This Privacy Policy explains which personal and technical data Lucy Seller Copilot (the "Service", "Lucy", "we") collects and how it is used. The data controller and Service provider is ФОП Піцина Жанна Вікторівна (Tax ID 3275710681), registered at Ukraine, Rivne, 2 Klenova Street. Privacy contact: support@enjoyagency.com.ua.
1. What data we collect
When you connect your Etsy shop to Lucy Seller Copilot through official Etsy authorization (OAuth), we only get access to the data covered by the permissions you approve during authorization. This may include:
- Public shop information (name, description, sections)
- Listing data (titles, descriptions, tags, prices, photos, videos, attributes)
- Shop and listing reviews
- View and favorite statistics (where provided by the Etsy API)
We additionally store:
- Your email, customer identifier, subscription status, term, and included access
- Name, country, amount, currency, date, status, and payment identifier provided by Stripe; we do not store full card numbers or CVC
- The OAuth access token for your shop (encrypted)
- Data you enter or upload in ChatGPT or Claude, such as prompts, descriptions, photos, spreadsheets, links, templates, and other materials
- Technical data such as IP address, date and time, platform type, session identifier, feature used, response code, and error logs
When you use a ChatGPT plugin or Claude connector, the necessary part of your request is transmitted between ChatGPT/Claude and Lucy's server to perform the selected function. Do not send us Etsy passwords, two-factor authentication codes, API keys, or unmasked access or refresh tokens.
2. How we use your data
Data is used solely to provide the Service's functionality to you personally:
- Analyzing listings and the shop, generating SEO recommendations
- Creating listing drafts at your direct request
- Compiling reports (daily/weekly) and delivering them to Telegram, if you've enabled that
- Processing payments, subscriptions, cancellations, and accounting records
- Preventing fraud, access sharing, and unauthorized use
- Support and troubleshooting
- Complying with legal obligations and lawful requests from competent authorities
We do not sell your data to third parties, do not use it for advertising, and do not share it with other users of the Service.
3. Legal bases for processing
Depending on the type of data and your location, we process data to perform our contract and provide the paid digital service, with your consent for Etsy connection and optional features, for our legitimate interests in security and support, and to comply with tax, accounting, and other legal obligations.
You may withdraw consent where processing is based on consent. Withdrawal does not affect prior lawful processing and may make some features unavailable.
4. Actions that change your shop
The Service can create listing drafts, edit them, or upload photos — but only as a direct result of your request in chat. We do not publish, edit, or delete active listings automatically without your initiation. Recommendations, text, and other AI-generated content may contain errors or inaccuracies — always review drafts yourself before publishing.
5. Who may receive data
To operate the Service, we rely on the following third-party services:
- Etsy API — to read and modify your shop's data with your permission
- Anthropic (Claude) and OpenAI (ChatGPT) — as the AI infrastructure you interact with Lucy through
- Stripe — to process payments, subscriptions, and acceptance records
- Telegram — optionally, for report delivery, if you've enabled that feature
- Railway — to host our server infrastructure
- Netlify — to host our public website
Each of these services has its own privacy policy that applies to how they process data on their end.
6. International data transfers
Some providers may process or store data outside your country. We use providers that describe appropriate safeguards and disclose only the data necessary for the relevant function.
7. Data retention
- active Lucy account data — for the subscription term;
- OAuth tokens — until access is revoked, the shop is disconnected, or the account is terminated;
- core Service data after cancellation — deleted or anonymized within 30 days unless longer retention is needed for a dispute, security, or legal compliance;
- payment and accounting records — for the period required by law;
- technical and security logs — only as long as reasonably needed for diagnostics, protection, and dispute resolution.
8. Your rights
- Revoke access — at any time via your Etsy account settings (Applications you've authorized)
- Cancel your subscription — at any time; access remains until the end of the paid period
- Request data deletion — by emailing support@enjoyagency.com.ua
- Request a copy of your data — by emailing the same address
- Correct, restrict, or object to processing — where applicable law provides these rights
- Complain — to a competent data protection authority
To exercise a right, contact us from the email used for purchase. We may ask you to verify ownership of the account but will not ask for your password or 2FA code.
9. Security
We use customer account separation, encrypted OAuth tokens, access controls, secure connections, and security event logging. No method of transmission or storage is completely secure. If you suspect unauthorized access, contact us immediately. If we suspect unauthorized access to your Etsy shop data on our side, we will notify Etsy and you personally no later than 24 hours after discovery.
10. Cookies and external links
The site and third-party payment or infrastructure providers may use necessary cookies and similar technologies for security, sessions, and payments. When you visit a third-party site, its own terms and policies also apply.
11. Children
The Service is not intended for individuals under 18. We do not knowingly collect data from minors.
12. Changes to this policy
We may update this Privacy Policy from time to time. We will notify you of material changes by email or via a notice on the site. The date of the last update is shown at the top of this page.
13. Contact
Questions about this Privacy Policy can be sent to support@enjoyagency.com.ua.