Data Retention & Deletion
This application is designed to hold as little data as possible. It requests no buyer personally identifiable information (PII) and no SP-API roles that would expose it.
Retention schedule
| Product cache | Our own SKU, ASIN, FNSKU, title, price, stock and listing status. Retained only while the listing is in use; overwritten on each synchronisation and removed when the SKU is removed from the active catalogue. Contains no PII. |
|---|---|
| Administrator password hash | A salted scrypt hash held as an environment variable. Retained until the next credential rotation, at least annually and within 365 days. |
| TOTP seed | Held as an environment variable; rotated with the password and immediately after any suspected compromise. |
| Session records | Only SHA-256 hashes with an expiry of at most 8 hours. Expired rows are deleted at application start and on every login. Logout deletes the row immediately. |
| Login attempt counters | A single counter row for the current one-minute window; reset on each new window. No historical login records are kept. |
| Runtime and error logs | Retained by the hosting provider for its standard short operational window. They contain no Amazon tokens, no passwords and no buyer data. |
| Label documents | FNSKU label PDFs generated for printing are transient files on the local agent and are removed after the print job completes. |
Incidental PII
Deletion on request or termination
On a verified data subject request, on termination of the selling account, or on decommissioning of this application, the Account Administrator drops the application database, removes the environment variables, revokes the SP-API authorisation and refresh token, deletes local label files, and confirms that no copy remains in the hosting account. Requests can be sent to privacy@hub.magirig.com.
Backups
Backups are managed by the hosting provider, encrypted at rest, and used only for disaster recovery. Because no buyer PII is stored, backups do not extend any PII retention period.
No sale or secondary use
Data is used solely for operating our own shop. It is never sold, shared for advertising, used to build profiles, or combined with data from other sellers.