Trust and security7 min read
How we handle Amazon buyer data.
What SP-API sends us, who inside OttoCentral sees it, where it flows, and the retention clocks we run against Amazon's Data Protection Policy.
September 9, 2026
Long-form pieces on the choices behind OttoCentral: what we build, what we deliberately do not, how we handle the sensitive parts, and what we have learned running an SP-API app in production.
What SP-API sends us, who inside OttoCentral sees it, where it flows, and the retention clocks we run against Amazon's Data Protection Policy.
The tab-blindness problem, the mental model that makes a multi-marketplace panel readable, and the tradeoffs we accept to keep it that way.
More pieces land here as we write them. Two to start with.