1. Scope
This policy explains how Rack & Sync processes data for inventory, warehouse, order, fulfillment, account, billing, and marketplace connection services.
2. Data we process
- Account name, email, role, and workspace membership
- Inventory, SKU, variant, quantity, and warehouse location data
- Order, item, status, and fulfillment data
- Customer names supplied with authorized orders
- Marketplace shop IDs, scopes, tokens, and webhook events
- Billing customer and subscription references
- Errors, timestamps, and security records
3. How we use data
- Provide inventory and fulfillment functions
- Import and update authorized marketplace data
- Authenticate users and enforce workspace roles
- Process subscriptions and provide support
- Find sync errors and protect the service
- Comply with legal and marketplace obligations
We do not use Etsy member data for advertising, data brokerage, or AI model training. We request marketplace data only when it is necessary for the authorized service.
4. Service providers and disclosure
We can provide limited data to hosting, database, authentication, payment, monitoring, and marketplace providers that support the service. We can also disclose data when required by law or when necessary to protect users and the service. We do not sell marketplace member data.
5. Storage and security
Marketplace credentials are encrypted at rest. Access is controlled by workspace role. We use HTTPS for production connections and verify supported webhook signatures. No security control can remove all risk.
6. Retention
We keep data while an account is active and for the time necessary to provide the service, resolve errors, meet legal duties, and maintain valid business records. Disconnecting a marketplace removes its stored access and refresh credentials. Operational order, inventory, and audit records can remain until the workspace owner requests deletion or a retention duty ends.
7. Seller and user controls
A workspace owner can disconnect a marketplace. A user can revoke marketplace access from the marketplace account. Contact support to request access, correction, export, or deletion of personal data. Some records can remain when law or fraud prevention requires them.
8. Data incidents
We investigate suspected data incidents and notify affected parties and marketplaces when required. Etsy and the affected seller will be notified within the period required by the Etsy API Terms when Etsy member data is affected.
9. Changes
We can update this policy when the service or legal requirements change. We will update the effective date and request new acceptance when a material change requires it.
10. Contact
Contact us about this policy or your personal data.