Privacy Policy
626Labs Agentic Sales Connector · last updated 12 August 2026
This connector lets an AI assistant read your Etsy shop's performance data on your behalf. This page explains exactly what it reads, what it stores, who can see it, and how to get rid of it.
What it accesses
You grant access on Etsy's own consent screen. The connector requests four read scopes and nothing else:
| Scope | What it reads |
|---|---|
listings_r | Your listings: titles, state, views, favorites, price |
shops_r | Your shop's basic profile and stats |
transactions_r | Your orders and revenue |
feedback_r | Your reviews and ratings |
No write, edit, or delete permission is ever requested. Zero tools modify your Etsy shop. Adding any write capability in the future would require a new consent screen on Etsy, which you would have to approve.
What it stores, and for how long
| Data | Why | Retention |
|---|---|---|
| Encrypted Etsy access + refresh tokens | To read your shop without asking you to reconnect daily | Deleted immediately on disconnect |
| Daily snapshots of listing and shop metrics | Etsy's API reports lifetime totals only. Storing daily snapshots is what makes day-over-day movement possible at all | 30-day grace after disconnect, then purged |
| Optional CSV you import from Etsy's seller dashboard | Adds traffic-source data the API does not expose | 30-day grace after disconnect, then purged |
| Short-lived response cache | Cuts repeat calls against Etsy's API — a courtesy to Etsy and a speed win for you | ~6 hours |
How tokens are protected
Your Etsy credentials are typed only on etsy.com — never on this site, and this service never sees them. The resulting access tokens are encrypted with AES-256-GCM before being written to storage, using a key held in a managed secret store. They are decrypted only inside the server function at the moment a call is made.
Tokens are never returned to any client, including the AI assistant you connect. If the connection breaks or you revoke access on Etsy, tools return a structured "not connected" response with a reconnect link, rather than silently serving stale numbers.
Who can see your data
Only the account that connected the shop. Tenant ownership is resolved on the server from your authenticated identity; a client cannot ask for another tenant's data by supplying a different id. Database rules deny client access outright, and the encrypted-token record is not readable even by its owner.
Data is not sold, rented, or shared with third parties. It is not used to train machine-learning models. There is no advertising or analytics tracking on this service.
Your controls
| You want to | How |
|---|---|
| Take your data with you | The exportSnapshotHistory tool returns your full history as CSV, at any time, including the gaps |
| Disconnect | Revoke on Etsy, or disconnect here. Tokens are destroyed immediately; stored history enters a 30-day grace period so a reconnect does not lose your history |
| Delete everything now | The deleteMyData tool purges immediately and irreversibly. It requires explicit confirmation and does not act on anything less |
Sub-processors
Google Cloud Platform / Firebase hosts the service (compute, database, secret storage). Etsy is the source of the shop data. No other third party processes your data.
Changes and contact
Material changes to this policy will be reflected here with an updated date. Questions, data requests, or security reports: estevan.hernandez@gmail.com.