Privacy Policy

AutoVA ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our e-commerce analytics platform.

We collect information that you provide directly to us, including:

• Account information (name, email address, password)
• Store connection data from integrated platforms (Etsy, Shopify, Amazon, eBay)
• Order and financial data synced from your connected stores
• Product information and inventory data
• Payment information for subscription billing
• Communications you send to us

When you connect your marketplace accounts, we access and process:

• Etsy: Shop details, orders, transactions, listings, reviews, and financial ledger data via the Etsy API v3
• Shopify: Store information, orders, products, and inventory via the Shopify GraphQL Admin API
• Amazon: Seller Central orders, fees, and settlement data via the Selling Partner API (SP-API)
• eBay: Order history, fees, and account data via the eBay Browse & Sell APIs

On supported Etsy and eBay product pages for which you grant Chrome site access, the extension reads limited, publicly visible listing information to show research in its side panel. This can include the listing URL, title, displayed price and currency, seller, product images and description, category, materials, available options, badges, and item-scoped rating and review count. A displayed price is a page observation, not a verified sale or an estimate of demand.

If you enable the extension's "Save visible listing facts to Nexus" setting while signed in to AutoVA, these product observations are sent through your authenticated AutoVA session and retained in the Nexus research dataset. Public listing observations may be used to show comparable-product research to other AutoVA merchants. This does not give other merchants access to your private connected-store, order, buyer, or session data. This browser observation flow does not collect your marketplace login credentials, review text, form entries, or the full page HTML.

You can turn off "Save visible listing facts to Nexus" in the extension settings and revoke Etsy or eBay site access in Chrome to stop future observations. For questions or a request concerning information already stored, contact support@autova.io.

We use the information we collect to:

• Provide, maintain, and improve our services
• Calculate and display your profit analytics
• Process transactions and send related notifications
• Send you technical notices and support messages
• Respond to your comments and questions
• Detect and prevent fraudulent activity

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. All data is encrypted in transit using TLS 1.2+ and at rest using AES-256 encryption. Marketplace API credentials are stored using industry-standard encryption and are never exposed in logs or error messages. We use secure OAuth 2.0 flows for all marketplace connections.

We do not sell your personal information. We may share your information with:

• Service providers who assist in our operations
• Professional advisors (lawyers, accountants) as needed
• Law enforcement when required by law
• Third parties in connection with a merger or acquisition

You have the right to:

• Access your personal information
• Correct inaccurate data
• Request deletion of your data
• Object to processing of your data
• Export your data in a portable format
• Withdraw consent at any time

We retain your information for as long as your account is active or as needed to provide you services. We may retain certain information as required by law or for legitimate business purposes. When you delete your account, we will delete or anonymize your information within 30 days.

We use cookies and similar technologies to enhance your experience, analyze usage patterns, and personalize content. You can control cookie preferences through your browser settings. For more details, see our Cookie Policy.

Our service integrates with third-party platforms like Etsy, Shopify, Amazon, eBay, and Walmart. When you connect these platforms, we access data in accordance with their API terms. Please review the privacy policies of these platforms for information about their data practices.

When you connect an Etsy shop to AutoVA via OAuth, we access only the data required to operate the features you use. All requests follow the Etsy Open API v3 and the Etsy API Terms of Use.

Data we retrieve and store: shop profile (name, currency, country, icon), active and inactive listings, inventory and variants, receipts/orders and their items, shipping addresses for receipts you process, financial ledger entries, payouts, reviews, and admirers/favoriters counts. We never request or store buyer payment-card data.

OAuth scopes we request and why:

• transactions_r / transactions_w — read orders, write tracking numbers on shipped orders.
• listings_r / listings_w / listings_d — display, edit, publish and remove your own listings.
• shops_r / shops_w — shop metadata, sections, shipping profiles, return policies.
• profile_r / email_r — identify the connected Etsy user.
• billing_r — fetch payouts and ledger for accounting reports.
• address_r / address_w — buyer addresses for fulfillment.
• favorites_r / feedback_r — admirers and reviews analytics.

Retention: Etsy data is retained for as long as the shop remains connected. When you disconnect a shop in AutoVA, the shop is soft-deleted immediately and all associated Etsy data is purged within 30 days.

See our Etsy Integration page for full details on scopes, data usage, and our rate-limit compliance.

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. Continued use of our service after changes constitutes acceptance of the updated policy.

We support automated account deletion requests from marketplace platforms. When you disconnect your account or request deletion through eBay, Shopify, or other supported platforms, we receive a webhook notification and automatically remove your associated data within 30 days. This includes anonymizing order data while retaining aggregate financial data for your records where legally required.