Privacy Policy

Our promise

We keep this simple: your data is yours. We encrypt it, we use it only to provide the Service, and we never sell it or share it with third parties for their own purposes.

What we collect

• Account data — your email and basic profile, to create and secure your account.
• Shop content you provide — the product photos, titles, descriptions and keywords you submit so the Service can optimize them.
• Connection credentials — if you connect your own shop, the OAuth access tokens needed to act on your behalf. They are stored on our servers against your account only, are never sent to your browser, and are deleted the moment you disconnect.
• Usage data — basic, privacy-respecting analytics to keep the Service running well.

How we protect it

All traffic is encrypted in transit (HTTPS), and stored data is encrypted at rest by our infrastructure provider (Google Cloud). Connection tokens are kept server-side, scoped to your account, and are never exposed to the browser or to other users — database rules deny all client access, so only our server can read them. Access is limited to what is needed to provide the Service. You can revoke a connected shop or delete your account at any time. If we ever discover a breach affecting data accessed through a connected shop, we will notify the affected seller and the platform without undue delay — within 24 hours of discovery for Etsy.

What we never do

• We never sell your data.
• We never share it with third parties for their own marketing.
• We never collect or store other sellers' private data.
• We never message your buyers.

AI processing

To generate suggestions and product imagery, the content you submit — including titles, descriptions, keywords and the product photos you upload or generate scenes from — is sent to third-party AI model providers solely to return a result to you. Every AI request is sent with data collection denied, so it can only be routed to providers that do not store or train on the content we send. We never use your shop content to train models, and we minimize what is sent to only what the task requires.

How we use Etsy data

NeonSign connects to Etsy only through Etsy's official Open API, using OAuth — you authorize access yourself, and we never see or store your Etsy password. We request the minimum permissions needed to manage your own shop, and we act only on the shop you connect.

• We never access or store other sellers' private data.
• We do not store or cache your Etsy listing content. Every time you open a listing it is fetched live from Etsy with caching disabled, held only in memory long enough to complete your request, and shown in your browser for that session — it is never written to a database, file or cache on our servers. Close the tab and nothing of it remains with us.
• When you disconnect your shop, your access tokens are deleted immediately. There is no stored listing data to remove, because we never keep any.
• We do not collect buyer email addresses or contact buyers.
• Connection tokens are stored server-side against your account, never exposed to the browser, and deleted when you disconnect.

The term 'Etsy' is a trademark of Etsy, Inc. This Application uses Etsy's API, but is not endorsed or certified by Etsy.

Your rights

You can access, export or delete your data, and disconnect any connected shop, at any time. To make a request, email info@neonsign.ai.