Privacy Policy

How we protect and use your data

Last updated: January 2025

1. Information We Collect

Data from Etsy via OAuth

When you connect your Etsy account, we collect:

  • Shop Information: Shop name, ID, currency, vacation status
  • Listing Data: Titles, descriptions, prices, images, categories, tags
  • User Profile: Etsy user ID and basic profile information
  • OAuth Tokens: Access and refresh tokens (encrypted)

Account Information

  • Email address (from Clerk authentication)
  • Name and profile information
  • Account creation and login timestamps

Usage Data

  • API requests and responses (for compliance and debugging)
  • Feature usage patterns
  • Error logs and system performance data

2. How We Use Your Information

Primary Services

  • Create, edit, and manage your Etsy listings
  • Validate listing compliance with Etsy requirements
  • Process bulk imports from CSV files
  • Provide listing analytics and insights

Service Improvement

  • Monitor system performance and reliability
  • Debug issues and improve features
  • Analyze usage patterns to enhance user experience
  • Ensure compliance with Etsy's API requirements

Communication

  • Send service updates and important notifications
  • Respond to support requests
  • Notify about policy changes

3. Data Storage and Security

Encryption

  • All OAuth tokens are encrypted using AES-256 encryption
  • Data transmission uses TLS/SSL encryption
  • Database connections are encrypted

Access Controls

  • Row-level security ensures users only access their own data
  • API endpoints require authentication
  • Administrative access is logged and monitored

Data Minimization

  • We only collect data necessary for service functionality
  • Unused data is regularly purged
  • API responses are not stored beyond necessary audit logs

4. Data Sharing

We do not sell, rent, or share your personal data with third parties, except:

Service Providers

  • Clerk: Authentication and user management
  • Supabase: Database hosting and management
  • Vercel: Application hosting and deployment

Legal Requirements

  • When required by law or legal process
  • To protect our rights or the rights of others
  • In connection with a business transfer or merger

5. Data Retention

  • Account Data: Retained while your account is active
  • Listing Data: Retained for service functionality
  • Audit Logs: Retained for 12 months for compliance
  • OAuth Tokens: Deleted when you revoke access

6. Your Rights and Controls

Access and Portability

  • View all your data through the application dashboard
  • Export your listing data in CSV format
  • Request a complete data export

Correction and Deletion

  • Edit your listings and account information directly
  • Request data correction or deletion
  • Delete your account and associated data

Revoking Access

To disconnect ListFerry from your Etsy account:

  1. Go to Etsy → Shop Manager → Apps → Connected apps
  2. Find ListFerry and click "Revoke"
  3. Your OAuth tokens will be immediately invalidated
  4. Contact us to delete remaining data

7. GDPR Compliance

If you are in the European Union, you have additional rights under GDPR:

  • Right to Access: Request copies of your personal data
  • Right to Rectification: Correct inaccurate data
  • Right to Erasure: Request deletion of your data
  • Right to Portability: Receive your data in a structured format
  • Right to Object: Object to processing of your data
  • Right to Restrict: Request limited processing

8. Cookies and Tracking

We use minimal cookies for:

  • Authentication sessions (Clerk)
  • Application functionality
  • Security and fraud prevention

We do not use tracking cookies for advertising or analytics.

9. Children's Privacy

ListFerry is not intended for users under 18. We do not knowingly collect personal information from children under 18. If you believe we have collected such information, please contact us immediately.

10. International Data Transfers

Your data may be processed in countries other than your own. We ensure appropriate safeguards are in place for international transfers, including encryption and contractual protections.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through the application. Your continued use constitutes acceptance of the updated policy.

12. Contact Us

For privacy-related questions, data requests, or to exercise your rights:

Email: help@listferry.com

Address: Floor 2 Bedok House, High Road, Swindon, Wiltshire, SN6 6NX, UK

Subject Line for Data Requests: "Data Request"

Response Time: We respond within 1-2 business days

Etsy Integration Notice

This application uses Etsy's API to provide listing management services. "Etsy" is a trademark of Etsy, Inc. This application is not endorsed or certified by Etsy.