Privacy Policy

This Privacy Policy explains what information ListingSlip ("we", "us") collects, how we use it, and the choices you have. Contact: hello@listingslip.com.

This policy describes ListingSlip's practices for our hosted product. If you self-host the software, your operator's policy applies to that instance.

1. Information we collect

Account data — name, email address, and authentication metadata.
Organization data — your team membership and settings.
Etsy connection data — OAuth tokens (encrypted at rest), shop id, shop name, and listing metadata we read through Etsy's official API (title, tags, URL, state, views, favorites) for shops you connect.
Derived analytics — daily views/favorites snapshots and decline verdicts we compute to provide the service (permitted derived analytics under Etsy's API Terms).
Operational data — logs, device/security signals, and usage events used to run and improve the service. We never log OAuth tokens or API secrets.

2. How we use information

We use your information to:

Provide ListingSlip (connect shops, poll stats, detect decline, suggest and apply tag/title fixes you approve, send digests/alerts you enable).
Secure the service and enforce tenant isolation.
Process payments where you subscribe to a paid plan.
Communicate with you about the product and support.

We do not sell your personal information. We do not access other sellers' shops — only shops you authorize via Etsy OAuth.

3. Etsy data and the 6-hour rule

We store numeric views/favorites time-series as derived analytics. Listing title/tags are a short-lived cache; we re-fetch them from Etsy when displaying or applying fixes so content is not shown stale beyond Etsy's caching rules. Wherever we show listing info we link back to the live Etsy listing.

4. Where your data lives

Hosted ListingSlip stores data in our Postgres database. Self-hosted operators control their own database. Encryption of OAuth tokens uses a key derived from the deployment's application secret.

We share data only with:

Etsy — when you connect or when you apply a fix (via the official API).
Payment processors (e.g. Stripe) — for paid plans.
Infrastructure providers — solely to host and operate the service.
Legal requirements — when required by law.

6. Retention

We retain account and analytics data while your account is active. You may disconnect Etsy (tokens deleted) or close your account; we delete or return data in line with this policy and applicable law. Snapshots may be retained while you use the service so decline detection works.

7. Security

We enforce multi-tenant isolation (including Postgres row-level security), encrypt tokens at rest, and connect as a least-privilege database role. No system is perfectly secure, but isolation is treated as a guarantee.

8. Your choices

Access, correct, or delete account data by contacting us.
Disconnect your Etsy shop at any time from the product.
Opt out of marketing-style email (weekly digest / daily alerts) via notification preferences and unsubscribe links.
Close your account by contacting hello@listingslip.com.