Trust & security
Is Everlyst safe to connect to your Etsy shop?
Everlyst connects through Etsy's official OAuth flow, so your Etsy password is never entered into Everlyst. It requests five Etsy API permissions, and only one of them can change anything. It can read your orders but not change them, and it has no access to buyer messages. No listing is altered until you confirm a preview of the exact changes, and you can revoke access from your Etsy account at any time.
Permissions
What Everlyst can actually do to your shop
Etsy shows you these five permissions on the authorisation screen. Four are read-only. Here is what each one would mean if it were used badly.
| Permission Etsy shows you | What it lets Everlyst see or change | Worst case if it went wrong |
|---|---|---|
| listings_r | Read every listing in the shop, including drafts, inactive listings and expired ones. | Read-only. On its own this permission cannot alter a single value in your shop. The worst case is that Everlyst displays listing data you had forgotten was there. |
| listings_w | Create, update and delete listings. | This is the only permission with real blast radius. A bad write changes field values on the listings it was pointed at. It reaches nothing outside listing data, so orders, payouts and your shop settings are out of range. |
| shops_r | Read shop-level reference data such as sections, shipping profiles and processing profiles. | Read-only. It exists so a bulk edit can only offer you a section or profile that genuinely exists in your shop, rather than writing a value Etsy will reject. |
| transactions_r | Read orders and the items in them: receipt IDs, listings sold, dates, totals and fulfilment state. | Read-only. It powers the Orders dashboard and the analytics built on real sales. Everlyst cannot ship, refund or edit an order with it, and order records are stored without buyer names or addresses. |
| email_r | Read the email address attached to the Etsy account. | Read-only, and limited to one field. It is how a sync or a long bulk job tells you it has finished. It grants no access to Etsy messages or to buyer contact details. |
Out of reach
What Everlyst does not touch
- Changing an order. Everlyst can read orders, but the scope that writes sales data is not requested, so it cannot ship, refund or edit one.
- Your payouts and Etsy Payments balance, which Everlyst does not read, and the card details buyers pay with, which Etsy never shares with apps.
- Etsy messaging. Everlyst cannot read a conversation or send a message as you.
- Your Etsy password. You type it on Etsy, never into Everlyst.
The real question
Can Everlyst break my shop?
The honest answer has three parts, and the third one has limits worth knowing before you connect anything.
Nothing is written until you approve it
Every bulk operation ends on a preview of the values it is about to write, and the job runs only once you press Apply. Inline edits ask for a confirmation of their own. There is no background process that reaches into a connected shop and changes things on a schedule you did not set.
Etsy stays the authoritative copy
Everlyst keeps a synced cache of your catalog so the app stays fast, but that cache is a mirror rather than a replacement. Where the mirror and Etsy disagree, Etsy is right. A re-sync pulls fresh values immediately, and the cache reconciles on its own every few hours.
There is a recovery path, and it has edges
Supported editing operations save the values they are about to overwrite, so an unwanted job can be opened, reviewed and rolled back for the listings that are still eligible. It is a snapshot-backed recovery path for supported edits, not a full-shop archive. Creating a listing cannot be un-created, a permanent deletion on Etsy cannot be undone, and images and listing-state changes have no blanket undo coverage. Retention scales with your plan, so see pricing and the Backup & Restore page for where coverage starts and stops.
The part worth saying plainly: a confirmed edit is a real edit. Backup & Restore widens the margin for error, it does not remove it. Read the preview before you apply it.
Etsy's rules
Will using Everlyst get my shop suspended?
Everlyst is built entirely on Etsy's official Open API and authenticates through Etsy's own authorisation screen. It does not scrape Etsy pages, and it does not drive your seller account through a browser in the background. Every action it takes is a documented API call made with a token you granted and can withdraw.
It also respects Etsy's published rate limits, data-handling rules and seller protections. That is the same public integration route Etsy offers every third-party tool.
Everlyst is an independent application built on the Etsy API and is not affiliated with, endorsed by, or sponsored by Etsy, Inc. That independence cuts both ways. It means no special standing with Etsy, and it also means no arrangement you were not told about.
Your data
What happens to the data Everlyst holds
What is stored
- A mirrored copy of the catalog, covering listing records, prices, tags, sections, attributes, materials, image URLs and metadata.
- Order and item records for the Orders dashboard and sales analytics: receipt IDs, listings sold, dates, totals and fulfilment state.
- Backup & Restore snapshots, retained for the window your plan allows.
- Your account details: email, a hash of your password, and billing information.
- Activity logs recording which job ran and when.
- Job details, meaning the values each job was asked to change. For most jobs these are cleared thirty days after the job finishes, once nothing in it can still be undone. The record of the job and its results stays.
What is never stored
- Your Etsy password, which Everlyst never receives in the first place.
- Buyer names and addresses. Etsy includes them in order data, and Everlyst keeps order records without them.
- Payment details, balances and payouts.
- Anything not required to make the product work.
How it is protected
Connections use TLS 1.2 or higher, both between your browser and Everlyst and between Everlyst and Etsy's API. Stored data is encrypted on disk with AES-256. OAuth tokens are held encrypted and scoped to the five permissions listed above. Production access is limited to the engineers who maintain the system, granted per task and audited.
| If you | What happens to your data |
|---|---|
| A job finishes | For most jobs, the detailed inputs are cleared thirty days after the job finishes, once nothing in it can still be undone. The job record, its results and any restorable snapshots are kept. |
| Disconnect a shop | The cached listing data and order records for that shop are purged within thirty days. |
| Cancel your subscription | Nothing is deleted straight away. The account drops to Free and snapshot retention trims to the Free window. |
| Delete your Everlyst account | Everything is purged within thirty days: cached listing data, order records, snapshots, account details and activity logs. |
| Leave a Free account idle for ninety days | The whole account is purged, the same as deleting it. |
- Your data is never sold or shared with a third party. Not aggregated, not anonymised, not for marketing partners.
- Your shop is never modified without an explicit confirmation from you.
- Your listings, tags, descriptions and photos are never used as training data for an AI model.
Sellers in the EU can export or delete their data at any time from account settings. The formal detail is in the privacy policy.
Leaving
How to remove Everlyst's access
Two routes, and either one is enough on its own. You can disconnect the shop from inside Everlyst, or revoke Everlyst directly from the apps list in your Etsy account settings.
Whichever you choose, the effect is the same and it takes hold at once. Etsy voids the token, and the app loses its ability to read or alter anything in that shop. Your listings stay exactly as they are on Etsy, untouched by the disconnection.
The steps for each route are in disconnect or reconnect a shop and Etsy permissions explained.
Scope
What Everlyst does not do
- It is not an order manager. Orders are shown read-only, and fulfilment, shipping labels and buyer messages stay in Etsy.
- It is not a full-shop archive. Backup & Restore covers supported operations, not every change that can happen to a listing.
- It is not an official Etsy product or an endorsed integration.
- It is not multichannel. Etsy only, with no publishing to Shopify, Amazon or anywhere else.
The people
Who actually builds this
Everlyst is built by one person. I am Kane, and I do the design, the code and the support. Security and privacy questions reach me directly at hello@everlysthq.com, not a ticket queue.
If you want the longer version, read the full story of why Everlyst exists.
Common questions
Questions sellers ask before connecting
Is Everlyst legit?
Yes. Everlyst is a real product built by a named solo founder, Kane, reachable at hello@everlysthq.com. It runs on Etsy’s official Open API under a token you grant through Etsy’s own authorisation screen. It is a small independent project rather than a large company, and the About page explains who builds it and why.
Is Everlyst safe to connect to my Etsy shop?
Connecting uses Etsy’s official OAuth flow, so your Etsy password is never entered into Everlyst. Everlyst requests five permissions and only one of them can change anything. No listing is altered until you approve a preview of the exact changes, and you can withdraw access from Etsy at any moment.
Can Everlyst break my Etsy shop?
It cannot act on its own. Every bulk operation ends on a preview showing the values it is about to write, and the job runs only when you confirm it. Supported edits capture the values they overwrite, so an unwanted job can be reviewed and eligible values restored. A confirmed edit is still a real edit, so read the preview.
What permissions does Everlyst need?
Five Etsy API scopes: listings_r to read your listings, listings_w to create and update them, shops_r to read shop reference data such as sections and shipping profiles, transactions_r to read orders for the Orders dashboard and sales analytics, and email_r to read the account email for job notifications. Four of the five are read-only.
Can Everlyst see my orders, payouts, or buyer messages?
Orders, yes, read-only. Everlyst requests transactions_r so the Orders dashboard and sales analytics can work, but it cannot ship, refund or edit an order, and order records are stored without buyer names or addresses. It does not read your Etsy Payments balance or payouts, and never sees the card details buyers use. It has no access to Etsy messaging and cannot send a message on your behalf.
Does Everlyst know my Etsy password?
No. Authentication happens on Etsy’s own domain through OAuth. Etsy verifies you and hands Everlyst a scoped token, which is stored encrypted. Your password is never transmitted to Everlyst and never stored there.
Can Everlyst change my listings without asking me first?
No. Bulk operations require you to click Apply on a diff preview, and inline edits require a confirmation. There is no background process that reaches into a connected shop and changes values on its own schedule.
What happens if a bulk edit goes wrong?
Supported editing operations save the values they are about to overwrite, and that snapshot is tied to the job that created it. You can open the job, check its results and any warnings, and restore eligible values through a tracked restore job. Coverage depends on the operation and the current state of the listing.
Will using Everlyst get my Etsy shop suspended?
Everlyst uses Etsy’s official Open API with a token you granted, and complies with Etsy’s rate limits, data-handling rules and seller protections. It is the same public integration path Etsy publishes for third-party tools. Everlyst is independent and not affiliated with Etsy, so it has no special standing and no hidden arrangement either.
Does Everlyst scrape Etsy or automate my seller account?
No. There is no page scraping and no browser automation driving your seller account in the background. Every action Everlyst takes is a documented API call made with the token you authorised, and that token can be withdrawn at any time.
How do I remove Everlyst’s access to my shop?
Two routes, either of which works on its own. Disconnect the shop from inside Everlyst, or revoke Everlyst from the apps list in your Etsy account settings. The token stops working immediately and your listings stay exactly as they are on Etsy.
What happens to my data if I disconnect or delete my account?
Disconnecting a shop purges its cached listing data and order records within thirty days. Deleting your Everlyst account purges everything within thirty days, including cached data, order records, snapshots, account details and activity logs. Cancelling a subscription deletes nothing immediately, it drops you to Free and trims snapshot retention to the Free window. Separately, the detailed inputs of most finished jobs are cleared thirty days after they finish, once nothing in them can still be undone.
Does Everlyst sell my data or use my listings to train AI?
No to both. Your data is never sold or shared with third parties, in any form, aggregated or otherwise. Your listings, tags, descriptions and photos are never used as training data for any AI model.
Is Everlyst owned by or affiliated with Etsy?
No. Everlyst is an independent application built on the Etsy API and is not affiliated with, endorsed by, or sponsored by Etsy, Inc. It is built by one person and funded by its own subscriptions.
Go deeper
The operational detail
This page is the summary. These are the working documents behind it.
Ready when you are
Connect a shop, or read the permissions again first
The Free plan needs no card. You can disconnect and purge the cache whenever you like.