Last updated: October 2026
This Privacy Policy explains how Pricta (“we”, “us”, “our”) handles information when you use pricta.com (the “Service”). By using the Service, you agree to this Policy.
1. What We Collect
- Product images - uploaded by you for listing generation and related product workflows. Images are processed to provide the Service and may be stored when needed for features such as saved inventory items or listing workflows.
- Listing inputs and generated content - product descriptions, context you type into the tool, and AI-generated listing content. Used to generate and operate your listing workflow, and may be retained when needed for account features such as saved inventory items or draft-related flows.
- Etsy OAuth tokens - if you connect your Etsy account, we store your access and refresh tokens in our database and use them only to authenticate Etsy API requests on your behalf.
- A copy of your published Etsy listings - when you connect your shop and ask us to sync it, we copy the listings already published there into our database: titles, descriptions, tags, materials, prices, images and the raw data Etsy returns. This copy exists so the Service can show your shop back to you and work on it; we do not use it for anything else. It is deleted when you disconnect your shop.
- Email address - if you create an account or contact us.
- Acceptance of our terms - when you sign in, we record when you did so and which version of the Terms of Service and this Policy was in force, as the record that you accepted them.
- Usage records - for each generation we record which account made it, when, how long it took, which AI models ran, what it cost us, and a summary of the result such as the chosen category and tags. These records are linked to your account and are used to run the Service, to keep your generation allowance, and to understand what the Service costs. We also record which drafts you created in Etsy through Pricta and whether you opened them from Pricta, to understand whether the Service is useful; nothing is read back from Etsy for this.
- Invitation records - for sellers we invite or give individual conditions, we keep the email address, the conditions and plan name each invitation carries, when we emailed it, and short labels we use to organise our own list.
2. How We Use Your Data
- To generate AI-powered Etsy listing content on your behalf.
- To authenticate with Etsy’s API using your OAuth token.
- To send transactional emails (account creation, billing) if applicable.
- To improve and maintain the Service.
We do not sell, rent, or share your personal data with third parties for marketing purposes.
3. Third-Party Services
To generate listing content, your uploaded images and text inputs are sent via OpenRouter (an AI API aggregator) to AI models such as Anthropic Claude or similar. Your data may be processed by these AI providers solely to generate listing text. When you ask Pricta to build your description template from your shop, the sections found in up to twelve of your newest published listings are sent the same way, only to name those sections. Please review OpenRouter’s Privacy Policy and Anthropic’s Privacy Policy for details on their data handling.
We use Etsy’s API to read and write listing data on your behalf, and to create a shop section when you ask for one, once you authorize us via OAuth.
We use Sentry to record application errors. An error report can include technical context about what the Service was doing at the time, which may include your account identifier.
We use Vercel Web Analytics to count visits to pricta.com. When a page opens, Vercel receives its address, the site you came from, your approximate location, and your browser, operating system and device type. Visits are counted without cookies: a visitor is recognised only by a code derived from the request, which Vercel discards after 24 hours, and we see only totals. Before an address is sent, everything in it except the tags that say where you came from is removed, and the pages only we use are not counted.
We use Resend to send email: letters about your access and your plan, such as the start of your free trial, an invitation or a change of its conditions, a plan that started, renewed or was cancelled, and a renewal that could not be paid. Resend receives the address the letter goes to and the text of the letter: your conditions, the name of the plan if it has one, its dates, and a link to the Service. The notes we send ourselves about payments that need our attention can include your account and subscription identifiers. Resend is a United States company.
When the Service researches how a search term is used on Etsy, it asks Google’s public search-suggestion endpoint about that term. The term travels; nothing about your account does.
Payments are handled by Paddle.com, which acts as the Merchant of Record. Paddle collects your payment details, billing address and, if you give it, your tax ID, under its own privacy notice. From Paddle we keep only what we need to run your plan: the plan, its status and dates, and the references Paddle uses for you and your subscription. We never receive your full card number and do not store any card details.
4. Cookies
Pricta uses essential cookies and similar technologies required for the Service to function (e.g. session tokens, authentication state). We do not use tracking or advertising cookies. By using the Service, you consent to the use of essential cookies. You may disable cookies in your browser settings, but this may affect Service functionality.
5. Data Retention
- Images and listing content: retained only as needed to provide the features you use, such as generation, draft creation, and saved inventory or listing workflows. Photos you upload are deleted 30 days after you last changed the listing they belong to; the listing text stays, and drafts already created in Etsy keep their own copies of the images.
- Temporary processing data: some uploads and generated outputs may be handled transiently during generation and are not intentionally persisted beyond what is needed to provide the Service.
- OAuth tokens: stored only while your account is active and while Etsy connectivity is needed; deleted when you disconnect Etsy or delete your account.
- The copy of your published listings: kept while your shop is connected and deleted when you disconnect it. Drafts you created inside Pricta are your own work and stay until you delete them or your account.
- Account data: retained until you request deletion.
6. Etsy Member Data
When you connect your Etsy shop, we act as a service provider to you as the Etsy seller. Any Etsy member data accessed via the API is processed solely to provide the Service to you and is not used for any other purpose. We comply with Etsy’s API Terms of Use regarding member data handling.
7. Security
Your account, your listings and your uploaded images are stored with Supabase, and the Service runs on Vercel. Both are United States companies and your data may be stored and processed there.
All data is transmitted over HTTPS. We take reasonable technical and organizational measures to protect your data and restrict access to sensitive information such as OAuth tokens. However, no system is 100% secure. In the event of a data breach affecting your Etsy data, we will notify you and Etsy within 24 hours of discovery.
8. Your Rights
You have the right to:
- Access the personal data we hold about you.
- Request deletion of your account and all associated data.
- Disconnect your Etsy shop at any time in Pricta Settings. This deletes the access tokens Etsy issued to Pricta and our copy of your published listings; drafts you made in Pricta stay until you delete them. You can also revoke Pricta’s access from your Etsy account, where Pricta is listed among the third-party apps you have given access to.
- If you are in the EU/EEA: exercise your rights under GDPR by contacting us.
9. Children
The Service is not intended for users under 18 years of age. We do not knowingly collect data from minors.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We update the “Last updated” date above when we do. Continued use of the Service after changes constitutes acceptance of the updated Policy.
11. Contact
For privacy-related requests or questions: