Privacy Policy

• Account data: name, email address, password hash, organization details, profile settings.
• Billing data: processed by Paddle (Merchant of Record). We receive limited metadata such as plan, invoice ID, country, and last-four digits — never full card numbers.
• Store data: listings, orders, images, inventory, analytics and other content pulled via connected marketplaces (e.g. Etsy).
• Usage data: pages visited, features used, timestamps, IP address, device and browser info, and diagnostic logs.
• Support data: messages you send us and support-ticket metadata.

• Provide, operate, secure, and improve the Service.
• Authenticate users and manage subscriptions.
• Sync and display data from your connected marketplaces.
• Generate AI-assisted suggestions using the content you submit.
• Detect abuse, fraud, and security incidents.
• Comply with legal obligations and enforce our Terms.

Where GDPR applies, we rely on the following legal bases:

• Contract — to deliver the Service you signed up for.
• Legitimate interests — to secure, improve, and market the Service in a proportionate way.
• Consent — for optional cookies, marketing emails, and certain integrations (which you can withdraw at any time).
• Legal obligation — to keep records for tax, accounting, and compliance.

If you are located in the European Economic Area, the United Kingdom, or a similar jurisdiction, you have the right to access, rectify, delete, restrict, or object to processing of your personal data, to data portability, and to withdraw consent where consent is the legal basis. You may also lodge a complaint with your local data protection authority. To exercise these rights, email privacy@sellpilotal.app.

We use strictly necessary cookies to keep you signed in and to remember preferences such as theme. With your consent, we may also use analytics cookies (see below). You can control cookies through your browser settings; disabling required cookies may break authentication and other Service features.

We use privacy-friendly product analytics to understand aggregate usage of the Service (feature adoption, error rates, performance). Where required by law, we request your consent before loading analytics scripts. Analytics data is stored in pseudonymous form and is not sold to third parties.

You are responsible for maintaining the confidentiality of your account credentials and for all activities that occur under your account. If you believe your account has been compromised, contact us immediately. You may delete your account at any time from settings; account deletion triggers the retention rules described below.

When you connect an Etsy shop, we use Etsy's OAuth 2.0 (PKCE) flow to obtain a limited access token scoped to the permissions you approve. We use the token only to:

• Read your shop, listings, images, inventory, and orders to power dashboards and editors.
• Write updates back to Etsy when you explicitly request them (e.g. save draft, publish edits).

Access tokens and refresh tokens are stored encrypted at rest using AES-256-GCM. Only server-side functions can decrypt them; they are never exposed to the browser. You can disconnect an Etsy shop at any time from the Integrations page, which revokes stored tokens. We do not share Etsy data with third parties except processors listed below.

We rely on a small set of trusted service providers to run the Service:

• Lovable Cloud / Supabase — application database, authentication, storage.
• Cloudflare — hosting, CDN, DDoS protection.
• Paddle — payments, invoicing, and tax as Merchant of Record.
• Etsy, Shopify, Amazon, eBay, TikTok Shop — connected marketplaces you choose to authorize.
• AI providers — used to generate suggestions from content you submit.

Personal data may be processed in countries outside your own. Where required, we rely on appropriate safeguards such as the Standard Contractual Clauses.

We keep personal data only as long as needed to provide the Service and meet legal obligations:

• Account & organization data: kept while your account is active and for up to 30 days after deletion, unless retention is required by law.
• Marketplace (Etsy) sync data: retained while the integration is connected; deleted within 30 days of disconnection or account deletion.
• Billing records: retained by Paddle and by us for up to 7 years for tax and accounting purposes.
• Diagnostic logs: typically retained for up to 90 days.
• Backups: may persist for a limited additional period before being overwritten.

We use encryption in transit (TLS) and at rest, row-level security in our database, least-privilege access, audit logging, and regular reviews. No system is perfectly secure — you use the Service at your own risk and should keep your credentials safe.

The Service is not directed to children under 16, and we do not knowingly collect their personal data.

We may update this Privacy Policy from time to time. Material changes will be communicated through the Service or by email.

For privacy questions or GDPR requests, contact privacy@sellpilotal.app. For general support, use support@sellpilotal.app.