes, listing status and issues, images, A+ content, product metadata, and sustainability certification information or supporting documents.
• Pricing information: offers, competitive and market-price signals, seller prices, pricing recommendations, and records of user-approved price changes.
• Inventory, fulfillment, and shipping information: FBA and AWD inventory, inbound plans and shipments, warehouse movements, replenishment status, eligible Amazon Shipping services, rates, shipment status, tracking information, and shipping documents where enabled.
• Order and buyer-workflow information: order identifiers and status, ordered items, sales totals, Amazon-approved buyer communication actions, message content needed for an order-related workflow, and review or feedback solicitation status. These workflows may contain personal information supplied through Amazon and are used only for the authorized transaction or communication.
• Financial information: settlements, fees, reimbursements, returns, storage charges, and other accounting records made available through authorized Amazon APIs. Swanyo does not use this information to generate tax invoices unless a separately approved feature and role are introduced.
• Seller and brand analytics: sales and traffic, account and operational performance, Search Query Performance, repeat-purchase metrics, and other reports available to the authorized seller or brand.
• Amazon Advertising data: campaigns, ad groups, ads, products, keywords and targets, bids, budgets, status, and reporting metrics such as impressions, clicks, spend, attributed orders, and sales.
• Google Ads authorization and advertising data, after the direct integration is enabled and used: OAuth authorization codes and tokens, accessible manager and customer account identifiers, campaigns, ad groups, ads, assets, keywords and criteria, bids, budgets, status, and reporting metrics such as impressions, clicks, cost, conversions, and conversion value. Swanyo does not ask for or receive your Google password.
• Instructions and operating records: reports, optimization requests, recommendations, approvals, changes, and audit records generated through the service.
• Technical and security information: IP address, browser or device information, request time, and diagnostic and security logs. We use essential browser local storage for sign-in sessions and product preferences. We do not use third-party advertising cookies on our public website as of the effective date above.
• Public-site language preference: before you choose a language, the public website may send your IP address to Country.is to obtain a country code and select Chinese for visitors in mainland China or English elsewhere. Swanyo uses the returned country code only for this initial language choice and stores your selected language in browser local storage. A manual language choice overrides automatic detection. Country detection may be inaccurate, including when a proxy or VPN is used.

3. How and why we use information

We use Amazon Information, Google Ads Information, and other business information only to provide, secure, support, and improve the authorized Swanyo service. We do not use it for unrelated consumer profiling, and we do not sell, license, or publicly disclose it.

• Authenticate users, administer business workspaces, enforce role-based access, and provide customer support.
• Connect directly to SP-API, Amazon Ads API, and, when enabled, Google Ads API under the selling partner’s or advertiser’s express authorization.
• Retrieve, organize, display, and analyze products, listings, prices, inventory, orders, fulfillment, shipping, finances, certifications, seller performance, brand analytics, and advertising performance.
• Prepare operational dashboards, alerts, forecasts, reconciliation, reports, and traceable recommendations.
• Support Amazon-approved buyer communications and review or feedback solicitations when those features are enabled and requested by an authorized user.
• Execute a listing, pricing, shipping, certification, or advertising action only when requested and individually confirmed by a user with the required workspace permission.
• Protect the service, investigate errors or abuse, maintain audit records, and meet legal, contractual, Amazon, and Google policy obligations.

4. Platform authorization, roles, and withdrawal

Connecting a seller or advertising account requires an authorized account administrator to grant Swanyo access through the relevant platform authorization process. For Google Ads, Swanyo will use a direct multi-user OAuth 2.0 flow with the Google Ads scope and its own developer token; it will not collect Google passwords. We access only the accounts, marketplaces, roles, and permissions covered by that authorization.

Within Swanyo, access is separated by business workspace and limited by assigned roles. Workspace owners and administrators control membership, store and advertising account connections, credentials, and permissions. Users cannot access another business workspace’s connected platform information through the normal service.

You may stop future access by disconnecting the relevant integration in Swanyo and revoking Swanyo in Amazon or Google account authorization settings. Revocation stops new API access but does not automatically remove information previously imported into Swanyo. Follow Section 9 to request deletion of retained information.

5. AI-assisted and automated features

When an authorized user invokes an AI-assisted workflow, Swanyo may send the instructions and the minimum Amazon-derived or Google Ads-derived operational information needed for that task to a configured model provider. Current model-provider options may include DeepSeek, Moonshot AI (Kimi), and Zhipu AI. Availability may vary by workspace and may change over time.

Swanyo does not intentionally send Amazon or Google usernames, passwords, application client secrets, developer tokens, or OAuth access or refresh tokens to model providers. Planned buyer-communication and shipping workflows will not route buyer message bodies, recipient addresses, or shipping documents to model providers unless appropriate controls are implemented and the authorized business is clearly informed.

AI output is used for analysis, drafting, and recommendations. Material listing, pricing, shipping, certification, advertising, or external-communication actions require an authorized workflow and, where supported, user review or confirmation. We do not use AI output as the sole basis for legal or similarly significant decisions about individuals.

6. When we share information

We disclose information only in the limited circumstances below. We do not sell Amazon Information or Google Ads Information, provide it to advertising networks, or disclose it publicly.

• Amazon: to authenticate authorizations and make the SP-API or Amazon Ads API calls requested through the service.
• Google: after the direct integration is enabled, to authenticate OAuth authorizations and make Google Ads API calls requested through the service.
• Infrastructure and service providers: vendors that provide hosting, storage, backups, security, communications, error monitoring, or other services needed to operate Swanyo. They receive only the information needed for that service.
• Website localization provider: Country.is may receive the requesting IP address when the public website performs an initial country lookup. Swanyo receives a country code and uses it only to select the initial public-site language.
• AI model providers: configured providers such as DeepSeek, Moonshot AI (Kimi), or Zhipu AI, only when an authorized user invokes an AI-assisted workflow as described in Section 5.
• Business administrators: authorized members of the same Swanyo business workspace, according to their access role.
• Business-directed integrations: an ERP, WMS, OMS, export destination, or other third party selected by an authorized workspace administrator.
• Legal, compliance, and safety reasons: when required by law or reasonably necessary to comply with applicable platform policies, respond to lawful process, investigate abuse, or protect users, connected platforms, Swanyo, or others.
• Corporate events: in connection with a proposed financing, reorganization, merger, or sale, subject to confidentiality and applicable law. We will provide notice when required.

7. Security

We use administrative, technical, and organizational safeguards designed to protect information. Current application controls include HTTPS/TLS in transit, encrypted storage for authorization credentials, password hashing, masked credential displays, tenant-scoped role-based access, audit and usage records, confirmation controls for supported material actions, restricted production access, and access-restricted backup rotation. No storage or transmission method is completely secure.

We limit access to connected platform information according to job responsibilities and workspace permissions, and we seek to collect only information needed for an authorized feature. Credentials and other secrets must not be placed in public repositories, user prompts, support messages, or exported reports.

To report a suspected privacy or security issue, provide the affected account, a description, relevant timestamps, and safe reproduction details. Do not include passwords, active tokens, or other secrets. We will investigate and make notices required by applicable law, platform policies, and our contractual obligations.

8. Storage and retention

Authorization credentials are retained while the connection is active or as needed to complete an authorized request, and are removed or disabled after a verified disconnection or deletion request, subject to technical and legal requirements.

Amazon Information, Google Ads Information, and derived operating records are retained only for the period reasonably necessary to provide the enabled service, preserve history requested by the business, maintain auditability, resolve disputes or security issues, and meet legal or platform policy obligations. Buyer communications, solicitation records, shipping information, and other transaction-level information are retained for the shortest period reasonably necessary for the authorized workflow and required records.

When information is no longer required, or after a verified deletion request, we delete or de-identify it from active systems. Unless a shorter period is required, we aim to complete applicable active-system deletion within 30 days after verification. Access-restricted backup copies expire through the normal backup rotation; if a backup is restored, applicable deletion requests are reapplied.

9. Access, disconnection, and data deletion

Subject to applicable law and account authority, a business workspace administrator may request access, correction, export, restriction, or deletion of account information and connected platform information. To submit a request:

1. Disconnect the relevant SP-API, Amazon Ads, or Google Ads integration in Swanyo and revoke its authorization in the applicable platform account to stop new collection.
2. Email privacy@swanyo.com from the work email associated with your Swanyo account. Use the subject “Swanyo Data Deletion Request”.
3. Include your business or workspace name, relevant seller, store, manager, customer, or advertiser account identifiers, and whether you want to delete integration data, the Swanyo account, or both. Do not send passwords, authorization codes, or tokens.
4. We will verify the requester’s authority, confirm the scope, stop related synchronization, remove applicable credentials and active-system data, and send a completion notice. We may retain narrowly limited records where required by law, platform policy, fraud prevention, security, dispute handling, or proof of the request.

10. International processing and children

Swanyo and its service providers may process information in countries other than the user’s location. Where required, we use appropriate contractual and technical safeguards for such processing.

Swanyo is a business service and is not directed to children. We do not knowingly collect personal information from children.

11. Changes and contact

We may update this notice to reflect product, legal, platform policy, vendor, or security changes. We will publish the revised notice here and change the effective date; material changes may also be communicated through the service or by email.

Questions, privacy requests, deletion requests, and security reports may be sent to privacy@swanyo.com. The legal operator is PETRIX GLOBAL LIMITED (派瑞克斯环球有限公司), Hong Kong Company No. 80525791, registered at Room A19, 1/F, AA28, 28 Austin Road, Tsim Sha Tsui, Hong Kong.

Amazon, Amazon Ads, Selling Partner API, Google, and Google Ads, and related marks are trademarks of their respective owners. References to those services describe interoperability and do not imply endorsement.

1. 适用范围与服务主体

Swanyo 是由 PETRIX GLOBAL LIMITED（派瑞克斯环球有限公司，香港公司编号：80525791）运营的软件产品与服务品牌。

在本隐私政策中，PETRIX GLOBAL LIMITED 是 Swanyo 网站与服务的运营主体，并对下述个人信息处理负责；“Swanyo”及“我们”均指该服务及其法律运营主体。

Swanyo 是面向卖家、品牌方、广告主及其授权团队的企业软件服务。当前可用能力可连接 Amazon Selling Partner API（SP-API）与 Amazon Ads API。Swanyo 还在使用自有 OAuth 应用和 Developer Token 开发 Google Ads API 直接集成，用于获授权的报表、诊断、建议，以及逐项人工确认后的广告操作。

本政策中的“Amazon 信息”是指从 Amazon API 获取的信息及其衍生信息，“Google Ads 信息”是指从 Google Ads API 获取的信息及其衍生信息。相关能力可能分阶段上线；在某项能力实际启用并由授权企业使用前，我们不会因该能力收集相关信息。Swanyo 是独立服务，并非 Amazon 或 Google 所有、运营或认可。

2. 我们处理的信息

根据授权企业选择使用的连接平台、角色、账号、站点与 Swanyo 功能，我们可能处理：

• 账号与企业信息：姓名、工作邮箱、公司或团队名称、密码哈希和账号角色。
• Amazon 授权信息：OAuth 授权码、access token、refresh token、卖家及广告主标识、站点、区域标识和已授予的角色或权限。Swanyo 不会要求或获取你的 Amazon 用户名和密码。
• 商品与 Listing 信息：ASIN、SKU、目录属性、Listing 状态与问题、图片、A+ 内容、商品元数据，以及可持续认证信息或证明文件。
• 定价信息：Offer、竞品及市场价格信号、卖家价格、定价建议，以及经用户批准的价格变更记录。
• 库存、履约与配送信息：FBA 与 AWD 库存、入库计划与货件、仓储变动、补货状态、可用 Amazon Shipping 服务、费率、货件状态、追踪信息，以及启用功能所需的配送文件。
• 订单与买家流程信息：订单标识与状态、订购商品、销售额、Amazon 允许的买家沟通操作、订单相关流程所需的消息内容，以及评论或反馈请求状态。此类流程可能包含 Amazon 提供的个人信息，我们仅将其用于获授权的交易或沟通。
• 财务信息：结算、费用、赔偿、退货、仓储费及通过获授权 Amazon API 提供的其他会计记录。除非未来上线单独获批的功能和角色，否则 Swanyo 不使用这些信息生成税务发票。
• 卖家与品牌分析：销售与流量、账号与经营绩效、Search Query Performance、复购指标，以及授权卖家或品牌可获取的其他报表。
• Amazon 广告数据：Campaign、广告组、广告、商品、关键词与投放目标、竞价、预算、状态，以及曝光、点击、花费、归因订单和销售额等报表指标。
• Google Ads 授权及广告数据（在直接集成启用并由你使用后）：OAuth 授权码及 Token、可访问的经理账号与客户账号标识、Campaign、广告组、广告、素材、关键词与条件、竞价、预算、状态，以及曝光、点击、费用、转化和转化价值等报表指标。Swanyo 不会要求或获取你的 Google 密码。
• 指令与操作记录：你在服务中生成的报表、优化请求、建议、审批、变更和审计记录。
• 技术与安全信息：IP 地址、浏览器或设备信息、请求时间、诊断与安全日志。我们使用必要的浏览器本地存储维持登录状态和产品偏好；截至本政策生效日，公开网站不使用第三方广告 Cookie。
• 公开网站语言偏好：在你主动选择语言前，公开网站可能将你的 IP 地址发送给 Country.is，以获取国家代码；中国大陆访问者初始显示中文，其他地区初始显示英文。Swanyo 仅将返回的国家代码用于首次语言选择，并在浏览器本地存储中保存你选择的语言。手动选择始终优先。使用代理或 VPN 等情况下，国家判断可能不准确。

3. 信息使用目的

我们仅为提供、保护、支持和改进经授权的 Swanyo 服务而使用 Amazon 信息、Google Ads 信息及其他企业信息。我们不会将其用于无关的消费者画像，也不会出售、许可或公开披露相关信息。

• 验证用户身份、管理企业工作区、执行基于角色的权限控制并提供客户支持。
• 在卖家或广告主明确授权范围内直接连接 SP-API、Amazon Ads API，以及启用后的 Google Ads API。
• 读取、整理、展示和分析商品、Listing、价格、库存、订单、履约、配送、财务、认证、卖家绩效、品牌分析和广告表现。
• 生成经营看板、预警、预测、对账、报表及可追溯建议。
• 在相关功能启用且授权用户请求时，支持 Amazon 允许的买家沟通以及评论或反馈请求。
• 仅在具备所需工作区权限的用户请求并逐项确认后，执行 Listing、定价、配送、认证或广告操作。
• 保障服务安全、排查故障或滥用、保留审计记录并履行法律、合同、Amazon 与 Google 政策义务。

4. 平台授权、角色与撤回

连接卖家或广告账号时，须由具备权限的账号管理员通过对应平台授权流程向 Swanyo 授权。Google Ads 将使用 Swanyo 自有 Developer Token 和面向多用户的 OAuth 2.0 直接授权流程，并使用 Google Ads scope；Swanyo 不会收集 Google 密码。我们仅访问该授权所覆盖的账号、站点、角色与权限。

在 Swanyo 内，信息按企业工作区隔离，并受所分配角色限制。工作区所有者和管理员负责管理成员、店铺及广告账号连接、凭证与权限；正常服务流程不会允许用户访问其他企业工作区的已连接平台信息。

你可以在 Swanyo 中断开对应集成，并在 Amazon 或 Google 账号授权设置中撤销 Swanyo 权限，以停止新的 API 访问。撤销授权不会自动删除此前已导入的信息；如需删除保留信息，请按照第 9 节操作。

5. AI 辅助与自动化功能

当授权用户主动调用 AI 辅助流程时，Swanyo 可能将完成该任务所需的指令，以及最低必要的 Amazon 衍生或 Google Ads 衍生经营信息发送给已配置的模型服务商。当前可选模型服务商可能包括 DeepSeek、Moonshot AI（Kimi）和智谱 AI；具体可用情况因工作区而异，也可能随时间调整。

Swanyo 不会有意将 Amazon 或 Google 用户名、密码、应用 Client Secret、Developer Token、OAuth access token 或 refresh token 发送给模型服务商。计划中的买家沟通及配送流程，在落实相应控制并向授权企业清晰告知前，不会将买家消息正文、收件地址或配送文件发送给模型服务商。

AI 输出用于分析、起草和建议。Listing、定价、配送、认证、广告或对外沟通等重要操作须通过获授权流程，并在相关功能支持时由用户审核或确认。我们不会仅依据 AI 输出对个人作出法律或类似重大影响的决定。

6. 信息共享范围

我们仅在以下有限情形披露信息。我们不会出售 Amazon 信息或 Google Ads 信息、向广告网络提供这些信息或将其公开披露。

• Amazon：用于验证授权，并执行你通过服务请求的 SP-API 或 Amazon Ads API 调用。
• Google：在直接集成启用后，用于验证 OAuth 授权，并执行你通过服务请求的 Google Ads API 调用。
• 基础设施与服务供应商：为 Swanyo 提供托管、存储、备份、安全、通信、错误监控或其他必要服务的供应商；其仅接收提供对应服务所需的信息。
• 网站本地化供应商：公开网站首次查询国家时，Country.is 可能接收请求方 IP 地址。Swanyo 接收国家代码，并仅用于选择公开网站的初始语言。
• AI 模型服务商：仅在授权用户调用第 5 节所述 AI 辅助流程时，向 DeepSeek、Moonshot AI（Kimi）、智谱 AI 等已配置服务商提供必要内容。
• 企业管理员：根据访问角色，向同一 Swanyo 企业工作区内的授权成员提供信息。
• 企业指定的集成：由获授权工作区管理员选择的 ERP、WMS、OMS、导出目标或其他第三方。
• 法律、合规与安全：法律要求，或为遵守适用平台政策、响应合法程序、调查滥用、保护用户、已连接平台、Swanyo 或他人权益所合理必需时。
• 企业事项：与拟议融资、重组、合并或出售相关，且受保密义务与适用法律约束；法律要求时我们会另行通知。

7. 数据安全

我们采取旨在保护信息的管理、技术和组织措施。当前应用控制包括 HTTPS/TLS 传输、授权凭证加密保存、密码哈希、凭证掩码显示、租户范围的角色权限、审计与用量记录、已支持重要操作的确认控制、生产环境权限限制及访问受限的备份轮换。但任何存储或传输方式均无法保证绝对安全。

我们根据岗位职责和工作区权限限制已连接平台信息访问，并尽量只收集获授权功能所需的信息。不得将凭证及其他密钥放入公共代码仓库、用户 Prompt、客服消息或导出报表。

如发现隐私或安全问题，请说明受影响账号、问题描述、相关时间和不含敏感信息的复现方法。请勿发送密码、有效 Token 或其他密钥。我们将开展调查，并按照适用法律、平台政策和合同义务发送必要通知。

8. 存储与保存期限

授权凭证仅在连接有效期间或完成已授权请求所需时间内保存，并在经验证的断开连接或删除请求后，依照技术与法律要求予以移除或停用。

Amazon 信息、Google Ads 信息及衍生经营记录仅在提供已启用服务、保留企业要求的历史、维持可审计性、处理争议或安全问题，以及履行法律或平台政策义务所合理需要的期限内保存。买家沟通、索评记录、配送信息及其他交易级信息，仅在完成获授权流程及保存必要记录所需的最短合理期限内保留。

信息不再需要或收到经验证的删除请求后，我们会从活动系统删除或去标识化。除非适用更短期限，我们力求在验证后 30 天内完成适用的活动系统删除。访问受限的备份副本会随正常备份轮换到期；如恢复备份，相关删除请求将重新执行。

9. 访问、解绑与数据删除

在适用法律及账号权限允许范围内，企业工作区管理员可以申请访问、更正、导出、限制或删除账号信息及已连接平台信息。申请步骤如下：

1. 在 Swanyo 中断开对应 SP-API、Amazon Ads 或 Google Ads 集成，并在对应平台账号中撤销其授权，以停止新增数据。
2. 使用 Swanyo 账号关联的工作邮箱发送邮件至 privacy@swanyo.com，主题填写“Swanyo Data Deletion Request”。
3. 注明企业或工作区名称、相关卖家、店铺、经理、客户或广告主账号标识，以及需要删除集成数据、Swanyo 账号或两者。请勿发送密码、授权码或 Token。
4. 我们将验证申请人权限、确认范围、停止相关同步、删除适用的授权凭证和活动系统数据，并发送完成通知。因法律、平台政策、反欺诈、安全、争议处理或证明申请所必需时，我们可能保留范围严格受限的记录。

10. 跨境处理与未成年人

Swanyo 及服务提供商可能在用户所在地以外的国家或地区处理信息。适用法律要求时，我们会采取相应合同和技术保护措施。

Swanyo 是企业服务，不面向未成年人。我们不会故意收集未成年人的个人信息。

11. 政策更新与联系方式

我们可能因产品、法律、平台政策、供应商或安全变化更新本政策。更新后会在本页面发布并修改生效日期；如变化重大，还可能通过服务内通知或邮件告知。

隐私咨询、删除申请和安全问题可发送至 privacy@swanyo.com。法律运营主体为 PETRIX GLOBAL LIMITED（派瑞克斯环球有限公司，香港公司编号：80525791），注册地址：香港尖沙咀柯士甸道 28 号 AA28 大厦 1 楼 A19 室。

Amazon、Amazon Ads、Selling Partner API、Google、Google Ads 及相关标识均为其各自权利人的商标。提及这些服务仅用于说明互操作性，并不表示获得其认可。