InvenTrac Privacy Policy

Last updated: 2026-07-15

InvenTrac ("we", "the extension") is a Chrome extension and companion API that helps Etsy sellers see low-stock, sold-out, and restock-needed signals for their own shop. This page explains what data we access, why, and how it's handled.

What we access

When you click "Connect Etsy," you're sent to Etsy's own OAuth consent screen, where Etsy asks you to approve the following read-only scopes:

• shops_r — your shop's basic profile
• listings_r — your listings and their inventory/quantity
• email_r — the email address on your Etsy account, used only to identify your account across sessions
• transactions_r — your shop's orders/receipts, used only to show a count of open (paid, unshipped) orders in the popup

We never see or ask for your Etsy password. We do not request write access to your shop — InvenTrac cannot edit, delete, or relist anything on Etsy on your behalf.

What we store

• Your Etsy user ID and email, to identify your account.
• Your Etsy OAuth access/refresh tokens, encrypted at rest, used only to sync your inventory data on your behalf (on connect, on a periodic background timer, and when you click "Sync now").
• A cached copy of your listing titles, thumbnails, SKUs, and quantities — used to compute and display low-stock/sold-out/restock status without re-fetching from Etsy on every popup open.
• A count of your currently open (paid, unshipped) orders, used to display the "Open orders" badge.
• Any "real stock count" values you manually enter, if you use that feature to flag a mismatch between Etsy's live quantity and what you physically have on hand.

What we don't do

• We don't sell, rent, or share your data with third parties.
• We don't use your data for advertising or profiling.
• We don't access any Etsy shop other than the one you explicitly connect.

Data retention & deletion

Your cached shop data and tokens are retained until you disconnect your shop (from the extension's popup) or request deletion. To request full account deletion, email us at the address below — we'll delete your seller record, cached inventory data, and tokens within a reasonable time.

Third-party services

We use Etsy's Open API to read your shop data, per Etsy's own API terms and your consent during OAuth. We do not integrate any analytics, ad, or tracking SDKs into the extension.

Contact

Questions about this policy or a data deletion request: privacy@inventrac.io