Privacy Policy

Effective July 20, 2026

Data we store

We store your CommerceStork account email and Cognito user identifier; listing data, product images, seller profiles, inventory locations, and import results that you submit; and operational timestamps and status records needed to run the service. Raw CSV upload files are processed to create listings and are not retained as separate files.

eBay access and data

When you connect eBay, we store your eBay username, immutable eBay user ID, selected seller-account metadata, inventory location, listing IDs, and OAuth access and refresh tokens. Tokens are encrypted with AWS KMS. We use this data only to connect your seller account and create, publish, update, or end listings at your request.

Processors

Amazon Web Services processes authentication, application requests, encrypted database records, encryption keys, delivery, rate limiting, and operational logs through services including Cognito, Lambda, DynamoDB, KMS, CloudFront, WAF, and CloudWatch. Cloudflare R2 stores and serves listing images. eBay processes seller authorization and marketplace activity under eBay's own terms and privacy policy.

Cookies and logs

We use secure, HTTP-only cookies for sign-in sessions and short-lived eBay OAuth state. Operational and security logs may contain request metadata and internal user or listing references. We do not intentionally log eBay OAuth tokens, deletion payloads, usernames, or immutable eBay user IDs.

Retention and deletion

eBay credentials and account metadata are retained while the eBay connection is active. Disconnecting an account removes its stored credentials. When eBay sends a verified Marketplace Account Deletion notice, CommerceStork removes the matching eBay identifiers and encrypted tokens and unlinks associated listing identifiers. Listing, profile, and CommerceStork account data is retained while your account is active or as required for security and legal obligations. Contact us to request access, correction, or deletion.

Contact

Privacy and deletion requests: privacy@commercestork.com