Etsy Integration

AutoVA is an analytics and operations platform for Etsy sellers and their teams. We help shop owners understand profit, manage inventory, fulfill orders, respond to customer messages, and coordinate work with team members and virtual assistants — all in a single workspace.

After a seller connects their shop via OAuth 2.0 with PKCE, AutoVA uses the Etsy Open API v3 to:

• Read shop profile, sections, shipping profiles and return policies.
• Read active and inactive listings, inventory, variants and images.
• Read receipts (orders), transactions, shipping addresses and tracking.
• Read the financial ledger and payouts for accounting and profit analytics.
• Read reviews, admirers and buyer messages.
• Write listing edits, inventory updates, and publish or delete listings on the seller's explicit request.
• Write tracking numbers when the seller marks an order as shipped.
• Update shop metadata (announcement, vacation mode, policies) on the seller's explicit request.

• transactions_r / transactions_w — read orders, write tracking on shipped orders.
• listings_r / listings_w / listings_d — display, edit, publish, remove the seller's listings.
• shops_r / shops_w — shop metadata, sections, shipping profiles, return policies.
• profile_r / email_r — identify the connected Etsy user.
• billing_r — payouts and ledger for accounting reports.
• address_r / address_w — buyer addresses for fulfillment.
• favorites_r / feedback_r — admirers and reviews analytics.

All Etsy data is stored in an encrypted PostgreSQL database. Row-level security policies enforce strict per-seller isolation: a workspace owner and the team members they invite can only ever access data belonging to shops connected by that workspace. OAuth refresh tokens are stored encrypted and rotated automatically. Buyer payment-card data is never requested, transmitted, or stored.

Etsy data is retained for as long as the shop remains connected. When a seller disconnects a shop from AutoVA, the shop is soft-deleted immediately and all associated Etsy data is purged within 30 days.

To disconnect a shop go to Settings → Stores → Disconnect. To request immediate deletion of all data for your account, email support@autova.io from the address registered to your account.

AutoVA is engineered to be a well-behaved API consumer:

• Every request sends an identifying User-Agent header (AutoVA/1.0).
• On HTTP 429 we respect Retry-After and the X-Remaining-This-Second / X-Remaining-Today headers, applying a cooldown of up to 15 minutes per shop.
• 5xx responses trigger exponential backoff with jitter.
• Sync work is batched into 45-second windows and deduplicated; an EMA-based scheduler avoids redundant polls.
• Failed token refreshes use a 3-strike policy before a connection is marked broken, preventing thrashing.
• All API usage per shop is logged internally for audit.

Etsy data is never sold, never shared with third parties for marketing, and is only accessible to team members the workspace owner explicitly invites. Internal staff access is limited to support cases the seller opens.

AutoVA complies with the Etsy API Terms of Use and the Etsy Developer Policy. For privacy details see our Privacy Policy and Terms of Service. For any question regarding our Etsy integration, contact support@autova.io.