Every connection runs through Amazon's own SP-API authorization. You approve specific, limited data scopes, you can revoke them at any time from Seller Central, and nobody at Refunzo ever logs into your account directly.
Refunzo is an Amazon SPN Software Partner and an Amazon Ads Advanced Partner. We do not currently hold a SOC 2 certification. If independent certification matters for your account, GETIDA publishes one and it's a legitimate reason to weigh it against Refunzo's fee structure. Access is scoped through Amazon's own SP-API OAuth model rather than a shared login, which limits exposure independent of that certification.