Privacy Policy | Shipping Sync

1. Data We Process

We process Etsy seller order data authorized through Etsy OAuth, including receipt and order records, shipping address details, and limited buyer contact fields when provided by Etsy.

Note: Buyer email and phone are only stored if Etsy includes them in the receipt payload. Etsy may withhold these fields based on their own privacy controls.

2. Purpose of Processing

Data is processed exclusively to synchronize Etsy orders into the application for seller-facing fulfillment operations, customer support context, and order reporting. There is no secondary use of this data.

3. Data Sharing

We do not sell personal data. We do not share Etsy-derived data with third parties for advertising, analytics, or any other commercial purpose. Data is never transferred outside of your own server infrastructure.

4. Retention

Synchronized order records remain stored in your local database until explicitly deleted. OAuth token data (access and refresh tokens) is removed from storage upon logout or a disconnect action by the seller.

To request deletion of all your data, see our Data Deletion Policy.

5. Security

OAuth 2.0 authorization code flow with PKCE (Proof Key for Code Exchange)
Server-side token exchange — tokens are never exposed in browser URLs
All database operations use PHP PDO with prepared statements
Token storage is confined to server-side file storage outside the web root

6. API Scopes Requested

This application requests only two read-only scopes:

shops_r — Read shop identity to bind synced data to the correct seller account.
transactions_r — Read receipts and order transaction data for fulfillment display.

No write scopes are requested or used at any time.

7. Contact

For privacy inquiries: support@your-domain.com