Privacy policy
Listing Desk ("we", "the app", https://listingdesk.site) is a tool that helps Etsy sellers manage listings and orders in their own shops. This page explains what data the app handles and why.
What we collect
- Account data — a username and a hashed password for each Listing Desk user.
- Etsy authorization — when you connect a shop, Etsy gives the app an access token and a refresh token for that shop. They are stored encrypted (AES-256-GCM) and used only to make API calls on your behalf.
- Shop and listing data — shop name and id, shipping and return profiles, sections, and the listings you create or sync (title, tags, description, photos, variations, print files you upload).
- Order data — for paid orders: order number, items and variations bought, the buyer's name and delivery address, and any message from the buyer. This is needed to produce and ship the order.
- Technical data — server logs (request paths, timestamps, errors) kept for a short period for troubleshooting.
How we use it
- To create and update your listings on Etsy, read your paid orders, prepare them for your production partner, and add tracking numbers to orders — the functions you see in the app.
- To show you statistics about your own shops (orders, revenue).
We do not sell or rent data, do not use it for advertising, do not use Etsy data to train machine-learning models, and do not share it with anyone except the services needed to run the app: our hosting provider, and — only when you press the button — the production partner you send an order to.
Etsy data
Data obtained through the Etsy API is used only as permitted by Etsy's API Terms of Use and only to provide the app's functions to the shop owner who authorized it. Each Listing Desk account can only see the shops it connected. Buyer details are kept only while the order is being fulfilled and are removed after that; you can also delete a shop's orders from the app at any time.
Retention and deletion
- Disconnecting a shop deletes its Etsy tokens immediately.
- Deleting a store in the app deletes its connection, orders and settings.
- To delete a whole account and everything it holds, email us (see Support) and it is done within 7 days.
Security
The app is served over HTTPS only. Secrets (API keys, tokens, proxy credentials) are encrypted at rest with a key that is not stored with the data. Passwords are hashed with bcrypt.
Cookies
One session cookie keeps you logged in. No advertising or tracking cookies.
Contact
Questions about this policy or your data: support@listingdesk.site.