Privacy Policy

1. Scope of this Policy

This Policy applies to EtMate, including the EtMate web application, the Private Beta, Search Pulse, Listing Score, EtMate Daily, Shop Check, Value Intelligence, profit and sales analytics, listing-management features, translation and content-generation tools, shipping estimates, support messaging, and other features made available through the EtMate service.

It does not govern Etsy's own processing of information. Etsy remains responsible for the information it collects and processes under its own privacy policy and terms.

2. Who Controls the Data

For service-account, security, support, product-usage and EtMate operational data, EtMate acts as the data controller to the extent required by applicable law.

For certain Etsy shop and transaction information processed solely to provide tools requested by a connected seller, EtMate may also act as a processor or service provider on behalf of that seller. The exact role depends on the type of data and the purpose of the processing.

3. Connecting Your Etsy Shop

EtMate uses Etsy's official OAuth authorization flow. When you choose to connect a shop, Etsy asks you to approve the permissions required by EtMate.

EtMate currently uses permissions that allow it to:

• read shop information;
• read listing information;
• update listing information when you intentionally use a feature that performs such an action; and
• read transaction/order information required for sales, performance and financial analytics.

You can revoke EtMate's Etsy authorization through Etsy. Revocation may prevent some or all EtMate functions from working.

4. Information We Process

Buyer information

EtMate is designed to minimize processing of buyer personal data. EtMate does not intentionally store buyer email addresses, buyer street addresses, payment-card numbers or banking credentials for its analytics features. Where Etsy returns information needed for a specific feature, EtMate seeks to retain only the minimum fields required for that feature.

For example, EtMate's stored sales analytics are designed around order/transaction identifiers, financial totals, timestamps, status and destination country rather than a buyer's full identity.

5. Where Information Comes From

• Etsy: information made available to EtMate through the permissions you authorize.
• You: settings, support messages, manual checks, shipping inputs, cost assumptions and instructions.
• EtMate: scores, summaries, trends, search-position history, estimates, logs and other information derived from the above data.
• Service providers: responses returned by AI, shipping or infrastructure services when you use the relevant feature.

6. Why We Process Information and Our Legal Bases

Where consent is the legally appropriate basis for a particular optional processing activity, EtMate will rely on consent and you may withdraw it at any time without affecting processing that occurred before withdrawal.

7. AI-Assisted Features

Some EtMate functions use the OpenAI API to analyze or generate content, including listing analysis, Listing Score components, Visual DNA/image analysis, tags, translations, alt text, explanatory summaries and Assistant responses.

When you invoke an AI-assisted feature, EtMate sends only the information reasonably needed for that request. Depending on the feature, this can include listing text, selected listing images and structured shop/listing context.

OpenAI states that data submitted through its API is not used to train its models by default unless the API customer explicitly opts in. OpenAI may retain certain API inputs and outputs for a limited period for service operation and abuse monitoring, subject to its current API data controls and applicable agreements. For more information, see OpenAI's business data privacy information.

EtMate may store AI-generated results, structured analyses, model identifiers and usage/cost metadata when required to provide history, avoid unnecessary repeated processing, control costs, improve reliability or display previously generated results. Assistant telemetry is designed to store request metadata rather than the full conversation text, except where a specific product function expressly stores content.

8. Service Providers and Data Sharing

EtMate does not sell personal data. Information may be shared only as reasonably necessary to provide, secure or legally operate the service.

EtMate may also disclose information in connection with a merger, acquisition, financing, reorganization, sale of assets or similar transaction, subject to applicable law and appropriate confidentiality protections.

9. International Data Transfers

Some service providers may process information outside the European Economic Area. Where GDPR transfer rules apply, EtMate relies on appropriate transfer mechanisms made available by the relevant provider, such as adequacy decisions, Standard Contractual Clauses or other lawful safeguards.

10. Data Retention

EtMate keeps information only for as long as reasonably necessary for the purposes described in this Policy, including providing historical analytics, maintaining security, resolving disputes, complying with legal obligations and enforcing agreements.

• Sessions: expire automatically and are deleted on logout or expiry.
• OAuth authorization data: retained while the Etsy connection is active or until it is revoked/replaced, subject to operational and legal requirements.
• Listing, sales and analytics history: may be retained while the account is active because historical comparison is a core EtMate function.
• Search Pulse history: retained as needed to show keyword-position trends and related changes.
• Support messages: retained as reasonably needed to resolve support issues, maintain continuity and protect against abuse.
• Security and operational logs: retained for a reasonable period based on security, troubleshooting, legal and operational needs.

If you request deletion or permanently stop using EtMate, EtMate will delete or de-identify personal data that is no longer required, subject to applicable law, security needs, legitimate legal claims and any obligations imposed by Etsy's API terms or other applicable agreements.

11. Security

EtMate uses technical and organizational measures designed to protect information, including:

• HTTPS/TLS for network communications;
• encrypted storage of Etsy OAuth tokens;
• secure session cookies and CSRF protections;
• account/shop-level access controls;
• separation of seller data by internal user and shop identifiers;
• restricted administrative access;
• logging and error monitoring used to investigate operational or security issues; and
• data-minimization practices designed to avoid storing unnecessary buyer information.

No online service can guarantee absolute security. You are responsible for protecting access to your Etsy account, your devices and any credentials used to access EtMate.

12. Cookies and Similar Technologies

EtMate uses strictly necessary first-party cookies or equivalent browser storage required to authenticate your session, maintain security and prevent cross-site request forgery. These are not advertising cookies.

EtMate does not currently rely on third-party advertising cookies or behavioral advertising trackers as part of the core service. If this changes, this Policy and any required consent mechanism will be updated.

13. Your Privacy Rights

If the GDPR or similar privacy law applies to you, you may have the right to request:

• access to your personal data;
• correction of inaccurate or incomplete data;
• erasure of personal data, where the legal conditions are met;
• restriction of processing;
• data portability, where applicable;
• objection to processing based on legitimate interests;
• withdrawal of consent where processing is based on consent; and
• information about relevant international-transfer safeguards.

You also have the right to lodge a complaint with the competent data-protection authority in your country. EtMate may need to verify your identity before completing a privacy request.

14. Seller Responsibilities

Etsy sellers remain responsible for their own compliance with privacy, consumer and data-protection laws applicable to their shop and buyer relationships.

You agree not to use EtMate to:

• upload unnecessary buyer personal data into AI or support features;
• process special-category or highly sensitive personal data unless clearly lawful and necessary;
• circumvent Etsy privacy controls, authorization scopes or platform rules; or
• use information obtained through EtMate for unlawful profiling, harassment, discrimination or other prohibited purposes.

15. Children's Privacy

EtMate is a business tool for Etsy sellers and is not directed to children. EtMate does not knowingly collect personal information from children for the purpose of providing the service. If you believe a child has provided personal information directly to EtMate, please contact us so the matter can be reviewed.

16. Changes to this Privacy Policy

EtMate may update this Policy when features, providers, legal requirements or data practices change. The revised version will be published on this page with a new effective or "last updated" date. Material changes may also be communicated within the application when appropriate.

17. Contact and Privacy Requests

Privacy questions, access/deletion requests and other data-protection requests can be submitted through the EtMate support area available in the application at board.etmate.app.

If you cannot access your EtMate account, use the public contact method made available on the EtMate website/service interface. Please do not include passwords, payment-card data or unnecessary sensitive information in a privacy request.