Temu Legal addendum · Legal version v1 · Last updated: July 13, 2026

Temu Seller API Compliance

Last updated: August 24, 2026

This addendum summarizes AtlasCore alignment with Temu Seller Center API and open platform developer requirements for connected Temu seller accounts.

Independent application status

AtlasCore is an independent software application. Temu and related marks are trademarks of PDD Holdings Inc. / Whaleco Inc. or its affiliates. AtlasCore is not sponsored, endorsed, or affiliated with Temu.

Authorized API use

AtlasCore accesses Temu Seller APIs only after explicit seller OAuth consent or a merchant-pasted access/refresh token. OAuth permissions are configured in the Temu Partner Center; the authorize URL does not send a scope query string. Catalog and order reads run when the integration is enabled. Seller writes (`bg.local.goods.stock.edit`, `bg.logistics.shipment.confirm`, `bg.order.decryptshippinginfo.get`) run only when `TEMU_WRITE_APPROVED` is also true. Inbound webhooks never PUT stock.

AtlasCore does not scrape the Temu Seller Center or use undocumented data extraction methods.

Data handling controls

- Token encryption: OAuth access and refresh tokens are encrypted at rest (AES-256-GCM)

Transport security: Production traffic uses TLS 1.2+ (HTTPS). Outbound router calls use Temu MD5 request signing
Tenant isolation: Each AtlasCore user may link their own Temu seller account; one active `seller_id` is allowed platform-wide. Cross-user seller access is denied at the API layer
Webhooks: Incoming Temu webhooks are HMAC-verified over the raw body before JSON parse. Replay keys are namespaced by seller ID
Order data: Only operational fields (id, status, totals, currency, dates, line SKU/qty) are stored. Buyer and shipping fields are not persisted. Seller GETs return cache-only redacted rows

Rate limits & API discipline

- AtlasCore respects Temu API rate limits and throttles sync jobs accordingly

Polling intervals are tuned to reduce redundant API calls
Failed requests are retried with backoff without persisting excessive error detail

Seller controls

- Disconnect Temu in AtlasCore to stop sync and purge stored credentials

Revoke app access in Temu Seller Center → App & API Management as needed
Contact privacy@atlascore-market.com for data subject requests

See our Privacy Policy and Disconnect Marketplace guide.