Privacy Policy

Listing Liyo is a listing management tool for Etsy sellers. It connects to your Etsy shop via Etsy's official OAuth 2.0 API to allow you to create, edit, and manage your product listings from within our platform.

We collect the following categories of personal data:

We do not collect, access, or process Etsy buyer data, customer personal information, order data, transaction records, or financial information of any kind.

We use the information we collect to:

• Provide, operate, and maintain the Service;
• Authenticate your identity and maintain your session;
• Retrieve and manage your Etsy listings on your behalf via the Etsy API;
• Improve and personalize your experience with the Service;
• Communicate with you about updates, support, and security notices;
• Comply with legal obligations.

Listing Liyo connects to Etsy exclusively through Etsy's official OAuth 2.0 Authorization Code Grant flow. This industry-standard protocol means:

• We never ask for, see, or store your Etsy password.
• You authorize access directly on Etsy's own website.
• We request only the minimum scopes necessary to operate the Service: listings_r, listings_w, listings_d, shops_r, and shops_w. The listings_d scope is used only to delete a listing when you explicitly choose to remove it from within Listing Liyo.

OAuth access tokens are stored securely and used solely to perform listing management actions on your behalf. You may revoke our access at any time from your Etsy account settings.

In full compliance with Etsy's API Terms of Use, we adhere to the following data caching policies:

• Listing data is never displayed if it is more than six (6) hours older than the corresponding information on the Etsy platform.
• All other Etsy shop data is refreshed at least every twenty-four (24) hours.

Stale cached data is not displayed to users; the Service will prompt a refresh or fetch updated data from Etsy before displaying it.

We do not sell, rent, lease, or otherwise transfer your personal data or any Etsy member data to third parties for their own commercial purposes.

We may share data with the following categories of trusted service providers, solely to operate and improve the Service:

All third-party service providers are bound by contractual data processing agreements and are prohibited from using your data for any purpose other than providing services to us.

We will disclose personal data if required to do so by law, court order, or governmental authority.

We retain your personal data only for as long as necessary to provide the Service and fulfill the purposes described in this Privacy Policy:

• Account data is retained for the duration of your account and deleted within 30 days of account closure.
• Etsy API data (listings and shop data) is deleted from our active systems within 7 days of account closure or OAuth revocation.
• Usage and technical logs are retained for up to 90 days for security and debugging purposes.

You may request deletion of your data at any time by contacting support@listingliyo.com.

We implement industry-standard technical and organizational security measures to protect your personal data, including:

• TLS/SSL encryption for all data in transit;
• Encrypted storage for OAuth tokens and sensitive credentials;
• Access controls limiting data access to authorized personnel only;
• Regular security reviews of our infrastructure.

No method of transmission over the internet or electronic storage is 100% secure. We strive to use commercially acceptable means to protect your data, but we cannot guarantee absolute security.

In the event of a data breach that compromises the security, confidentiality, or integrity of your personal data or Etsy API data, we will:

• Notify Etsy within twenty-four (24) hours of becoming aware of the breach;
• Notify affected users within twenty-four (24) hours of becoming aware of the breach, where feasible and required by applicable law;
• Provide details of the nature of the breach, the data affected, and the steps we are taking to address it.

We use cookies and similar tracking technologies to operate the Service. For full details, please see our Cookie Policy.

If you are located in the European Economic Area (EEA) or the United Kingdom, the following applies:

Legal Basis for Processing. We process your personal data on the following legal bases:

• Contract Performance: Processing necessary to provide the Service you have requested.
• Legitimate Interests: Processing for security, fraud prevention, and service improvement.
• Consent: Where we have obtained your explicit consent (e.g., for non-essential cookies).

Your Rights Under GDPR. You have the following rights regarding your personal data:

To exercise any of these rights, contact us at support@listingliyo.com. We will respond within 30 days. You also have the right to lodge a complaint with your local data protection authority.

If you are a California resident, the California Consumer Privacy Act (CCPA) grants you the following rights:

• Right to Know: Request disclosure of the categories and specific pieces of personal information we have collected about you.
• Right to Delete: Request deletion of personal information we have collected from you, subject to certain exceptions.
• Right to Opt-Out of Sale: We do not sell personal information. You therefore have no need to opt out.
• Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.

To submit a verifiable consumer request, contact us at support@listingliyo.com.

The Service is not directed to individuals under the age of 18. We do not knowingly collect personal data from children. If you believe we have inadvertently collected such information, please contact us immediately.

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the “Last Updated” date. We encourage you to review this Privacy Policy periodically.

For any questions, concerns, or requests regarding this Privacy Policy: