Answers about using the platform and protecting your data.关于平台使用与数据保护的常见解答。

大橙数字信息平台 is developed and operated by G-PLUS, INC. for independent third-party Amazon sellers, including businesses with no affiliation to us. It covers stores, products/listings, orders, stock, warehouses, replenishment, sales/profit analysis, FedEx reconciliation, advertising keywords and merchant-fulfilled shipping.大橙数字信息平台由 G-PLUS, INC. 开发及运营，面向独立第三方亚马逊卖家，包括与我们无关联的企业，覆盖店铺、商品与刊登、订单、库存、仓库、补货、销售与利润分析、FedEx 对账、广告关键词和商家自配送。

The product scope covers FBA and FBM workflows. Planned marketplace coverage includes the US, Canada, South Africa, Japan, France, Germany, Italy and the UK. Confirm currently available modules, marketplace eligibility and connection requirements with our team before onboarding.产品范围覆盖 FBA 与 FBM 工作流，计划覆盖美国、加拿大、南非、日本、法国、德国、意大利及英国。开通前请与团队确认各模块的当前可用性、站点资格及接入条件。

A demonstrable version is available by appointment. Pricing is quote-based and depends on the agreed accounts, marketplaces, users, modules and service arrangements. Any trial, its scope, duration and charges must be confirmed with the team; a free trial is not automatically included.目前已有可预约演示的版本。平台采用按需报价，根据约定的账户、站点、用户、模块和服务安排确认费用。是否提供试用及其范围、周期和费用，须与团队确认，不默认包含免费试用。

See pricing or request a demo before deciding on your service scope.可先查看定价说明或预约演示，再确认服务范围。

The ERP access address is www.grandorange.net.cn ↗. ERP sign-in and Amazon seller authorization are separate steps. Signing in to the ERP does not itself grant access to Amazon information.ERP 访问地址为 www.grandorange.net.cn ↗。ERP 登录与亚马逊卖家授权是两个步骤，登录 ERP 本身不授予访问亚马逊信息的权限。

Each seller independently authorizes its own account through Amazon OAuth. We do not ask for your Amazon password, API keys or another provider’s credentials. The enabled modules, accounts and permitted operations must be agreed before access begins.每位卖家通过亚马逊 OAuth 独立授权自身账户。我们不索取亚马逊密码、API 密钥或其他服务商的凭证；开始访问前须确认启用模块、账户和允许操作。

Amazon Ads access is separately authorized. ERP sign-in or an SP-API seller connection does not automatically enable the advertising keyword module.Amazon Ads 访问单独授权；ERP 登录或 SP-API 卖家连接不会自动启用广告关键词模块。

For authorized merchant-fulfilled orders awaiting shipment, the application needs the recipient’s name, delivery address and, where required for delivery, phone number. These fields support shipment-specific address validation, carrier or service selection, rate requests, shipping-label generation and delivery.对于授权卖家待发货的商家自配送订单，应用需要收件人姓名、配送地址，以及配送所必需的联系电话，用于该票配送的地址校验、物流服务选择、运费查询、运输面单生成及包裹配送。

Order data without recipient information cannot complete these delivery tasks. The role is requested for necessary fulfillment functions, enabled only with the applicable permissions and seller authorization. Recipient PII is not used for sales analysis, buyer profiling or advertising.不含收件信息的订单数据无法完成这些配送任务，因此为必要履约功能申请该受限角色，并仅在具备适用权限及卖家授权后启用。收件人 PII 不用于销售分析、买家画像或广告。

This is a third-party product independently developed and operated by G-PLUS, INC. Amazon and related marks belong to their respective owners. References to Amazon describe the intended workflows; they do not imply Amazon sponsorship, endorsement or that every requested API permission has been granted.这是由 G-PLUS, INC. 独立开发及运营的第三方产品。Amazon 及相关商标归相应权利人所有。提及亚马逊是为了说明业务流程，不表示亚马逊赞助、背书或所有申请的 API 权限均已获批。

Revoking an Amazon authorization stops access covered by that authorization and triggers the applicable deletion rules. SP-API and Amazon Ads permissions are separate; revoke each relevant connection or ask us to disconnect it. Subscription cancellation, renewal, billing and refunds are handled under your written quote and service agreement; contact us to confirm the required cancellation steps.撤销某项亚马逊授权后，停止该授权范围内的访问，并触发相应删除规则。SP-API 与 Amazon Ads 权限彼此独立，请分别撤销相关连接或联系我们断开。订阅取消、续约、账单及退款依书面报价和服务协议处理，请联系团队确认取消步骤。

Billing matters do not justify retaining Amazon information beyond the permitted period.账单事项不能作为超过允许期限保留亚马逊信息的理由。

Data availability depends on the source API or report, Amazon processing, request limits and the connection status. Review the reporting period and last successful synchronization time. A report for a completed period is not a live snapshot, and the website does not promise a single real-time refresh interval.数据可用性取决于来源 API 或报告、亚马逊处理、调用限制及连接状态。请核对报告周期与最近成功同步时间。已完成周期的报告不是实时快照，官网不承诺统一的实时刷新间隔。

Connection grants the agreed access scope; operations depend on the modules and permissions enabled for your account. Reading information, submitting listing or inventory updates, and confirming shipments are distinct operations. We do not make changes outside the seller’s recorded authorization.连接代表授予约定的访问范围；实际操作取决于账户已启用模块及权限。读取信息、提交商品或库存更新、确认发货是不同操作，我们不在卖家已记录授权之外进行变更。

Review whether each workflow is read-only or can write changes before enabling it. A website visit or product demo does not connect an Amazon account or submit an operational change.启用前请确认各流程是只读还是可写入变更。浏览官网或参加产品演示不会连接亚马逊账户或提交业务变更。

Recommendations are estimates using sales history, stock, confirmed inbound quantities and seller-defined purchasing, transit and safety periods. Demand changes, delayed arrivals, seasonality and pack-size constraints can affect the result. Review the inputs and approve the plan before execution.建议根据销售历史、库存、已确认在途，以及卖家设置的采购、运输和安全周期进行估算。需求变化、到货延误、季节性及包装数量约束都可能影响结果，执行前应核对输入并审核计划。

You can inspect the formula in the browser planning example, which uses synthetic data and does not submit replenishment orders.可在浏览器补货示例中查看公式；示例使用虚构数据，不提交补货订单。

Team members use individual authorized accounts and receive permissions for their roles and assigned seller accounts. Shared account credentials are not permitted. Downloads and exports require permission and security checks, with record-count limits; available formats and scope depend on the enabled module.团队成员使用独立授权账户，按岗位和分配的卖家账户获得权限，不允许共享账号凭证。下载和导出须经过权限及安全校验，并限制记录数量；可用格式与范围取决于已启用模块。

A record-count limit does not grant permission to export additional PII. Every export must have a permitted purpose and contain only the necessary fields.记录数量限制不代表可以额外导出 PII；每次导出都须有允许的用途，并仅包含必要字段。

Profit review uses authorized order revenue, Amazon settlement and fee records, product costs and relevant carrier charges. FedEx reconciliation compares carrier billing with shipment and order-related records. The permitted fields and data sources are confirmed for each module.利润核对使用授权订单收入、亚马逊结算及费用记录、商品成本和相关承运商费用；FedEx 对账对照承运商账单与配送、订单相关记录。各模块的允许字段与数据来源须确认。

Check the currency, period, missing costs and included charges before relying on results. Buyer names, shipping addresses and phone numbers are not inputs to profit analysis.使用结果前应核对币种、周期、缺失成本和纳入费用；买家姓名、配送地址和电话号码不作为利润分析输入。

The advertising keyword module is connected to the Amazon Ads API. It needs separately approved advertising access and authorization from the relevant advertiser. SP-API roles do not grant Ads permissions, and delivery PII is not used for advertising.广告关键词模块已接入 Amazon Ads API，另需获准的广告访问及相关广告主授权。SP-API 角色不授予 Ads 权限，配送 PII 不用于广告。

Authorized keyword information and available performance data are handled only for the permitted advertising integration. Supported changes require explicit scope. Withdrawal or termination ends the affected processing and triggers the applicable Ads deletion requirements.授权关键词资料及可用效果数据仅为允许的广告集成处理，支持的变更须有明确范围；撤销或终止后停止受影响处理，并触发适用 Ads 删除要求。

Store connections and user permissions are defined within the authorized seller organization. Each independent customer grants its own access, and users see only the accounts assigned to them. A multi-store interface does not authorize combining different customers’ data into products or benchmarks for others.店铺连接及用户权限在授权卖家组织范围内定义，每位独立客户分别授权，用户仅查看分配给自己的账户。多店铺界面不允许将不同客户的数据汇集成向其他方提供的产品或基准。

The identified shipping carriers are FedEx, USPS and GOFO. Amazon information is submitted through approved encrypted carrier API channels only for a real authorized shipment and only to carriers selected or approved for that step. Address validation, service selection, rate requests, label generation, delivery and tracking each use only the fields necessary for that operation.已列明的配送承运商为 FedEx、USPS 和 GOFO。仅针对真实授权配送，通过获准的加密承运商 API 通道，向该环节选定或获准的承运商提交信息。地址校验、服务选择、运费查询、面单生成、配送与跟踪，各自仅使用该项操作必需的字段。

Rate requests do not automatically justify sharing every recipient field or sending an order to every carrier. Alibaba Cloud separately provides hosting, storage and cloud backups. Other recipients must be individually assessed and disclosed before access.查询运费不当然允许提供全部收件字段，也不允许向所有承运商无差别发送订单。阿里云另外提供托管、存储及云备份，其他接收方须在访问前逐一评估并披露。

Recipient and data-use details are in the privacy policy.接收方及数据用途详见隐私政策。

The warehouses in this workflow are operated by G-PLUS, INC. Authorized warehouse employees may access, according to their role, only the order, parcel and recipient information necessary to fulfill an authorized seller’s shipment. Permitted tasks are picking, packing, label handling, dispatch and necessary delivery-exception handling. Warehouse systems, electronic labels and printed documents follow the privacy policy’s access, retention and secure-deletion rules.本应用涉及的仓库由 G-PLUS, INC. 自营。经授权的仓库员工仅可按岗位权限，访问为授权卖家完成订单配送所必需的订单、包裹及收件人信息，用于拣货、包装、面单处理、发货及必要的配送异常处理。仓库系统、电子面单及纸质材料均适用隐私政策中的访问控制、保留和安全删除规则。

Application data and cloud backups are stored in Alibaba Cloud’s US (Virginia) region. The confirmed arrangement is same-region cloud backup; the choice of a cloud service alone does not establish geographic separation or a verified recovery time.应用数据和云备份均存储在阿里云美国（弗吉尼亚）地域。已确认的安排为同地域云备份；采用云服务本身不能证明地理分离或已验证的恢复时效。

Geographic backup separation, RTO/RPO targets and recovery-test evidence must be checked against the actual configuration before those capabilities are represented as available. Contact the team for the recovery arrangements applicable to your service.备份地理分离、RTO/RPO 目标及恢复测试记录，须按实际配置核实后才能作为已有能力说明。请联系团队确认适用于您服务的恢复安排。

Buyer PII is retained only for necessary merchant-fulfilled shipping, or a specific legal obligation. Restricted records are separated, assigned expiry rules and protected with AES-GCM at the application-data layer, with key strength governed by the privacy policy. Expired business records are periodically physically deleted within the applicable deadline.买家 PII 仅为必要的商家自配送或具体法律义务保留。受限记录分离管理，设置过期规则，并在应用业务数据层采用 AES-GCM 保护，密钥强度遵守隐私政策要求；在适用期限内定期物理删除过期业务记录。

Shipping PII is kept only as long as necessary and no longer than 30 days after order delivery unless a specific law requires longer retention. Revocation, termination, loss of authorization or Amazon’s deletion instruction triggers deletion within the applicable 30-day limit. The earliest applicable deadline controls; lawful exceptions are limited to the required fields, purpose and period.配送 PII 仅在必要期限内保留，不超过订单交付后 30 天；具体法律要求延长的除外。撤销、终止、失去授权或亚马逊删除指令触发适用的 30 天删除期限，按最早适用期限执行；法律例外仅限要求的字段、目的和期限。

Copies, electronic or printed labels, exports, caches and backups follow the same applicable rules. Deleting one database record is not sufficient evidence that all copies have been securely erased. See the retention and deletion policy.副本、电子或纸质面单、导出文件、缓存和备份均适用相应规则。删除一条数据库记录不足以证明所有副本均已安全清除。详见保留与删除政策。

We do not sell or rent Amazon information, aggregate different customers’ data into benchmarks or data products for others, or use buyer PII for advertising, buyer profiling or review manipulation. Buyer shipping PII is not an input to stock or sales analysis.我们不出售或出租亚马逊信息，不汇集不同客户的数据制作向其他方提供的基准或数据产品，也不将买家 PII 用于广告、买家画像或评价操纵；买家配送 PII 不作为库存或销售分析的输入。

Different customers’ access is separated. One seller’s information is not used for our automotive business or another seller’s operations. We do not publish or share insights about Amazon’s own business, or use those insights for our own business purposes.不同客户的访问相互隔离，一位卖家的信息不用于我们的汽车用品业务或另一位卖家的运营。我们不发布或分享关于亚马逊自身业务的洞察，也不将此类洞察用于自身业务目的。

In Seller Central, open Apps and Services → Manage Your Apps, find the application and choose Disable authorization, following Amazon’s current on-screen instructions. You may also contact us to request disconnection, correction or deletion. We verify identity and authority without asking for your password or tokens.可在卖家中心进入“应用和服务 → 管理您的应用”，找到应用并选择禁用授权，以亚马逊当前页面指引为准。也可联系我们申请断开、更正或删除数据；我们核验身份及权限，不索取密码或令牌。

Contact our privacy support. Revocation stops further access; retention and deletion follow the privacy policy and applicable legal exceptions.请联系隐私支持。撤销后停止进一步访问，保留与删除按照隐私政策及适用法律例外处理。

SP-API and Amazon Ads authorizations are separate. Revoke the relevant advertising grant through its applicable Amazon account settings or contact us to stop that module. Do not assume disabling an SP-API connection automatically revokes every advertising grant.SP-API 与 Amazon Ads 授权彼此独立。请通过相应亚马逊账户设置撤销广告授权，或联系我们停用该模块；不能将禁用 SP-API 连接视为自动撤销全部广告授权。

Personnel access is governed by individual accounts, multifactor authentication, job-based permissions and approved company-managed devices. Staff access through internal systems is limited to the data needed for their duties. Downloads undergo security validation and record-count limits.人员访问按独立账户、多因素身份验证、岗位权限及获准公司管理设备的要求进行管理；员工通过内部系统访问的信息仅限职责所需。下载须经过安全校验，并限制记录数量。

Monitoring rules identify abnormal downloading, copying and access and trigger risk controls and notifications to the responsible person. Depending on the event, response includes account suspension, device isolation, evidence preservation and log investigation.监控规则识别异常下载、复制和访问，触发风控并通知负责人；根据事件情况采取账号停用、设备隔离、证据保全和日志调查等措施。

Audit events include sign-ins, data access, exports, permission changes and system operations, with the event time, actor, action and success or failure result. Logs must not contain raw credentials or buyer PII, except for narrowly documented legal requirements applicable to the information.审计事件包括登录、数据访问、导出、权限变更及系统操作，记录事件时间、操作主体、操作和成功或失败结果。日志不得包含原始凭证或买家 PII；确有适用法律要求的信息，仅按有记录的必要范围处理。

Security logs are protected against unauthorized access and tampering, reviewed in real time or at least every two weeks, and retained for at least 12 months under the privacy policy.安全日志防止未经授权的访问和篡改，按隐私政策实时或至少每两周审查一次，并至少保留 12 个月。

SP-API credentials and related keys are stored in a managed key or secret management system. Recoverable API credentials are protected with AES-GCM and restricted access. Programmatic credentials must be rotated at least every 12 months, or immediately on suspected or confirmed compromise, under the credential policy.SP-API 凭证及相关密钥保存在受管理的密钥或机密管理系统中；需要可恢复调用的接口凭证采用 AES-GCM 保护并限制访问。按凭证策略，程序化凭证至少每 12 个月轮换一次，怀疑或确认泄露时立即撤销、更换。

Secrets are not embedded in public website code, client packages, public repositories or logs.机密信息不嵌入公开网站代码、客户端包、公开仓库或日志。

Development and release reviews use SpotBugs with Find Security Bugs for Java static code/security analysis, and OWASP Dependency-Check for known dependency vulnerabilities. Changes also undergo code review.开发与发布中使用 SpotBugs 配合 Find Security Bugs 检查 Java 静态代码和安全问题，使用 OWASP Dependency-Check 检查依赖中的已知漏洞，并对变更进行代码审查。

Each finding has a severity, owner, deadline and remediation priority. Remediation is retested, with discovery, fix and validation evidence retained. Policy deadlines run from discovery: critical findings within 7 days and high-risk findings within 30 days.每项问题记录风险等级、负责人、期限和修复优先级；修复后复测，保留发现、修复及验证证据。政策期限从发现之日起计算：严重漏洞 7 天内、高危漏洞 30 天内修复。

These checks cover code and dependencies. Required infrastructure scanning and penetration testing need their own coverage and evidence; tool names alone do not demonstrate that those assessments have been completed.上述检查覆盖代码和依赖；要求的基础设施扫描及渗透测试需要各自的范围与证据，仅列出工具名称不能证明这些评估已完成。

Contact gplus@grandorange.com.cn with the account or organization, approximate time and a description. Do not send buyer PII, passwords, tokens or unredacted secrets in the inquiry.请通过 gplus@grandorange.com.cn 提供账户或组织、约略时间及问题描述，勿在咨询中发送买家 PII、密码、令牌或未脱敏机密。

We escalate the incident, preserve evidence, contain affected access, investigate the cause and track corrective action. Amazon is notified immediately where its agreement requires, and no later than 24 hours after detecting a security incident involving Amazon information. Other notifications follow applicable law and agreements.我们升级事件、保全证据、限制受影响访问、调查原因并跟踪纠正措施。按亚马逊协议要求立即通知亚马逊，且在发现涉及亚马逊信息的安全事件后最迟 24 小时内通知；其他通知按适用法律和协议执行。