This policy explains how ConnectMyShop (“ConnectMyShop”, “we”, “us”) handles personal information when you visit connectmyshop.app or use the ConnectMyShop service (the “Service”). The Service connects an Etsy shop you authorize to AI assistants you choose. We act on your behalf as your service provider for your shop data.
The short version
- We collect only what we need to run the connection you asked for.
- We never sell your data and never use your shop data to train AI models.
- Your Etsy access tokens are encrypted and never shared with any AI assistant.
- You can disconnect, export or delete your data at any time.
Information we collect
Account information. Your Etsy user and shop identifiers, account settings, and any email address you provide to our waitlist or support. If you add a passkey, we store its credential identifier, public key, usage counter and creation date. The private key and your fingerprint, face or device PIN stay with your device or passkey provider; we do not receive them.
Etsy connection data. When you connect a shop through Etsy’s sign-in, Etsy gives us your shop and user identifiers, the permissions (scopes) you granted, and access and refresh tokens. We store tokens encrypted.
Shop data you ask us to access. Depending on the permissions you grant, this can include listing content (titles, descriptions, tags, prices, inventory, images), shop details, and — only if you enable order access — order information such as items, totals, dates and shipping status. Buyers’ names, addresses and contact details are never passed to AI assistants. We access this data only to answer requests from AI assistants you connected, or to show and carry out changes you approve. Where we show listing information, we link back to the listing on Etsy.
AI connection data. Which AI assistants you connected, the permissions you gave each one, hashed connection keys, and the requests they made.
Approvals and activity history. Proposed changes, before-and-after previews, your decisions, and the results of approved actions.
Technical and security data. IP address, browser type, timestamps and error logs, used to keep the Service secure and working.
Early-access sign-ups. If you join the waitlist, your email address and the optional answers you give (such as which AI assistant you use).
We do not use advertising trackers or sell data to data brokers.
How we use information
- To connect your Etsy shop to the AI assistants you choose and enforce the permissions you set.
- To show you proposed changes and carry out only the ones you approve.
- To keep an activity history you can review.
- To secure the Service, prevent abuse and respect Etsy’s API limits and policies.
- To provide support and send essential service messages (for example security or billing notices).
- To send early-access updates, if you asked for them. You can unsubscribe at any time.
- To comply with legal obligations.
Where the GDPR or UK GDPR applies, our legal bases are: performing our contract with you (running the Service), our legitimate interests (security, abuse prevention and improving reliability), your consent (early-access emails, which you can withdraw), and legal obligations.
AI assistants you connect
You direct every request from your own AI account. When an AI assistant you connected makes a request, we return the shop information that its permissions allow. That information is then processed by the AI provider under your agreement with them (for example Anthropic or OpenAI) and their privacy policy. We don’t control how AI providers handle data you share with them, so choose permissions with that in mind. We never give an AI assistant your Etsy password or Etsy access tokens.
What we never do
- Sell or rent your personal information or shop data.
- Use your shop data or conversations to train AI or machine-learning models.
- Use Etsy data for advertising, profiling or analytics beyond operating the Service for you.
- Access your shop for any purpose other than the Service you requested.
Sharing
We share information only:
- With Etsy, when we call the Etsy API on your behalf.
- With AI assistants you connect, limited to the permissions you set.
- With service providers who host and operate the Service for us (such as cloud hosting, database, email delivery and error monitoring), under contracts that restrict their use of the data. A current list is available on request at privacy@connectmyshop.app.
- When required by law, or to protect the rights and safety of our users or the public.
- With a successor if the business is merged or sold, subject to this policy.
Retention
- Cached listing data: refreshed from Etsy within 6 hours and deleted when no longer needed.
- Other cached Etsy data: refreshed or deleted within 24 hours.
- Etsy tokens: deleted immediately when you disconnect your shop or delete your account.
- Approval and activity history: kept for up to 12 months so you can review what happened, then deleted.
- Account data: kept while your account is open; deleted within 30 days of account deletion.
- Backups: encrypted backups roll off within 35 days.
- Waitlist emails: kept until launch communications end or you ask us to remove them.
Security
We use encryption in transit (HTTPS) and at rest for sensitive data such as Etsy tokens, hashed connection keys, least-privilege access and per-action approvals. No system is perfectly secure, but we work hard to protect your data. If a breach affecting your data occurs, we will notify you promptly — within 24 hours of confirming it — as well as Etsy and the relevant authorities as required. Read more on our security page.
Your rights and choices
Depending on where you live (including under Canada’s PIPEDA, the EU/UK GDPR and California’s CCPA/CPRA), you may have the right to:
- Access the personal information we hold about you and receive a copy.
- Correct inaccurate information.
- Delete your information (see how to delete your data).
- Object to or restrict certain processing, and withdraw consent.
- Data portability.
- Complain to your data-protection authority — in Canada, the Office of the Privacy Commissioner of Canada.
Email privacy@connectmyshop.app to exercise any of these rights. We respond within 30 days and won’t treat you differently for exercising them. We do not sell or “share” personal information for cross-context behavioral advertising as defined by California law.
International transfers
We are based in Canada and our service providers may process data in Canada, the United States or other countries. Where required, we use appropriate safeguards such as standard contractual clauses.
Children
The Service is for sellers who are old enough to hold an Etsy seller account and is not directed at children under 16.
Changes
We’ll post updates here and change the date above. For material changes, we’ll notify account holders by email before they take effect.
Contact
Privacy questions: privacy@connectmyshop.app
ConnectMyShop, Ontario, Canada
The term “Etsy” is a trademark of Etsy, Inc. This application uses the Etsy API but is not endorsed or certified by Etsy, Inc.