Privacy Policy

At Etsy2Sheet, we are deeply committed to protecting your privacy and maintaining the highest standards of data security. This Privacy Policy explains in detail how we collect, use, process, and safeguard your information when you use our Chrome Extension and services.

By using Etsy2Sheet, you consent to the data practices described in this policy. We encourage you to read this policy carefully and contact us if you have any questions.

1. Information We Collect

Etsy2Sheet is designed with a privacy-first approach. We operate on a principle of minimal data collection, processing only the information absolutely necessary to provide our synchronization services.

Data Categories:

• Etsy Order Data: When you initiate a sync, we temporarily process order information from your Etsy shop including:
  • Order numbers and transaction IDs
  • Customer names and shipping addresses
  • Product details, SKUs, and variations
  • Order dates, status, and tracking information
  • Pricing and payment information
• Authentication Tokens: OAuth access tokens for Google Sheets API are stored securely in your browser's local storage using Chrome's encrypted storage APIs
• Webhook URLs: Custom webhook endpoint URLs you configure for receiving order data
• Configuration Data: Your sync preferences, field mappings, and destination settings
• Technical Data: Browser type, extension version, and error logs for troubleshooting purposes
• Usage Analytics: Anonymized metrics such as sync frequency and feature usage to improve our service

What We Do NOT Collect:

• Your Etsy login credentials or password
• Your Google account password
• Payment card information (handled securely by Paddle)
• Personal browsing history or activity outside of Etsy order pages
• Data sent to your webhook endpoints (we only transmit, not store)

Important: Etsy2Sheet operates entirely within your browser. The extension reads order data directly from Etsy's web interface when you're logged in, without requiring your credentials. This data is immediately transmitted to your chosen destination (Google Sheets or webhook) and is NOT stored on our servers.

2. How We Use Your Information

We process your information solely to provide and improve the Etsy2Sheet service. Our data usage is governed by strict principles of necessity, transparency, and user control.

Primary Uses:

• Order Synchronization: Processing and transferring your Etsy order data to your specified destination (Google Sheets or webhook endpoints) according to your custom configuration and field mappings
• Service Operation: Maintaining and operating the extension's core functionality, including authentication management, webhook delivery, and sync scheduling
• Service Improvement: Analyzing aggregated, anonymized usage patterns to enhance features, optimize performance, and identify areas for improvement
• Technical Support: Diagnosing and resolving technical issues when you contact our support team
• Security and Fraud Prevention: Detecting and preventing unauthorized access, abuse, or violations of our Terms of Service
• Legal Compliance: Meeting our legal obligations and responding to lawful requests from authorities

Our Commitments - We Will NEVER:

• Sell, rent, or trade your personal data or order information to third parties
• Share your order data with anyone other than your explicitly designated sync destination (Google Sheets or your webhook)
• Use your data for advertising or marketing purposes without your explicit opt-in consent
• Store your Etsy login credentials or passwords on our servers
• Access your synced data in Google Sheets or intercept data sent to your webhooks
• Use your customer data for our own business purposes beyond providing the service

3. Data Storage and Security

We implement comprehensive, industry-leading security measures to protect your information at every stage of processing. Your data security is our top priority.

Security Infrastructure:

• Zero Server Storage: We do not store your order data on our servers. All order information flows directly from your browser to your designated destination, eliminating central points of vulnerability
• End-to-End Encryption: All data transmissions use industry-standard HTTPS/TLS 1.2+ encryption protocols
• Secure Local Storage: Authentication tokens and configuration settings are stored locally using Chrome's encrypted storage APIs (chrome.storage.sync and chrome.storage.local)
• OAuth 2.0 Authentication: We use OAuth 2.0 for Google Sheets integration, ensuring we never have access to your actual account password
• Webhook Security: Webhook requests are sent over HTTPS with optional authentication headers you can configure
• Token Encryption: All stored tokens are encrypted at rest within your browser
• Minimal Permissions: The extension requests only the minimum necessary browser permissions
• Regular Security Audits: We conduct regular security reviews and promptly address any identified vulnerabilities

Data Access Control:

• Only you have access to your synced data through your own Google account credentials or webhook endpoints
• We cannot access the data stored in your Google Sheets or received by your webhooks
• You maintain complete control over who can view or edit your destination spreadsheets and webhook security

Security Notice: While we implement robust security measures, no system is 100% secure. You are responsible for maintaining the security of your Etsy and Google accounts, as well as securing your webhook endpoints. We recommend using strong, unique passwords, enabling two-factor authentication on all connected accounts, and implementing proper authentication for your webhooks.

4. Third-Party Services

Etsy2Sheet integrates with several trusted third-party services to deliver its functionality. Each integration is designed with privacy and security in mind. We do not control these third-party services and are not responsible for their privacy practices.

Integrated Services:

• Etsy: The extension reads order data directly from Etsy's web interface when you're logged into your seller account. We do not use Etsy's official API but instead operate as a browser extension reading publicly available data on your screen.Etsy2Sheet is not affiliated with, endorsed by, or sponsored by Etsy, Inc.
• Google Sheets API: When you choose Google Sheets as your sync destination, we use Google's official APIs to write data to your spreadsheets. We request only the minimum necessary permissions (spreadsheet creation and editing). Your Google account credentials are never shared with us.
• Webhook Endpoints: When you configure webhook integration, order data is sent directly from your browser to your specified webhook URL. We do not control, monitor, or store data sent to your webhooks. You are responsible for securing your webhook endpoints and ensuring they comply with applicable privacy laws.
• Paddle: All payment processing for premium subscriptions is handled securely by Paddle, our payment processor. We do not store or have access to your payment card information. Paddle is PCI DSS Level 1 compliant.

Third-Party Privacy Policies:

We strongly recommend reviewing the privacy policies of all integrated services:

• Etsy Privacy Policy
• Google Privacy Policy
• Paddle Privacy Policy

Data Sharing: Your order data is shared only with the specific destination you choose (Google Sheets or your webhook endpoint). We do not share your data with any other third parties for marketing, analytics, or any other purposes.

5. Data Retention

Etsy2Sheet's architecture ensures minimal data retention. Because we don't store your order data on our servers, you maintain complete control over data retention.

Retention Policies:

• Order Data: Not retained on our servers. Data exists only during the brief transmission from Etsy to your destination
• Authentication Tokens: Stored locally in your browser until you disconnect the service or uninstall the extension
• Configuration Settings: Stored locally in your browser and deleted upon extension removal
• Usage Analytics: Anonymized metrics are retained for up to 24 months for service improvement purposes
• Support Communications: If you contact support, we retain correspondence for up to 3 years for reference purposes

Your Synced Data:

• Data synced to Google Sheets is retained according to Google's policies
• Data sent to webhooks is retained according to your webhook service's policies
• You have complete control to delete, modify, or export your data from Google Sheets at any time
• We cannot access or delete data from your Google Sheets or webhook destinations

6. Your Privacy Rights

You have comprehensive rights regarding your personal data. We respect these rights and provide easy mechanisms for you to exercise them.

Your Rights Include:

• Right to Access: View all synced data directly in your Google Sheets or webhook destinations at any time
• Right to Rectification: Correct or update any data directly in your destination platform
• Right to Deletion (Right to be Forgotten): Uninstall the extension to delete all locally stored data, and delete data from your Google Sheets independently
• Right to Data Portability: Export your data in standard formats (CSV, Excel) directly from Google Sheets
• Right to Restrict Processing: Pause or stop synchronization at any time through the extension settings
• Right to Object: Discontinue use of the service and revoke OAuth permissions at any time
• Right to Withdraw Consent: Remove authorization for Google Sheets access through your account settings

To exercise any of these rights, you can:

• Manage settings directly within the extension
• Revoke permissions through your Google account settings
• Remove or modify webhook configurations in the extension settings
• Contact us at support@etsy2sheet.com for assistance

7. Cookies and Tracking Technologies

Etsy2Sheet takes a minimal approach to cookies and tracking. We respect your privacy and do not engage in invasive tracking practices.

Our Cookie Usage:

• Essential Cookies: The extension accesses Etsy's existing session cookies to read order data when you're logged in. We do not create or store our own tracking cookies
• No Third-Party Tracking: We do not use third-party analytics services, advertising networks, or tracking pixels
• No Cross-Site Tracking: The extension only operates on Etsy seller pages and authorized API endpoints
• Local Storage Only: All preferences and tokens are stored in your browser's local storage, not in cookies

8. Children's Privacy

Etsy2Sheet is a business tool designed exclusively for Etsy sellers and is not intended for use by individuals under the age of 18.

We do not knowingly collect, use, or disclose personal information from children under 18. If we become aware that we have inadvertently collected personal information from a child under 18, we will take immediate steps to delete such information from our systems.

If you believe that a child under 18 has provided us with personal information, please contact us immediately at support@etsy2sheet.com.

9. International Data Transfers

Etsy2Sheet operates globally, and your data may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from those in your jurisdiction.

When we transfer data internationally, we ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy and applicable data protection laws.

10. Data Breach Notification

In the unlikely event of a data breach that affects your personal information, we will:

• Investigate the breach promptly and thoroughly
• Notify affected users within 72 hours of becoming aware of the breach
• Provide clear information about what data was affected and what steps we're taking
• Offer guidance on protective measures you can take
• Report to relevant data protection authorities as required by law

11. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to Know: Request disclosure of the categories and specific pieces of personal information we collect
• Right to Delete: Request deletion of your personal information
• Right to Opt-Out: Opt out of the sale of your personal information (Note: We do not sell personal information)
• Right to Non-Discrimination: Exercise your privacy rights without discriminatory treatment

To exercise these rights, contact us at support@etsy2sheet.com with "CCPA Request" in the subject line.

12. European Privacy Rights (GDPR)

If you are in the European Economic Area (EEA), United Kingdom, or Switzerland, you have rights under the General Data Protection Regulation (GDPR) including those outlined in Section 6 above. Our lawful basis for processing your data includes:

• Contract Performance: Processing necessary to provide the sync services you requested
• Legitimate Interests: Improving our service and preventing fraud
• Consent: Where you have given explicit consent for specific processing activities

You also have the right to lodge a complaint with your local data protection authority if you believe we have not complied with applicable data protection laws.

13. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or other factors.

Notification of Changes:

• We will update the "Last updated" date at the top of this policy
• For material changes, we will provide prominent notice through the extension or via email
• We will maintain an archive of previous versions upon request

Your continued use of Etsy2Sheet after any changes to this Privacy Policy constitutes your acceptance of the updated terms. We encourage you to review this policy periodically.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please don't hesitate to contact us:

• Email: support@etsy2sheet.com
• Website: https://etsy2sheet.com
• Response Time: We aim to respond to all privacy inquiries within 48 hours

For data protection inquiries specifically related to GDPR or CCPA, please include "Privacy Rights Request" in your subject line to ensure prompt routing to our data protection team.