Privacy Policy

Automenax operates Automenax at automenax.com. For account, billing, website, and support data, Automenax acts as the controller of that data. For Etsy buyer and order data processed on behalf of a connected seller, Automenax acts as the seller's service provider or processor.

Privacy requests can be sent to privacy@automenax.com. We aim to respond within 30 days.

• Account data: name, email, password hash, language, preferences.
• Etsy connection data: Etsy user ID, shop ID, shop name, granted OAuth scopes, encrypted OAuth access and refresh tokens.
• Listing data: artwork, generated mockups, titles, tags, descriptions, variations, SKUs, prices, inventory, taxonomy, shipping profile IDs, production partner fields, and draft status.
• Order data: receipts, transactions, purchased listing, selected variations, quantity, personalization notes, order status, delivery name and address, shipment status, carrier, and tracking code.
• Usage and security logs: sign-in events, API calls, automation runs, errors, device metadata, IP address, rate-limit events, and fraud-prevention signals.
• Billing data: plan, invoices, tax information, payment status, and Stripe customer identifiers. Automenax does not store full payment card numbers.
• Support data: emails, contact forms, support chats, attachments, and any information you choose to send to us.
• Website data: strictly necessary cookies, consent preferences, and privacy-respecting analytics when enabled.

• To create and manage your Automenax account.
• To connect and maintain Etsy shop authorization through OAuth.
• To create and update seller-controlled Etsy draft listings, including photos, SEO fields, variations, inventory, and delivery profile assignment.
• To read order context needed for physical fulfillment, including buyer delivery address, purchased item, personalization, and shipment status.
• To send carrier and tracking updates back to Etsy.
• To provide support, prevent abuse, secure the service, and debug failures.
• To process subscriptions, credits, refunds, taxes, and invoices.
• To comply with legal obligations and enforce our Terms.

Where GDPR or similar laws apply, we rely on contract performance to provide the service, consent for optional processing such as certain cookies or marketing, legitimate interests for security and service improvement, and legal obligation for tax, accounting, fraud, and compliance records.

Automenax shares data only as needed to operate the service, comply with law, or follow your instructions.

• Etsy: listing drafts, delivery profile references, and tracking updates.
• Hosting and database providers: application hosting, storage, backups, logs.
• Payment provider: subscription billing, invoices, tax calculation, fraud checks.
• Email provider: transactional and support emails.
• AI and media-processing providers: only the artwork, text, or image content needed for the feature requested by the seller.
• Seller-selected production partners: print files, product variant, quantity, delivery address, and shipping method needed to fulfill the specific order.
• Legal or safety recipients: courts, regulators, law enforcement, or security responders when required by law or necessary to protect users and the service.

Buyer names, delivery addresses, personalization notes, receipts, transactions, shipment details, and tracking data received through the Etsy API are used only for fulfillment, support, security, legal compliance, and tracking synchronization. They are not sold, rented, enriched, added to marketing lists, used for retargeting, or used to contact buyers outside the order relationship.

• TLS encryption in transit.
• Encryption at rest for OAuth tokens and sensitive secrets.
• Least-privilege access controls for production systems.
• Logged administrative access and security monitoring.
• Backoff, retry-after handling, and rate-limit controls for Etsy API calls.
• Token revocation and cached-data cleanup after disconnect.

More detail is available in our Security Practices.

• OAuth tokens: kept only while the shop remains connected.
• Cached Etsy listing, order, receipt, transaction, delivery, and tracking data: deleted within 30 days after disconnect or account deletion unless a legal exception applies.
• Uploaded artwork and generated mockups: kept while the account is active.
• Support records: kept as needed to resolve the issue and maintain records.
• Security logs: usually kept up to 12 months.
• Billing, tax, and accounting records: kept as required by law.
• Backups: expire on a rolling schedule and are not used as active records.

Depending on where you live, you may have rights to access, correct, delete, export, restrict, object to, or withdraw consent for personal data processing. California residents may also have rights to know, delete, correct, opt out of sale or sharing, limit use of sensitive personal information, and be free from discrimination for exercising those rights.

Automenax does not sell personal information and does not share personal information for cross-context behavioral advertising. Send requests to privacy@automenax.com. We may verify your identity before completing the request.

If data is transferred outside the European Economic Area, United Kingdom, Switzerland, or another protected region, we use appropriate safeguards such as Standard Contractual Clauses, data processing agreements, or other valid transfer mechanisms.

Cookie details are available in our Cookie Policy. We do not use third-party advertising trackers on the site.

Automenax is a business tool for adults and is not directed to children under 13 or the minimum age required in your jurisdiction.

We may update this Privacy Policy when the service, law, or sub-processor list changes. Material changes will be communicated by email or in-app notice before they take effect when required.

The term 'Etsy' is a trademark of Etsy, Inc. Automenax uses Etsy's API, but is not affiliated with, endorsed by, sponsored by, or certified by Etsy.