Privacy Policy

1. Information We Collect

To provide listing optimization and search analysis tools, we collect and process specific information:

• Account Information: When you register, we collect your email address and credentials securely.
• OAuth Tokens: When you connect your Etsy shop, we store temporary OAuth tokens to read your shop catalog. If you opt in to write access, the same connection lets us save the listing changes you explicitly make. You approve every permission on Etsy and can revoke it at any time.
• Etsy Catalog Data: We access listing titles, descriptions, categories, tags, images, and prices to calculate optimization suggestions.
• Shop Calibration Data: We retrieve public, shop-level counters (such as sales and review counts) only to calibrate the estimates we show you — for example, turning a public review count into a sales estimate. We access just the public information needed to provide the features you request, and we never save individual buyer transactions or personal buyer information.

2. How We Store & Secure Your Data

We employ strict security practices to keep your credentials and Etsy authorization tokens safe:

• Minimal, Read-Only by Default: We request read-only access by default. Write access — to save listing edits or create drafts — is optional and only requested if you explicitly opt in, and is used only for changes you trigger. We never request permission to edit your billing, financial, or payout data.
• Token Encryption: Etsy OAuth refresh tokens are encrypted at rest using AES-256 before being stored in our database.
• No Selling of Data: We do not sell, rent, or trade your personal or shop data to third-party advertising companies. Your data is used exclusively to power the VieRank suite.
• Data Roles: When you connect Etsy, you are the data controller and VieRank acts as the data processor for the shop content we access on your behalf. We process it solely to provide the services you request, in accordance with this Policy and applicable privacy laws.
• Caching & Retention: We cache Etsy data only as long as reasonably necessary to run the Service, and refresh it in line with Etsy's freshness requirements — listing content within 6 hours, and other Etsy content within 24 hours. We do not retain Etsy content longer than needed to provide the features you request.
• Security Incident Notification: If Etsy shop data accessed through the Etsy API is ever compromised, or we reasonably suspect it has been, we will notify the affected seller and Etsy without undue delay and within 24 hours of discovering the incident, as required by Etsy's API Terms.

3. Your Control Over Your Data

You retain full control over your shop access and account data at all times:

• Disconnect Anytime: You can disconnect your shop at any point under the **Settings > Connections** panel in your dashboard. Disconnecting instantly revokes the OAuth token and deletes local shop cache metadata.
• Etsy Direct Revocation: You can also revoke VieRank's access to your Etsy data at any time by visiting etsy.com/your/apps.
• Data Erasure (Account Deletion): You may request the full deletion of your account and all associated tokens and metadata. We commit to executing data erasure requests within 7 business days.

4. Connecting Pinterest (Optional)

Connecting Pinterest is entirely optional and separate from your Etsy connection. VieRank never uses it unless you link an account yourself.

• How We Connect: We authenticate only through Pinterest's official OAuth 2.0 flow — you approve the permissions on Pinterest's own screen. We never ask for, collect, or store your Pinterest password, and we never use Pinterest session cookies or any other login method.
• Permissions We Request: Read your account name, and read and create your public boards and Pins (user_accounts:read, boards:read, boards:write, pins:read, pins:write). We deliberately do not request access to your secret boards, your ads, or your analytics.
• What We Store: Your Pinterest access and refresh tokens, encrypted at rest with AES-256; your Pinterest username and account ID; and a record of each Pin created through VieRank (its title, description, link, image, and board) so you have a history of your own activity.
• You Approve Every Pin: VieRank posts a Pin only when you review that specific Pin and confirm it. There is no automatic or bulk posting, and we never create, edit, or save Pins on your behalf without that explicit, per-Pin approval.
• Images: To publish a Pin, we fetch the image you selected and send it to Pinterest as part of that Pin. We send Pinterest only the content of the Pin you approved.
• Disconnect Anytime: Use the Disconnect button on the Pinterest page in your dashboard — it deletes the stored tokens from our database immediately. You can also revoke VieRank's access directly from your Pinterest account settings. Pins already published stay on your Pinterest account and remain yours to edit or delete there.

5. GDPR & CCPA Compliance

Depending on your location, you may have specific rights regarding your personal data under the European Union General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA). This includes the right to access, rectify, delete, or restrict processing of your personal information.

To exercise any of these rights, please contact our support team at support@vierank.com.

6. Third-Party Service Providers

VieRank relies on a small set of trusted processors to run the Service. They only receive the data needed for their function, and never your Etsy OAuth tokens:

• AI / model provider: when you use a generation or analysis tool (titles, tags, descriptions, the VieRank Assistant), the text you submit — and for image/video tools, your prompts and any reference images — is sent to our AI provider to produce the result. It is used only to generate your output, not to train models on your behalf.
• Payments — Stripe: billing and card processing. Your full card details go directly to Stripe and are never stored on our servers.
• Email — Resend: transactional emails (verification, password reset, alerts).
• Sign-in with Google (optional): if you choose Google login, Google confirms your identity; we receive only your email and basic profile.
• Infrastructure — Cloudflare: hosting, database, and storage. Data is processed on Cloudflare's edge network.

We do not sell your data, and we require every provider to handle it under appropriate confidentiality and data-protection terms.