Privacy Policy

What this covers

This policy covers Listzilla itself — the account you make here, the Etsy shop you connect, and the photographs and text you upload to it. It does not cover Etsy.com, which has its own privacy policy, or any other site this application links to.

What we collect, and why

Your account

Email address and password (stored as a salted hash, never in plain text), and whatever name you give your organization. This is what lets you sign in and keeps your data separate from every other customer’s — every table that holds your data carries your organization’s id, and the database enforces that isolation at the row level, not just in application code.

Your Etsy connection

Connecting a shop uses Etsy’s own OAuth screen — we never see your Etsy password. What we store is an access token and a refresh token, encrypted at rest, scoped to only what each feature needs: reading your listings always requires read access; letting us open a draft listing on your behalf requires a write scope you grant separately. You can revoke access on Etsy’s own site at any time, which invalidates the token immediately.

Your shop’s content

To analyze and rewrite your listings, we read your own listings’ titles, descriptions, tags, prices, photographs and — where you have granted the sales scope — a per-listing count of how many sold. Sales figures come from Etsy’s receipts endpoint; we store a count, never a buyer’s name, address or payment details.

While a shop stays connected we read those figures again about once a week, whether or not you are signed in, so that changes in views, favourites and sales can be shown over time. Disconnecting the shop stops it.

Photographs you upload

The Studio works on photographs you upload of your own products: removing a background, placing the product in a room, drawing measurement lines on it and rendering it as a studio shot. They are stored in object storage under your organization’s account.

They are not used to train any model — ours or a third party’s. Your photographs are sent to the image services listed below only to produce the result you asked for. If we ever want to learn from them, we will ask you first and you will be able to say no: training is a different purpose from running the service, and a different purpose needs your agreement rather than a new paragraph on this page.

What we deliberately do not store

Reading a competitor’s listing, or measuring how a search term is performing, does not save that listing’s title, description, price, images or id anywhere. What is cached is a set of numbers derived from it — how many listings compete for a term, how often a tag appears among the top results — shared across every customer because a word’s competition does not depend on who is asking. A figure older than thirty days is treated as out of date and measured again rather than trusted, so what you are shown is never an old number presented as a current one. Nothing traceable to another seller’s shop is ever held.

Who else sees it

We do not sell your data, and we do not share it except with the services this product is built on, each acting as a processor under our instructions:

• Supabase — the database and file storage for your account, your photographs and your listing data.
• Google (Gemini) and OpenAI — read your listing text and photographs to analyze, describe or rewrite them, and to identify what is in a photograph before the Studio runs. Google also produces the Studio’s images: the room a product is placed in. Your photograph is sent as the image being edited, which is what keeps the product itself yours.
• fal.ai — runs the models that cut a product out of its background and the studio-shot render. Some of those are third-party models hosted by fal.ai and reached through our account with them, so your photograph goes to fal.ai and no further.
• Etsy — the shop and listing data described above, read and written through Etsy’s own API under the OAuth consent you grant.
• Paddle — processes payment for a paid plan. We do not see or store your card details; Paddle is the merchant of record.
• Resend — sends account email: password resets and account notices.
• Vercel — hosts the application and its scheduled jobs.
• Sentry — receives a report when something breaks: the error, the page it happened on and your browser type. If the error happened in your browser, it may include a short recording of the clicks that led to it, with every piece of text and every image blanked out before it leaves your device.

Advertising measurement

We advertise this product on Meta’s services (Facebook and Instagram). To learn whether those advertisements actually bring anyone here, we tell Meta when certain things happen:

• that a page was viewed, and which one;
• that an account was created;
• that an Etsy shop was connected;
• that a listing was generated;
• that a checkout was opened;
• that a payment was made, and its amount — sent from our server after Paddle confirms it, not from your browser.

What is sent is that each of these happened, and nothing of what it contained. Meta is not told which shop was connected, what the listing said, which of your products it was about, or what was bought — only that the step was reached.

Sent with those events are the two cookies described above and, where we have it, your email address and the identifier of your organisation on this service. Both are hashed before they leave us: Meta receives a fingerprint that matches you if you already have an account with them, and cannot be turned back into your address if you do not. We never send your listings, your photographs, your shop’s contents or your Etsy connection to Meta, and we never send your password.

Meta does not do this only for us. It also uses what it receives for its own purposes, which makes it a controller of this data in its own right rather than a supplier acting on our instructions. For that collection we and Meta are jointly responsible, so a request about it may need to be made to Meta as well as to us, and we will tell you when that is the case. Meta’s own terms describe what it does with the data.

None of this is necessary to run the product, and nothing here depends on it. If you declined, or your browser blocks the cookies, or you use an extension that blocks Meta outright, everything continues to work exactly as it did. There is no feature behind it and no account is treated differently for it.

Why we are allowed to

Under the GDPR we need a lawful basis for each thing we do with your data, and under KVKK the same. Ours are:

• To give you what you asked for. Your account, your listings, your photographs and the images made from them are processed because that is the service you signed up for and it cannot be delivered without them.
• Your consent. Connecting an Etsy shop is a permission you grant on Etsy’s own screen, and you can withdraw it at any time — from your settings here, or on Etsy.
• Keeping the service working and safe. Error logs, request records and the counters that stop one account exhausting a shared limit. We keep these because a service nobody can debug is a service that breaks, and they hold as little as the job needs.

How long we keep it

Account and shop data for as long as your account is open. Etsy content we are permitted to hold at all is kept no longer than reasonably necessary to provide the feature it supports. The market-measurement figures described above are not tied to any account and are kept and re-measured for as long as the feature needs them, because they identify no one.

Photographs you upload, and the images made from them, are kept for 30 days and then deleted. The record of what was made stays in your history, so you can see what you asked for, but the picture itself is gone and cannot be recovered. Download anything you want to keep. There is still no way to remove a single image on its own — the control below removes everything, the bucket before the database.

You can delete everything yourself. The control is under Account, and it removes your organization’s data in full: every file in storage, then the organization record, which takes your Etsy connection, listings, drafts, job history and remaining credits with it. Your user record goes too unless you belong to another organization. It is immediate and there is no undo.

If you would rather we did it, write to support@listzilla.co from the address on the account and we will confirm when it is done. Deleting the account cancels any paid plan at the same moment, so no further charges are made. It cannot remove this application’s permission inside your Etsy account, which only you can revoke on Etsy.

Cookies

The cookie that keeps you signed in, and what is needed to protect the sign-in itself, are necessary for the site to work at all.

If a workspace has more than one Etsy shop connected, one more cookie remembers which of them you last chose, so the screens open on that shop. It holds that shop’s Etsy id and nothing else. Blocking it only means the screens open on the most recently connected shop.

Where we advertise, Meta’s measurement pixel also sets two cookies of its own, _fbp and _fbc. The first identifies your browser to Meta; the second records that you arrived from one of our advertisements. They are what lets us see that an advertisement led to an account, rather than only that it was clicked. They are advertising cookies, they are not necessary for anything the product does, and they are described in full under Advertising measurement below.

Where the law requires us to ask before writing an advertising cookie — the EEA, the United Kingdom and Switzerland — we ask, and nothing from Meta is loaded until you answer. If you decline, no such cookie is written and none of the events described below are sent. You are not asked again, and the product behaves identically either way.

Elsewhere the pixel loads without a banner, which is the ordinary practice in those countries. Wherever you are, clearing the cookies for this site removes the answer along with them and you will be asked again if asking applies to you.

Your browser can block any of them. Blocking the advertising ones costs you nothing here; blocking the sign-in cookie will stop signing in from working.

Your rights

Under the GDPR and under KVKK you can ask to see what we hold about you, ask us to correct or delete it, or withdraw consent for a connection at any time — disconnecting your Etsy shop from your Etsy settings revokes our access immediately, and you can also revoke it on Etsy’s own site. For anything this page does not cover, write to support@listzilla.co.

Changes

If this policy changes in a way that matters — a new sub-processor, a new category of data — we will update the date above and, where the change is material, tell you directly rather than leave it to be noticed.