How Wondiru works and what data it reads

Wondiru connects to your Amazon account with your permission. This page explains each step, what the screen reads and where each piece of data is kept.

Linking a screen

The screen shows a 6-character code (letters and digits) and a QR code. The code is valid for 10 minutes.
You scan the QR code with your phone, or enter the code at wondiru.com/e. The page shows which screen you are about to link, and you check that it is yours.
You choose your main Amazon store. The page then takes you to Seller Central.
You sign in on Amazon's page with your own account and authorise Wondiru. Nobody at Wondiru sees or stores your Amazon password.
Amazon sends our server an authorisation token for your account. We store it encrypted, in the European Union (AWS, Ireland).
The screen asks our server for an access token, valid for 60 minutes, and gets a new one before it expires. With it, the screen asks Amazon for your figures directly.

If the whole process takes more than 10 minutes, you start again with a new code.

What Wondiru reads and what it does not

What it reads: Totals of sales, orders and units, per day and per month, for each marketplace.; For each new order: its amount, its units and its time. The sale notice uses them.; The list of marketplaces in your account, when you authorise Wondiru.

What it does not use: Amazon's order list can include the city, postcode and country of a delivery. Wondiru does not use, show or store them. It never asks for buyer names, email addresses or street addresses.; Your Amazon password. You only type it on Amazon's page.

Wondiru asks Amazon for two roles: Inventory and Order Tracking, and Product Listing. Neither is a restricted role.

Where each thing is kept

Your authorisation: On our server, in the European Union (AWS, Ireland), encrypted with a dedicated key. The screen keeps a device token that lets it ask our server for access tokens. Each access token lasts 60 minutes. If you lose a screen, unlink it or remove Wondiru in Seller Central.
Your figures: Only on your screen. They go from Amazon straight to the screen. Our server never sees or stores orders or amounts.
Your screen's details: On our server: serial number, firmware version, last connection and the screen's settings.

Why the figures can differ from Seller Central

The screen and Seller Central do not always show the same figures, for these reasons:

The month starts at midnight in your time zone.
Each marketplace's day changes at its own local midnight.
Sales in other currencies are converted at the day's exchange rate.
Amazon can take a while to report the amount of a pending order.
The sale notice arrives one or two minutes after the sale.

For your accounting, use Amazon's reports.

How to withdraw access

You can withdraw access at any time in Seller Central. If you are signed in to your Wondiru account page, you can also unlink screens or delete your account there.

In Seller Central: Remove Wondiru from the apps you have authorised. We notice the next time one of your screens asks our server for credentials, and the screen then asks you to link it again. If no other region is still authorised, the account is deleted 30 to 32 days after we notice. If no screen of yours is switched on and online, we cannot notice: the account is then deleted at most 397 days after you gave its last authorisation, as long as the daily runs complete.
Your Wondiru account page: Unlink a screen, remove a region or delete your account. When you delete the account, we delete the Amazon authorisations we hold at once, and then everything else. If that deletion is interrupted, what is left is deleted at most 32 days later. Backups keep deleted data for at most 14 more days, and technical logs are kept as the privacy policy explains. If you remove your last region, the account is deleted 30 to 32 days later unless you authorise Wondiru again.

Unlinking a screen or deleting your account does not remove the Amazon authorisation. Wondiru stays in your Seller Central list of authorised apps until you remove it there.

Renewal every year

Amazon requires a new authorisation every 365 days, counted from the day you gave it. When it runs out, we delete the account 30 to 32 days later. To renew, link the screen again with the same steps as the first time. For now, that creates a new Wondiru account with default settings, and the old account is still deleted on that schedule.