Security
Last updated: 24 September 2026
The short version. ArgoDeck never receives your Seller Central password. It
connects through Amazon's own authorization screen, holds only the data the permissions you
granted cover, requests no buyer personal information, and you can cut off its access from Seller
Central at any moment.
1. How ArgoDeck connects to Amazon
ArgoDeck is a Selling Partner API application. You authorize it on Amazon's own consent
screen, where Amazon shows you exactly which permissions are being requested before you
approve anything.
- We never see or store your Seller Central password. There is no point in the
process where you type it into ArgoDeck.
- Amazon issues ArgoDeck an authorization token tied to your account. That token is what
ArgoDeck uses, and it only works for the permissions you approved.
- You can revoke it at any time from Seller Central, under Apps and Services.
Revoking cuts ArgoDeck off from your account within the hour, including any repricing.
2. What data ArgoDeck accesses
Only what the permissions you granted cover. In practice that is the operational data needed to
price and account for your own listings:
- Your listings, prices and competing offer information
- Your inventory levels and inbound shipments
- Your orders, fees and financial events
- Your own account performance and analytics
ArgoDeck does not request or store buyer personal information. The Selling
Partner API classes certain roles as restricted because they expose customer PII. ArgoDeck does not
hold any of those roles, so that data is never sent to us in the first place.
3. How your data is protected
- Encryption in transit. All traffic to ArgoDeck and to Amazon runs over
HTTPS.
- Authorization tokens encrypted at rest. Your Amazon token is stored
encrypted, not in readable form, so a copy of the database alone does not grant access to your
Amazon account.
- Tenant isolation. Every record in ArgoDeck belongs to exactly one seller
account, and queries are constrained to the signed in account at the data layer rather than
relying on the application to remember. One customer cannot reach another customer's data.
- Role based access inside your account. If you invite a team member, you
choose what they can see and do.
- Sign in protection. Passwords need at least 12 characters with mixed
character types, an account locks for 30 minutes after 10 failed attempts, and every login
can add two step sign in with an authenticator app.
- Backups. The database is backed up on a nightly schedule so your history
survives a hardware failure.
4. Repricing, and your control of it
ArgoDeck can submit price changes to Amazon on your behalf. That is what the repricer does, and
it only happens on your terms:
- Repricing is off by default on every listing and is enabled per listing by
you.
- Every listing has a floor and a ceiling that you set. The engine is not
permitted to price outside them.
- Every price change is recorded with its reason, so you can see what changed,
when, and why.
- You can switch repricing off for one listing or for the whole account at any time, and
revoking ArgoDeck's Amazon access stops it regardless.
5. Retention and deletion
ArgoDeck keeps your operational data for as long as your account is active, because the history
is the product: cost history, price decisions and profit are only useful over time.
- Revoking access in Seller Central stops new data arriving within the hour, and we permanently delete the data we obtained from Amazon within 30 days of that revocation.
- On request, we delete your data. Email us and we will remove your account's
data from our live systems and from every backup within 30 days, and confirm when it is done.
- Your Amazon authorization token stops working the moment you revoke access, and it is
deleted with the rest of your data.
6. Reporting a security problem
If you believe you have found a vulnerability in ArgoDeck, tell us before telling anyone else and
we will work with you on it. Write to [email protected] with "Security report"
in the subject line. We aim to reply within two business days.
7. What this page does not claim
ArgoDeck is a young product and we would rather be precise than impressive. This page lists
controls that are in place today. It does not claim third party certifications, external
penetration testing, or compliance attestations, because we do not have them. When that changes,
this page changes.
8. Contact
ArgoDeck LLC
30 N Gould St, Ste N, Sheridan, WY 82801
[email protected]
(321) 524-2506
9. Not affiliated with Amazon
ArgoDeck is an independent product. We are not affiliated with, endorsed by, or sponsored by
Amazon.com, Inc. Amazon and all related marks are trademarks of Amazon.com, Inc. or its
affiliates.