BFarm for Developers

BFarm is a Public Solution Provider on the Amazon Selling Partner Network. BFarm's SP-API integration is a Selling Partner API application offered to multiple Amazon sellers under managed-service agreements. Each authorized seller is a separate BFarm customer; each authorizes the integration via Login with Amazon (LWA) OAuth from inside their own Seller Central account; BFarm's operator team then runs the integration's SP-API workflows on the seller's behalf and delivers results through reports and direct updates to that seller's own Seller Central. The integration is discoverable via the Selling Partner Appstore listing.

All Amazon Information is processed on a managed-platform stack with TLS 1.2+ in transit (Vercel-managed certificates, HSTS preload) and AES-256 at rest at the storage layer plus AES-256-GCM at the application layer for SP-API tokens. Encryption keys held in Vercel Environment Variables, scoped per environment. Customer PII is never retrieved or stored. Amazon is notified within 24 hours of any confirmed security incident. Organizational changes reported within 30 days. Technical contact: security@bfarm.top. Security incidents: security@bfarm.top. Full data protection policy is published at /sp-api-compliance.

  • Product Listing role: listing optimization and content updates under seller written authorization
  • Pricing role: price updates under seller's written pricing policy
  • Amazon Fulfillment role: read-only FBA inventory and inbound shipment visibility
  • Selling Partner Insights role: account health, performance notifications, feed submission status
  • Finance and Accounting role: settlement reports for client finance reconciliation (no tax invoice generation)
  • Inventory and Order Tracking role: per-seller inventory and order-status visibility (no cross-seller aggregation) — excludes buyer address processing
  • Brand Analytics role: aggregated search, repeat-purchase, and market-basket insights for Brand Registered sellers
  • No buyer PII collected; no LLM provider, analytics platform, CRM, or data broker is a sub-processor of Amazon Information
  • Sub-processors (3 named): Vercel (hosting + managed TLS + managed datastores; Let's Encrypt is Vercel's downstream ACME CA — no direct BFarm relationship), Cloudflare DNS + WAF, Google Workspace email
  • Refresh tokens stored encrypted at rest and accessed only via least-privilege service accounts
  • Primary technical contact: security@bfarm.top
  • Security incident reporting: security@bfarm.top
Explore Services See Case Studies Read Academy Book a Strategy Call Request Free Audit

Contact

FAQ

How quickly can results appear? Technical indexing changes can be visible within days, while non-branded organic growth typically requires several weeks of execution and iteration.