WallArtTools ("we", "us", "our") operates the website wallarttools.com and the related application (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use our Service.
1. Information We Collect
1.1 Account Information
When you create an account we collect your name, email address, a hashed password (we never store plain-text passwords), and the billing information needed to operate the Service.
1.2 Content You Upload
We store the artwork, images, print files, mockups and product texts you upload or create within the Service in order to provide listing creation, mockup generation and production features.
1.3 Etsy Data via the Etsy Open API v3
When you connect an Etsy shop using OAuth 2.0, and only with your explicit consent within the scopes you grant, we receive and store the data necessary to provide the Service, including:
- OAuth access and refresh tokens (encrypted at rest)
- Shop profile: shop ID, shop name, currency and seller policies
- Listings, inventory, images, tags, categories and shop sections
- Shipping profiles and fulfillment settings
- Orders, receipts and transactions, including buyer name, buyer email and shipping address — used solely to fulfill those orders (e.g. preparing print files and shipping labels)
- Reviews of your listings
- Aggregate analytics data such as views, favorites and revenue
We never receive your Etsy password. You can revoke our access at any time from your Etsy account settings or from your WallArtTools dashboard.
1.4 Usage Data
We collect log data such as IP address, browser type, pages visited, and timestamps in order to operate, secure and improve the Service.
1.5 Cookies
We use only a first-party session cookie for authentication and a cookie that remembers your language preference. We do not use third-party advertising trackers. You can disable cookies in your browser, but parts of the Service may not function correctly without them.
2. How We Use Information
- To provide listing creation and management for your Etsy shop, as explicitly requested by you
- To fulfill orders: generating print files, packing slips and shipping labels, and tracking production status
- To provide shop analytics and reporting
- To run marketing automation (e.g. pricing campaigns, listing text optimization) that you explicitly configure and trigger
- To process payments and manage subscriptions
- To detect, prevent and address fraud and security issues
- To communicate with you about updates, support and billing
3. Sharing of Information
We never sell your personal data. We share data only with the processors required to operate the Service:
- Etsy, Inc. — to provide the integration you authorized
- Payment processors (Stripe) — to process subscriptions and credit purchases
- Cloud hosting providers — to host the Service and store your data
- Email delivery providers — to send transactional emails (e.g. notifications, password resets)
- OpenAI — when you invoke AI features (e.g. AI artwork, listing text generation), the prompts, listing text and images involved in that request are sent to OpenAI to generate the content. No buyer personal data (names, emails, shipping addresses) is ever sent to AI providers.
- Authorities — when required by law, subpoena or to protect rights and safety
4. Storage, Retention & Deletion
Data is stored encrypted at rest where applicable; in particular, Etsy OAuth tokens are encrypted. We retain your data for as long as your account is active. When you delete your account — or request deletion by contacting support@wallarttools.com — we delete your personal data and stored Etsy data, except where a limited retention period is required for legal or accounting compliance.
5. Etsy API Compliance
The term "Etsy" is a trademark of Etsy, Inc. This application uses the Etsy API but is not endorsed or certified by Etsy, Inc.
Data obtained through the Etsy API is used exclusively to provide functionality to you, the shop owner. It is never used for advertising, profiling or any purpose unrelated to the features you use. When you disconnect your Etsy account or delete your WallArtTools account, the associated Etsy data is removed from our systems. We comply with the Etsy API Terms of Use, including its caching and data deletion rules: we do not store Etsy data longer than necessary, we refresh data through the API rather than screen-scraping, and we honor seller and Etsy data deletion requests promptly.
6. Security
We use industry-standard measures including TLS in transit, encryption at rest for OAuth tokens and secrets, role-based access control, and monitoring. No system is 100% secure, and we cannot guarantee absolute security.
7. International Transfers
Your data may be processed in countries other than the one in which you reside. We use appropriate safeguards (e.g. Standard Contractual Clauses) where required. The Service is designed with GDPR principles in mind.
8. Your Rights
You may request access to, an export of, correction of, or deletion of your personal data at any time. Depending on your location (e.g. GDPR / CCPA) you may have additional rights to object to or restrict processing. To exercise these rights, contact support@wallarttools.com.
9. Children
The Service is not directed at individuals under 16. We do not knowingly collect data from children.
10. Changes
We may update this Privacy Policy from time to time. Material changes will be communicated via the Service or by email.
11. Contact
Questions about this Privacy Policy: support@wallarttools.com.
The term "Etsy" is a trademark of Etsy, Inc. This application uses the Etsy API but is not endorsed or certified by Etsy, Inc.