Privacy Policy

1. Information We Collect

We collect the following information:

• Account information. When you sign up, we collect your email address and an authentication identifier through our authentication provider, Supabase. We never receive or store your Etsy login credentials.
• Usage data. We store a record of your tool usage (such as the number of shop and listing lookups you have performed) in our Supabase Postgres database so we can enforce plan limits and operate the Service.
• Contact submissions. If you contact us through our contact form, we collect the name, email address, and message you provide so we can respond.
• Shop audit report requests. If you ask us to email you a free shop audit report, we collect the email address you enter, whether you chose to receive occasional selling tips, and the report itself (the shop and the public listing data it covers), so we can send the report and let you open it from a private link. We send the report once; we only send tips if you opted in.
• Analytics data. We use Umami to understand how the Service is used. Umami collects cookieless usage data such as pages visited, actions taken (for example running a tool lookup, exporting results, or starting a checkout), approximate location derived from IP address, browser, and device type. When you are signed in, we associate this analytics data with your account (your email address and account identifier) so we can understand how individual users use the Service and improve it.
• Diagnostic data. We use Sentry to monitor errors and performance so we can fix problems quickly. When something goes wrong, Sentry receives technical diagnostics such as the error message and stack trace, the page or request involved, and browser, device, and performance timing information. When you are signed in, we attach your account identifier and email address to these reports so we can reproduce and resolve the issue you hit. We do not use this data for advertising.

2. Etsy Data

The Service analyzes publicly available information from Etsy listings and shops via the Etsy API. This public marketplace data is not personal information about you, and we display it to help you research products and competitors. Connecting your own Etsy shop is optional. If you choose to, you authorise CraftRank through Etsy OAuth, so we never receive or store your Etsy password. We store only encrypted access and refresh tokens, the approved shop and listing read scopes, the transaction read scope, the listing write scope, and connection identifiers. We do not retain or display orders, receipts, revenue, or private listing data. You can disconnect at any time, which removes CraftRank's stored credentials and the change record described below. This application uses the Etsy API but is not endorsed or certified by Etsy, Inc.

Listing edits. If you edit one of your own listings in CraftRank and confirm the change, we use the listing write scope to update only the title, tags, description and materials you confirmed on Etsy. Nothing else on the listing changes, and nothing is written without your confirmation. For each change we keep a record of the fields changed and their text before and after (which can include your full listing description), so we can confirm the change reached Etsy and look into any problem with it. Change records are kept for 12 months and deleted sooner if you disconnect your shop.

3. How We Use Information

• To create and secure your account.
• To provide, maintain, and improve the Service.
• To enforce free-plan usage limits.
• To respond to your support and contact requests.
• To understand usage patterns and improve the product experience.
• To detect, prevent, and address abuse, fraud, or technical issues.

4. How We Share Information

We do not sell your personal information. We share information only with service providers who help us operate the Service, including:

• Supabase (authentication and database hosting).
• Umami (cookieless usage analytics).
• Sentry (error monitoring and performance diagnostics, hosted in the EU).
• The Etsy API, to retrieve public marketplace data.
• Anthropic (the Claude API), to write Pinterest copy when you ask for it or when automated pins are set to use AI copy. We send it the listing's title, description and tags and any keywords you add, and nothing about your account.
• OpenAI (the OpenAI API), to suggest fixes for listings in your own connected shop when you ask for AI suggestions on a paid plan. We send it that listing's title, tags, description, materials and listing type, which of CraftRank's checks it fails, and CraftRank data about its category (tags used by top listings in the category, tags from your other listings, and for phrases CraftRank has searched, how many Etsy results each has and where your listing ranks for it). We never send your orders, your contact details or anything else about your account. OpenAI does not use API data to train its models, we ask it not to store our requests, and it keeps abuse-monitoring logs for up to 30 days unless the law requires longer.
• The Pinterest API, to publish pins to your own connected Pinterest account when you publish or schedule them, or when you turn on automation, and to show you your Pinterest analytics. We keep a record of the pins CraftRank creates for you (their text, the Etsy image links used, the board and the Pinterest pin ID), your Pinterest settings in CraftRank, and the encrypted authorization tokens needed to keep your account connected. We do not store your Pinterest boards or analytics; they are read from Pinterest when you view them. You can disconnect at any time.

We may also disclose information if required by law or to protect the rights, safety, and security of our users and the Service.

5. Cookies and Tracking

We use cookies and similar technologies to keep you signed in. Our analytics provider, Umami, is cookieless and does not track you across sites. You can control cookies through your browser settings, although some features (such as staying signed in) may not work correctly if cookies are disabled.

6. Data Retention

We retain your account and usage data for as long as your account is active or as needed to provide the Service. Contact form submissions are retained for as long as necessary to handle your request. Emailed shop audit reports, and the email address they were sent to, are deleted 30 days after the request. AI fix suggestions, with the listing text they were made from and your decisions on them, are deleted 90 days after they are made. For each AI request we also keep a record without any listing text (when it was made, its size, its cost and whether it worked) for 12 months. You may request deletion of your data at any time (see "Your Rights" below).

7. Data Security

We rely on trusted infrastructure providers and reasonable technical measures to protect your information. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. Your Rights

Depending on where you live, you may have the right to access, correct, or delete your personal information, or to object to or restrict certain processing. To exercise these rights, please reach out through our contact page.

9. Children's Privacy

The Service is not directed to children under 13 (or the minimum age required in your jurisdiction), and we do not knowingly collect personal information from them.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above. Your continued use of the Service after changes take effect means you accept the updated policy.

11. Contact Us

If you have any questions about this Privacy Policy, please reach out through our contact page or email us at info@craftrank.io.