This policy describes how Lanta LLC ("we," "us") collects, uses, protects, and retains data within FlowOps, our warehouse and transportation management platform, including data accessed on behalf of sellers through the Amazon Selling Partner API (SP-API) and data shared with Claude through the FlowOps connector.
FlowOps accesses Amazon order data — order IDs, line items/SKUs, quantities, and, under restricted (PII) roles, buyer name and shipping address — solely to fulfill and ship the seller's orders. We also process the operational data our customers enter to run their warehouse and transportation operations (inventory, shipments, invoices, and user accounts).
Amazon data is used only for order fulfillment, inventory reconciliation, and shipment tracking on behalf of the seller. It is never sold, rented, or used for advertising or marketing.
We share only the minimum ship-to details required by the delivery carrier (e.g. USPS, UPS, FedEx, via our shipping provider EasyPost) and only to deliver the package. We do not share Amazon data with any other third party, and we do not sell it.
Buyer PII (name and shipping address) is retained no longer than 30 days after shipment, then automatically purged by a scheduled process; only non-PII order references are kept afterward for reconciliation and audit. Security audit logs are retained for at least 12 months.
Sellers may request export or deletion of their data. PII is removed on request and on account termination. To make a request, contact us at the address below.
We maintain a documented Incident Response Plan with defined roles, containment/eradication/recovery procedures, and semi-annual reviews. If a security incident affects (or may affect) Amazon data, we notify Amazon within 24 hours, along with any other legally required parties.
FlowOps offers an optional connector that lets a FlowOps user connect Claude, an AI assistant made by Anthropic, to their FlowOps account. The connector is off unless a user turns it on by signing in to FlowOps from Claude and choosing Allow.
What Claude can access. Claude acts as the person who connected it, with that person's FlowOps permissions:
What FlowOps sends to Claude. Only the results of the requests Claude makes through the connector, such as SKUs, product names and descriptions, quantities, units, storage locations and low-stock thresholds; stock-move records (quantity changes, notes and dates); Shopify order numbers, store web addresses and warehouse status; and the name of the customer account each item, move or order belongs to. The connector does not send buyer names, shipping addresses, payment information or Amazon buyer data.
What FlowOps receives from Claude. Only the details of each request, such as a SKU, a quantity, an order number or a search filter. FlowOps does not receive your conversations with Claude.
Data in Claude. Once FlowOps returns information to Claude, Anthropic handles it under Anthropic's own terms and privacy policy and your Claude account settings. See Anthropic's privacy policy.
What we keep. For each connection we record who approved it, the workspace and the access granted, the app's registration details (name and approved return addresses), and the time it was approved. Sign-in tokens are stored only in scrambled (hashed) form. Access tokens expire after one hour. Renewal tokens expire after 30 days and are replaced each time they are used. Expired sign-in codes and tokens are deleted automatically. Approvals and refusals are recorded in our security audit log. Stock moves made through Claude are recorded in the inventory history under the user who connected Claude (or the API key used) and noted "via Claude."
Use. We use connector data only to answer the requests Claude makes on your behalf. We do not sell it, rent it, or use it for advertising or marketing.
Ending access. You can disconnect FlowOps at any time in Claude's connector settings, or ask us to revoke a connection using the contact details below. FlowOps checks every request, so access also ends as soon as a user is deactivated or a workspace is suspended. Connections made with a FlowOps API key end when the key is revoked.
We may update this policy from time to time. Material changes will be reflected by an updated "Last updated" date above.