Privacy Policy

What we collect

We collect only what the service needs to work:

• Your email address, used to sign you in and to notify you when a bulk edit finishes. We do not store passwords.
• Etsy authorization tokens, granted by you through Etsy's own consent screen, which let us read and edit your listings.
• Your listing data— titles, tags, prices, quantities, shop sections and related listing fields — copied from Etsy so the editor is fast and so we do not repeatedly query Etsy's API.
• A record of every change we make, including the previous value, so that you can undo any bulk edit.

What we do not collect

We request permission from Etsy to read and edit listings and shop sections, and nothing else. We do not request or receive your Etsy password, your sales and order history, your buyers' details, your payment or payout information, or your Etsy account email. We have no technical ability to access them.

How we protect it

Etsy authorization tokens are encrypted at rest using AES-256-GCM. The encryption key is held in our server environment and is never stored in the same database as the data it protects, so a copy of the database alone cannot be used to access any shop. All traffic is served over HTTPS. Sign-in links are single-use, expire after 15 minutes, and are stored only as irreversible hashes.

Who we share it with

We do not sell your data, and we do not share it for advertising. We use a small number of processors purely to operate the service:

• A cloud hosting provider, to run the application and database.
• An email provider, to deliver sign-in links and job notifications.

We may disclose data if required by law. If that ever happens we will tell you, unless legally prohibited from doing so.

Keeping and deleting it

We keep your listing copy and change history for as long as your shop is connected. Disconnecting a shop deletes its tokens immediately and its listing data within 30 days. You can ask us to delete your account and everything associated with it at any time by writing to support@listloom.io. We will confirm within 30 days.

Your rights

Depending on where you live, you may have the right to access, correct, export, or delete the personal data we hold about you, and to object to certain processing. Write to us at the address above and we will act on your request.

Relationship with Etsy

Listloomuses the Etsy API but is an independent product. It is not endorsed, certified, or otherwise affiliated with Etsy, Inc. Your use of Etsy itself is governed by Etsy's own privacy policy and terms.

Changes

If we make a material change to this policy we will email connected users before it takes effect.