Privacy Policy
Last updated: May 2026 · Effective immediately
1. Who We Are
Etsy Spy ("we", "our", "us") is an AI-powered Etsy seller platform operated globally. Contact us at privacy@etsyspy.app.
2. Data We Collect
Account data: Email address and encrypted password when you create an account.
Usage data: Number of AI generations used, features accessed, timestamps — to enforce plan limits and improve the product.
Tool inputs: Product descriptions sent to the AI Listing Generator are forwarded to Anthropic's Claude API and not stored by us after processing.
Payment data: Processed by Stripe. We receive only a subscription status token — we never see card numbers.
Cookies: Session cookies for authentication (httpOnly, secure). No advertising or tracking cookies.
Local storage: Generation history and calculator preferences are stored in your browser only — never sent to our servers.
3. How We Use Your Data
• Provide and improve the Etsy Spy service
• Enforce plan limits and prevent API abuse
• Send transactional emails (verification, password reset, billing)
• Respond to support requests
We do not sell your data. We do not use it to train AI models.
4. Third-Party Services
Supabase (EU servers) — Authentication and database. GDPR-compliant.
Anthropic — Claude AI. Inputs processed per Anthropic's API terms; not stored after processing.
Stripe — Payment processing. PCI-DSS Level 1 certified.
Vercel — Hosting infrastructure.
5. Data Retention
Account data retained while your account is active. Generation logs retained 90 days for abuse prevention, then auto-deleted.
6. Your Rights (GDPR & Applicable Local Law)
Access · Rectification · Erasure · Portability · Objection. Email privacy@etsyspy.app. We respond within 30 days.
7. Security
HTTPS everywhere, bcrypt passwords, httpOnly cookies, CSP headers, rate limiting on all API endpoints.
8. Contact
Questions? Email privacy@etsyspy.app or write to Etsy Spy SAS.