Privacy Policy & Data Protection Architecture
Effective Date: January 1, 2026 · Policy Cycle: 2026 Etsy Commercial Developer Terms
ListMend authenticates exclusively through Etsy's official OAuth 2.0 Authorization Code Grant with Proof Key for Code Exchange (S256). We never see or store your Etsy password. Access and refresh tokens are encrypted at rest using AES-256-GCM and transmitted strictly over TLS 1.3.
Clicking “Disconnect & Revoke Token” in Door 03 immediately revokes active OAuth tokens and permanently purges cached shop credentials and staged listing payloads from ListMend storage without retention delays.
ListMend requests only least-privilege catalog scopes (listings_r, listings_w, shops_r). We never request, ingest, or store buyer names, customer shipping addresses, receipts, or private buyer messages.
ListMend never crawls or screen-scrapes Etsy pages, never aggregates private shop data across sellers, and never sells or shares your SKU catalog, pricing formulas, or Printify COGS with third parties or external AI training pools.
01.Data We Process on Your Behalf
When you connect a shop via Printify Official API (Door 01), upload an Etsy Shop Manager CSV (Door 02), or authorize Etsy Open API v3 OAuth 2.0 (Door 03), ListMend processes listing metadata strictly to perform your requested audit: listing titles, descriptions, 13-slot tags, taxonomy attributes, domestic shipping prices, and variant SKU retail/COGS values.
02.Strict Human-in-the-Loop Governance
All AI-assisted title rewrites, rescued keyword tag assignments, 2026 AI creation disclosures, and penny-exact shipping margin adjustments are staged in your private Approval Queue first. No listing mutation is transmitted to Etsy or Printify until a human seller explicitly clicks Approve.
03.Data Retention, Snapshots & Deletion Rights
Pre-edit listing snapshots are stored solely so you can execute 1-click rollbacks. Disconnecting your shop or requesting account deletion immediately deletes all OAuth tokens, Printify tokens, staged optimizations, and catalog snapshots in compliance with GDPR, CCPA, and Etsy API Developer Terms.