Privacy Policy

1. Overview

Optlisting ("we", "our", or "the App") is a Shopify application that helps eBay sellers manage and optimize their eBay listings from within Shopify Admin. This Privacy Policy explains what data we collect, how we use it, and your rights regarding that data.

2. Data We Collect

Optlisting collects and processes data only from the merchant (seller) who installs the app. We do not collect, store, or process any end-customer (buyer) personal information.

Merchant Data

• Shopify store domain — used to identify your store within the app.
• Shopify session tokens — used to authenticate API calls on your behalf. Stored in our database and automatically invalidated on app uninstall.
• eBay OAuth tokens (access token & refresh token) — obtained after you connect your eBay seller account. Used to fetch your eBay listing data and analytics. Tokens are encrypted at rest and never shared with third parties.
• eBay listing data — item titles, prices, quantities, sales metrics, and view/impression analytics fetched from the eBay API on your behalf.
• eBay store subscription tier — used to display your account status within the app.
• Subscription plan — the Shopify billing plan you have chosen within the app (Pro or Growth).

What We Do NOT Collect

• End-customer (buyer) names, email addresses, or contact details.
• Order details, payment information, or shipping addresses of buyers.
• Any data from your Shopify storefront visitors.

3. How We Use Your Data

• To display and analyze your eBay listings inside Shopify Admin.
• To sync your eBay inventory and analytics data on demand.
• To calculate performance metrics (views, impressions, sales velocity).
• To process your app subscription via Shopify Billing.

We do not sell, rent, or share your data with any third parties for marketing purposes.

4. Data Storage & Security

Your data is stored in a hosted Supabase (PostgreSQL) database. We apply the following security measures:

• OAuth tokens are stored with row-level security policies.
• All data in transit is encrypted via HTTPS/TLS.
• Access to the database is restricted to the app server only.
• We retain data only while the app is installed. All data is deleted within 48 hours of app uninstall.

5. Data Retention & Deletion

When you uninstall Optlisting from your Shopify store, we automatically delete:

• Your Shopify session tokens.
• Your eBay OAuth tokens.
• All listing data synced on your behalf.
• All sync history and usage records.

This deletion is triggered immediately upon uninstall via the app/uninstalled webhook, and confirmed again 48 hours later via the shop/redact GDPR webhook.

To request deletion of your data at any time, contact us at dev@optlisting.com.

6. Third-Party Services

Optlisting integrates with the following third-party services:

• Shopify — for merchant authentication and billing. Shopify Privacy Policy
• eBay — for fetching seller listing and analytics data. eBay Privacy Policy
• Supabase — for data storage (hosted in the United States). Supabase Privacy Policy

7. Your Rights

Depending on your jurisdiction, you may have the right to access, correct, or request deletion of the data we hold about you. To exercise any of these rights, please contact us at dev@optlisting.com.

As a Shopify merchant, you may also use Shopify's built-in data request tools in your Shopify Admin.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by updating the "Last updated" date at the top of this page. Continued use of the app after changes constitutes acceptance of the updated policy.

9. Contact

If you have any questions about this Privacy Policy or our data practices, please contact us:

Optlisting
Email: dev@optlisting.com
App URL: https://app.optlisting.com