How Everlyst handles your data

You’re trusting Everlyst with read and write access to your Etsy catalog. Here’s exactly what we do with that data, and what we don’t.

If you haven’t connected a shop yet, the shorter version is on Everlyst trust and security.

What we store

• A synced cache of your catalog - listings, prices, tags, sections, attributes, materials, images URLs, and metadata. This is what makes the app fast.
• Order records - receipt IDs, listings sold, dates, totals, and fulfillment state, for the Orders dashboard and sales analytics.
• Backup & Restore snapshots - the “before” state of each bulk operation, retained for the window your plan allows.
• Your account info - email, password hash (we never see the plain password), and billing details.
• Activity logs - which teammate ran which job and when (for audit trail).
• Job details - the values each job was asked to change, used for job history and Undo. For most jobs these are cleared 30 days after the job finishes, once nothing in it can still be undone.

What we don’t store

• Your Etsy password - we never see it. Etsy handles auth via OAuth.
• Buyer names and addresses - Etsy includes them in order data; Everlyst stores order records without them. We have no access to buyer messages.
• Payment info - Everlyst doesn’t read your Etsy Payments balance or payouts, and the cards buyers use to pay you are never visible to it.
• Anything we don’t need to make the product work.

How it’s protected

• Encryption in transit - every connection between your browser and Everlyst uses TLS 1.2 or higher. Same for the connection between Everlyst and Etsy’s API.
• Encryption at rest - all stored data is encrypted on disk (AES-256).
• Access control - only the small number of engineers who maintain the system have production access, scoped per task and audited.
• OAuth tokens - stored encrypted, scoped to the minimum permissions we actually need (see Etsy permissions explained).

When we delete it

Trigger	What gets deleted
A job finishes	For most jobs, detailed inputs are cleared 30 days later, once nothing in the job can still be undone. The job record and results stay
You disconnect your shop	Cached listing data and order records are purged within 30 days
You cancel your subscription	Nothing immediately - drops to Free, snapshots trim to Free retention
You delete your Everlyst account	Everything, within 30 days: cached data, order records, snapshots, account info, activity logs
90 days of Free-plan inactivity	The whole account is purged, same as deleting it

What we never do

• We never sell or share your data with third parties. Period. Not anonymized, not aggregated, not for “marketing partners.”
• We never modify your shop without your explicit confirmation. Every bulk operation requires you to click Apply on a diff preview. Inline edits require you to confirm the change.
• We never use your data to train AI models. Your listings, your tags, your descriptions, your photos - yours. They are not training data for anything.

Etsy is the source of truth

Everlyst is a workspace on top of Etsy, not a replacement for it. If something disagrees between Everlyst’s cache and Etsy’s actual data, Etsy wins. Click Re-sync to refresh, or wait - the cache reconciles automatically every few hours.

Compliance

• GDPR - EU-based sellers can request data export or deletion at any time via Settings → Account.
• Etsy API Terms - Everlyst complies with Etsy’s API rate limits, data handling rules, and seller protections.

Questions

Email hello@everlysthq.com. Privacy and security questions go straight to a human, not a ticket queue.