Security and privacy
The short version: official APIs, the least access that works, and nothing changes without you.
Updated
In short
WavyCloud uses only Amazon's official APIs and consent screens, so it never sees your password. Connection tokens are encrypted, buyer names and addresses are never requested, accounts start read-only, and every change needs your confirmation. We don't train models on your data and we never sell it.
How WavyCloud connects
- Official APIs only. WavyCloud uses the Amazon Ads API and the Selling Partner API. No scraping, no browser bots, no shared passwords.
- Amazon's consent screens. You approve access on Amazon's own pages. WavyCloud never sees your Amazon password.
- OAuth for your AI app too. Your AI app signs in to WavyCloud with OAuth 2.1. You can sign it out from WavyCloud at any time.
- Encrypted tokens. The tokens Amazon issues are encrypted and stored. You can revoke them from WavyCloud or from Amazon whenever you like.
Least access that works
- Seller Central is read-only. WavyCloud can't change listings, prices, inventory or shipments.
- Ads start read-only. Changes need Allow changes on the profile, a preview and your explicit confirmation. See Changes, previews and approvals.
- No buyer data. WavyCloud never requests Amazon's restricted buyer data, so buyer names and addresses never reach your AI chat.
- Fixed report list. Seller Central reports are limited to a fixed list of types.
Where your data goes
When you ask a question, WavyCloud fetches the data from Amazon and passes it to your AI app, which uses it to answer. That means two parties handle it:
- WavyCloud. We keep your connection tokens, settings, schedules and change log. We don't train models on your data and we never sell it.
- Your AI provider. What appears in your chat follows your AI provider's data policy. Check whether your plan uses chats for training and pick the plan and settings you're comfortable with.
Revoking access
Disconnect any account in WavyCloud and we stop calling Amazon for it straight away. You can also revoke from Amazon: Apps and Services → Manage Your Apps in Seller Central, and the Login with Amazon apps list in your Amazon account for ads.
Reporting a security issue
Email hello@wavycloud.com with “Security” in the subject. A person reads it.
Frequently asked questions
Is WavyCloud made by Amazon?
No. WavyCloud is an independent company built on Amazon's official Ads API and Selling Partner API. We're not affiliated with or endorsed by Amazon.
Can WavyCloud see my customers' names or addresses?
No. Those need a special restricted data token from Amazon, and WavyCloud never asks for one.
Related
Still stuck? Email hello@wavycloud.com and a human will answer.