Privacy policy

Who we are

ShopAtlas (“we”, “us”) provides version history, change tracking, and listing management tools for Etsy sellers, available at https://shopatlas.app. For any privacy question or request, contact hello@shopatlas.app.

What we collect

When you create a ShopAtlas account and connect your Etsy shop, we collect and store:

• Your account email address from Google or an email sign-in code, to identify your ShopAtlas account and contact you about the service. Etsy OAuth connects a shop; it is not your ShopAtlas sign-in.
• Your shop's public and seller-visible data: listings (titles, descriptions, tags, prices, quantities, states, images), shop statistics (views, favorites, review counts), and historical versions of these as they change over time.
• Your shop's order history, so your audit and your timeline are built from real orders, not estimates. When Etsy includes a ship-to name or address on a receipt, we store it encrypted as part of your Record. Buyer email is a separate Etsy grant; we do not have it and we do not show it. Public audits store nothing.
• OAuth tokens required to access the Etsy API on your behalf, stored encrypted.

We never see or store your Etsy password. Running a public audit stores nothing at all: it is computed on demand from Etsy's public API, and we keep no record of a shop that has not connected.

How we use it

Your data is used solely to provide the service to you: building your shop's change history, computing trends and measurements, sending you the alerts and digests you enable, and applying edits or restores that you explicitly confirm. We do not use your shop data for advertising, and we do not train AI models on it.

What we never do

• We never sell your data.
• We never mine or aggregate your shop's data into market-research, trend, benchmarking, or any other product offered to other sellers. Your data is used for you alone.
• We never share your shop's data with other users or third parties except the service providers that host our infrastructure and a narrow destination you explicitly authorise under the integration terms below.
• We never modify your shop without an action you explicitly confirmed.
• We never mine, sell, or show another seller your buyers. Ship-to on your receipts is yours. We do not have buyer email.

You own the history ShopAtlas records for your shop: you can export it or have it deleted at any time.

Data sent to a destination you authorise

When a seller enables an integration, ShopAtlas discloses only the data needed for that feature to the destination the seller authorises. Purchase verification returns receipt and listing identifiers, quantities, paid, cancelled or refunded state, and timestamps. It does not return buyer name, username, member ID, email, postal address, payment details or free text.

A published catalogue returns only seller-selected public listing content and never returns orders, revenue, sales counts or buyer information. The destination is an independent service controlled by the seller and is responsible for its own end-user accounts, privacy notice, security and lawful use. ShopAtlas never sends it an Etsy OAuth token, refresh token, API credential or private ShopAtlas credential.

We retain bounded operational metadata for security and support: integration-key identifier, endpoint, status or error code, daily request counts and timestamps. We do not put request bodies, receipt numbers, buyer data, bearer credentials or Etsy OAuth tokens in integration logs. A seller may revoke or unpublish an integration at any time; deletion follows the live-system and backup periods stated in this policy.

Data retention and deletion

Version history is the product, so we keep your shop's history for as long as you're with us - while you keep your ShopAtlas account. If you close your account or ask us to delete your data, it is deleted from our live systems within 7 days and purged from rolling backups within 30 days. We retain billing records (our Stripe customer record and invoices) as required by accounting and tax law. You can also revoke ShopAtlas's access at any time from your Etsy account's connected-apps settings, which immediately stops all data collection - revoking access is not deletion, and your recorded history stays readable until you ask for it to be deleted.

Cookies and analytics

This site uses only the cookies necessary to operate (such as keeping you signed in once accounts exist). We do not use third-party advertising cookies.

Legal bases and your rights

We process your data to perform our contract with you, and we access your Etsy shop on the consent you grant on Etsy's own page. Under UK and EU data protection law you have the right to access, correct, export, restrict, or delete your personal data, and to complain to your supervisory authority (in the UK, the ICO). Email hello@shopatlas.app to exercise any of these rights.

Etsy

ShopAtlas uses the Etsy API under Etsy's API Terms of Use. The term “Etsy” is a trademark of Etsy, Inc. This application uses the Etsy API but is not endorsed or certified by Etsy, Inc.

Changes to this policy

If we make material changes we will update this page and, where appropriate, notify you by email before the changes take effect.