This Privacy Policy describes what data Lucy Seller Copilot (the "Service", "we") collects and how it is used. The Service is operated by ФОП Піцина Жанна Вікторівна (Tax ID 3275710681), registered at Ukraine, Rivne, 2 Klenova Street. Contact for privacy questions: zhannapitsyna1989@gmail.com.
1. What data we collect
When you connect your Etsy shop to Lucy Seller Copilot through official Etsy authorization (OAuth), we only get access to the data covered by the permissions you approve during authorization. This may include:
- Public shop information (name, description, sections)
- Listing data (titles, descriptions, tags, prices, photos, videos, attributes)
- Shop and listing reviews
- View and favorite statistics (where provided by the Etsy API)
We additionally store:
- Email and billing information for your subscription (processed via Stripe — we do not store card numbers)
- The OAuth access token for your shop (encrypted)
- Technical request logs for error diagnostics
2. How we use your data
Data is used solely to provide the Service's functionality to you personally:
- Analyzing listings and the shop, generating SEO recommendations
- Creating listing drafts at your direct request
- Compiling reports (daily/weekly) and delivering them to Telegram, if you've enabled that
- Support and troubleshooting
We do not sell your data to third parties, do not use it for advertising, and do not share it with other users of the Service.
3. Actions that change your shop
The Service can create listing drafts, edit them, or upload photos — but only as a direct result of your request in chat. We do not publish, edit, or delete active listings automatically without your initiation.
4. Third parties
To operate the Service, we rely on the following third-party services:
- Etsy API — to read and modify your shop's data with your permission
- Anthropic (Claude) and OpenAI (ChatGPT) — as the AI infrastructure you interact with Lucy through
- Stripe — to process subscription payments
- Telegram — optionally, for report delivery, if you've enabled that feature
- Railway — to host our server infrastructure
- Netlify — to host our public website
Each of these services has its own privacy policy that applies to how they process data on their end.
5. Data retention
Service data is stored on Railway's servers for as long as your subscription is active. OAuth tokens are stored encrypted. If you cancel your subscription or revoke Etsy access, your Service data is deleted within 30 days, except where retention is required by law (e.g., payment records for accounting purposes).
6. Your rights
- Revoke access — at any time via your Etsy account settings (Applications you've authorized)
- Cancel your subscription — at any time; access remains until the end of the paid period
- Request data deletion — by emailing zhannapitsyna1989@gmail.com
- Request a copy of your data — by emailing the same address
7. Security
We apply technical measures (token encryption, restricted database access) to protect your data. However, no method of transmitting data over the internet is completely secure, and we cannot guarantee absolute protection.
8. Children
The Service is not intended for individuals under 18. We do not knowingly collect data from minors.
9. Changes to this policy
We may update this Privacy Policy from time to time. We will notify you of material changes by email or via a notice on the site. The date of the last update is shown at the top of this page.
10. Contact
Questions about this Privacy Policy can be sent to zhannapitsyna1989@gmail.com.