Privacy Policy

1. Who controls your information

SellerPilot is the controller of account, support and website information. For Etsy shop data processed to provide financial analysis, SellerPilot acts as a service provider or processor on the seller’s instructions. Contact contact@sellerpilotapp.com for privacy questions or rights requests.

2. Information we process

• Account information: verified email address, authentication records and workspace membership.
• Etsy shop information: shop identity, listings, product images, receipts, transactions, payment and settlement records, order destination country code and financial metadata available through Etsy’s read-only API.
• Seller information: costs, settings, display currency, alert preferences, feedback and support communications.
• Essential security information: hashed authentication secrets, encrypted OAuth tokens, OAuth state/PKCE records, safe error references and limited technical logs.
• Optional product analytics, only after consent: a random first-party visitor ID, coarse country, device/browser/OS family, normalized routes, selected feature events and batched active seconds.

3. Information we intentionally avoid

• We do not sell personal information or share it for cross-context behavioral advertising.
• We do not use advertising trackers, fingerprinting, precise geolocation, session replay, keystroke capture or page screenshots.
• We do not store raw IP addresses in product analytics.
• Buyer names, street addresses, email addresses and phone numbers are not retained in SellerPilot’s normalized financial records. Personalization text is redacted from stored financial inspection samples.
• Seller cost values, financial form contents, OAuth tokens and typed feedback are never placed in product-analytics event properties.

4. Purposes and legal bases

• To provide the service and requested Etsy financial analysis (contract or steps requested before a contract).
• To secure accounts, prevent abuse, diagnose failures and maintain service integrity (legitimate interests and legal obligations).
• To send requested one-time sign-in links and service communications (contract and legitimate interests).
• To understand product use through optional analytics (consent). You may refuse or withdraw without losing core SellerPilot functionality.
• To comply with law, establish legal claims and respond to valid authority requests (legal obligation or legitimate interests).

5. Service providers and transfers

SellerPilot uses Vercel for application hosting and edge delivery, Neon for managed database infrastructure, and Resend for requested account email. Etsy supplies shop data under your authorization and its own terms. Providers receive only the information needed for their function. Data may be processed outside your country; where required, SellerPilot relies on an adequacy decision, contractual safeguards or another lawful transfer mechanism. A current processor summary is included in the Data Processing Addendum.

6. Retention

We keep workspace and imported financial data while the workspace is active and as needed to provide the service. Authentication and OAuth attempt records expire according to their security purpose. Optional analytics identifiers expire after 180 days and sessions after 30 minutes of inactivity. Feedback, security and legal records are retained only for their operational, fraud-prevention or legal purpose. On a valid deletion request, live data is removed or de-identified subject to legal obligations, dispute preservation and ordinary backup rotation.

7. Your choices and rights

• You may request access, correction, deletion, restriction, portability or objection by emailing contact@sellerpilotapp.com.
• EEA/UK users may withdraw consent at any time and may complain to their local data-protection authority.
• Eligible US state residents may request access/knowledge, correction or deletion and may appeal a denied request. SellerPilot will not discriminate for exercising a privacy right.
• SellerPilot does not sell or share personal information for targeted advertising, so no sale/share opt-out is necessary. We still respect recognized privacy signals by leaving optional analytics off until consent.
• We may need to verify that a requester controls the relevant email or workspace before fulfilling a request. Authorized agents may be required to provide proof of authority.

8. Security

SellerPilot uses workspace-scoped authorization, encrypted Etsy tokens, hashed one-time authentication tokens, secure cookies, least-privilege Etsy scopes and access controls. No online service can guarantee absolute security. Report a suspected security issue to support@sellerpilotapp.com.

9. Children

SellerPilot is a business service for adult Etsy sellers and is not directed to children under 13. Users must be at least 18 or the age of legal majority in their jurisdiction. Contact us if you believe a child provided personal information.

10. Changes and contact

Material changes will be posted here with a new effective date and, when appropriate, additional notice. Privacy: contact@sellerpilotapp.com. Product support: support@sellerpilotapp.com.