Six-hour freshness
Displayed cached Etsy listing content is refreshed or discarded within six hours.
DATA / PURPOSE
What Etsy data is used and why.
Data access is limited to the connected seller's requested listing-management functions and the minimum OAuth scopes needed for V1.
| Data | Purpose |
|---|---|
| Etsy user and shop identifiers | Associate the OAuth authorization with the correct application user and shop. |
| Shop name and relevant shop configuration | Display the connected shop and populate listing forms. |
| Listing content and state | Show the connected seller's active and draft listings and prepare a new draft. |
| Listing images | Upload or manage images selected by the seller. |
| Price, quantity, SKU and basic inventory | Display and apply the seller-confirmed standard inventory offering for a new draft. |
| Shipping and processing profiles | Let the seller select existing Etsy configuration required by a listing. |
| OAuth tokens | Authenticate authorized requests to Etsy's Open API. |
Use boundaries
Etsy data is used only to provide functions requested by the connected seller. It is not sold, used for advertising, obtained by scraping Etsy pages, licensed as content or used to build unrelated data products.
- No Etsy buyer order or transaction data in V1
- No buyer email or shipping-address data
- No seller password or developer credentials
- No advertising or unrelated profiling
- No Etsy member data transfer to another marketplace
- No behavioral profiling or unrelated data-product development
Product Creator image providers
Product Creator is separate from Etsy OAuth. The user supplies either an OpenRouter or fal.ai BYOK credential, which is encrypted server-side. Only one provider key is active at a time. When generation is requested, AutoMenax sends bounded prompt context and user-provided artwork to the selected provider. OpenRouter receives the selected model; fal.ai uses Seedream for images and its vision workflow for listing copy. The result is model-generated artwork and listing copy. The seller is responsible for artwork rights, listing accuracy and the decision to upload. AutoMenax does not require a separate review approval or determine permission from keywords; completed wallpaper projects can be uploaded to the selected shop as Etsy drafts. Generated content is never represented as real Etsy performance data.
Closed-loop wallet and Stripe
New wallet funding uses Stripe Checkout. AutoMenax records top-up and ledger status and Stripe checkout, payment, refund and dispute identifiers. Historical bank-transfer and reconciliation records remain available for accounting. Full card details stay with Stripe. Credit is added from a verified Stripe webhook; a browser return never proves payment.
EtsyOkulu federation
Opening an eligible integration sends a short-lived authenticated EtsyOkulu subject credential and requested narrow scope to AutoMenax. AutoMenax independently verifies the identity and active supplier entitlement, creates or reuses an owner-scoped mapping, and issues a five-minute token whose stored form is only a one-way hash. Sensitive tool and funding writes require current AutoMenax Terms acceptance.
Display freshness
The current Etsy API Terms limit how old displayed Etsy content may be compared with Etsy. Storage is also limited to what is reasonably necessary to provide the service.
24-hour freshness
Other displayed cached Etsy content is refreshed or discarded within 24 hours.
Storage and deletion
V1 keeps only the data needed for the seller's workspace and authorized Etsy operations. The Privacy Policy provides the applicable retention details.
| Category | V1 handling |
|---|---|
| OAuth access and refresh tokens | Encrypted server-side storage; removed from active storage after disconnect, revocation, account deletion or expiry. |
| Displayed Etsy listing cache | Refresh or discard within the six-hour display-freshness limit and sooner when reasonably required by the service. |
| Other displayed Etsy content | Refresh or discard within the 24-hour display-freshness limit and sooner when reasonably required by the service. |
| Application drafts and uploaded files | Retained until the seller deletes them or requests deletion of the application workspace. |
| Image-provider credential | The selected OpenRouter or fal.ai key is encrypted server-side and retained until the user removes or replaces it, or deletes the application workspace; never returned in full after storage. |
| Product Creator artwork and output | Owner-scoped storage for the requested draft workflow; transmitted to the selected image provider only when the user initiates generation and subject to that provider's terms. |
| Wallet, Stripe and bank-transfer records | Retained for account operation, accounting, fraud prevention and payment-dispute handling, and afterwards only for applicable legal or operational obligations. Full card details are not stored by AutoMenax. |
| Terms acceptance evidence | Append-only version, document SHA-256, source client and acceptance timestamp retained as reasonably needed to demonstrate the click-through agreement. |
| Security and error logs | Limited to operational need; passwords, API secrets, OAuth tokens and full private listing payloads excluded from routine logs. |
Seller controls
The seller can decline OAuth authorization, disconnect inside the application, revoke access through Etsy and request applicable access or deletion. Disconnecting deletes stored OAuth tokens and stops future API calls but does not remove listings already submitted to Etsy.