Privacy Policy
Last updated: 2026
SellFina ("we", "us", "SellFina") operates a SaaS platform that helps e-commerce sellers promote their products on social media. This Privacy Policy explains what data we collect when you create an account and use our services, how we use and store it, and what rights you have.
1. What Data We Collect
When you create an account, we collect your account email (sign-in is via email one-time code). In the dashboard we store information about your shop (shop name, storefront settings, product data, images) and the credentials for any marketplace or social media accounts you connect (OAuth tokens or API keys).
2. Access to Etsy Data
SellFina only accesses your Etsy shop data after you have explicitly granted permission through Etsy's official OAuth flow. Access is limited to the minimum scope required by the feature you use — for example, only the permissions needed to import your listings or send order notifications are requested, nothing beyond that. You can revoke this permission at any time from the "Integrations" page in your dashboard.
3. How Data Is Stored
Your data is stored on Google Firebase infrastructure (Firestore database and Cloud Functions). Access and refresh tokens for marketplace integrations (Etsy, eBay, Trendyol, Shopify, Amazon) are encrypted server-side with AES-256-GCM before storage; they are never kept in plaintext.
4. Third-Party Services
- Google Firebase — infrastructure provider for authentication, database and serverless functions.
- Etsy API (and any other marketplace/social media APIs you connect) — to synchronize your shop and product data.
- AI providers (Google Gemini primary, OpenAI fallback) — process your product information to generate social media content (titles, descriptions, hashtags).
- Upload-Post API — to publish the generated content to your social media accounts on your behalf.
5. What We Do Not Do With Etsy Data
SellFina processes your Etsy shop data only on your behalf, at your instruction, and in accordance with Etsy's API Terms of Use. To be explicit:
- We do not scrape Etsy — all data access happens through the official, authenticated Etsy API.
- We do not bypass the Etsy API or use unauthorized access methods.
- We do not use your Etsy data to build a competing marketplace or storefront.
- We do not sell or rent data obtained from Etsy to third parties.
- We comply with Etsy API's caching and data-refresh rules; we do not cache data longer than permitted or for purposes Etsy does not allow.
6. Data Retention and Deletion
When you disconnect a marketplace connection (e.g. removing your Etsy connection from the "Integrations" page), the associated access tokens are permanently deleted from our systems. When you delete your account, all shop data, products, tokens and content associated with it are permanently deleted. You may also request data deletion via the contact email below.
7. Cookies and Analytics
We use the minimum cookies required for session management. We collect anonymous, aggregated usage statistics via Vercel Analytics to understand product usage; this data is not shared with third parties for advertising purposes.