# Privacy Policy **Effective Date:** April 28, 2026 **Last Updated:** April 28, 2026 EaseList.AI ("EaseList," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website, applications, and services (collectively, the "Platform"). By using the Platform, you agree to the collection and use of information in accordance with this policy. ## 1. Information We Collect ### Account Information When you register, we collect your email address, name, and password (stored as a hashed value). ### Marketplace Data When you connect a marketplace account (Amazon, eBay, Etsy, Shopify, etc.), we access data from that platform's official API using credentials you provide. This is strictly limited to your own seller account and may include: - Product listings and inventory - Order history and transaction data - Pricing and performance analytics We do not scrape these platforms' websites or access other sellers' accounts. Where seller platforms' API result data includes public marketplace information (such as competing offers or pricing), we may use that data to power features like repricing and market analysis on your behalf. ### Usage Data We automatically collect information about how you interact with the Platform, including pages visited, features used, and time spent. This helps us improve the service. ### Device and Technical Data We collect your IP address, browser type, operating system, and device identifiers for security and performance purposes. ### Cookies We use cookies and similar technologies to maintain your session and preferences. See Section 6 for details. ## 2. How We Use Your Information We use the information we collect to: - Provide, operate, and maintain the Platform and its features - Process and display your marketplace data as you have authorized - Authenticate your identity and secure your account - Send transactional communications such as account alerts and service updates - Respond to your support requests and feedback - Analyze usage patterns to improve performance and user experience - Comply with applicable legal obligations **We do not sell your personal information to third parties.** ## 3. How We Share Your Information We may share your information only in the following limited circumstances: - **Service providers:** Trusted vendors who assist us in operating the Platform (e.g., cloud hosting, analytics, email delivery) under strict confidentiality and data processing agreements - **Marketplace platforms:** Data is passed back to connected marketplaces only as necessary to execute actions you explicitly initiate (e.g., updating a listing price) - **Legal requirements:** When required by law, court order, or government authority, or to protect the rights, property, or safety of EaseList or others - **Business transfers:** In the event of a merger, acquisition, or sale of assets, affected users will be notified and your data will remain subject to this policy ## 4. Data Retention We retain your personal data for as long as your account is active or as needed to provide services. Upon account deletion: - Account credentials and profile data are deleted within 30 days - Marketplace-sourced data is deleted within 90 days - Billing and transaction records may be retained for up to 7 years as required by law You may request early deletion of your data at any time (see Section 9). ## 5. Data Security We implement industry-standard safeguards to protect your data, including: - Encryption in transit (TLS/HTTPS) for all data transfers - Encryption at rest for sensitive stored data - Access controls limiting data access to authorized personnel only - Regular security reviews and monitoring No method of transmission or storage is 100% secure. We cannot guarantee absolute security, but we are committed to protecting your data with reasonable and appropriate measures. ## 6. Cookies We use the following cookies: | Cookie | Purpose | Duration | |--------|---------|----------| | auth_token | Keeps you logged in | 1–30 days (depending on "Trust Device" setting) | | user | Stores your email to personalize your session | Session | You can configure your browser to refuse cookies, but doing so will prevent the Platform from functioning correctly as authentication relies on cookie storage. ## 7. Third-Party Links and Integrations The Platform integrates with third-party marketplace platforms (Amazon, eBay, Etsy, Shopify, etc.). These platforms have their own privacy policies and data practices. We are not responsible for how they handle your data. We encourage you to review their policies directly. EaseList also participates in the eBay Partner Network (EPN). Purchases made through EPN links may be tracked for affiliate commission purposes in accordance with eBay's own privacy policy. ## 8. Browser Extension EaseList offers an optional Chrome browser extension that helps you bring your supplier purchase history into your EaseList workspace. The extension is entirely opt-in and only ever works with the supplier sites you personally connect and explicitly authorize. ### What the Extension Collects After you connect a supplier (such as AbeBooks, ThriftBooks, BetterWorldBooks, or your Amazon buy-side account) and grant the extension permission for that specific site, it reads the content of your own account pages on that site — your order history, order details, and shipment or return status. These pages can include information such as your name, shipping addresses, and order totals. The extension never reads or collects anything from sites you have not explicitly granted access to, and it does not track your general browsing. ### Why We Collect It The extension exists for a single purpose: to sync your purchases, receiving, and restock data into your own EaseList workspace, so your buying activity stays in step with your inventory without manual data entry. ### Where Your Data Goes Captured page content is transmitted securely over encrypted connections (TLS/HTTPS) to EaseList's servers, where it is processed and stored inside your own account. It is visible only to you within your workspace. We do not sell this data, we do not use it for advertising, and we never collect from sites you have not granted. ### Retention - **Captured page snapshots** are automatically deleted within **30 days**. - **Transient captures used for AI processing** are automatically deleted within **7 days**. - **The structured order data you sync** (your purchases, receiving, and restock records) remains part of your workspace until you choose to delete it. ### Your Control You are always in control of the extension: - **Revoke a site's access** at any time from the extension panel, or from your browser's extensions page (chrome://extensions). - **Disconnect a supplier** in your EaseList workspace to stop all collection for that supplier. - **Uninstall the extension** to stop everything immediately. ## 9. Your Rights Depending on your location, you may have the following rights regarding your personal data: - **Access:** Request a copy of the personal data we hold about you - **Correction:** Request correction of inaccurate or incomplete data - **Deletion:** Request deletion of your personal data, subject to legal retention obligations - **Portability:** Request your data in a structured, machine-readable format - **Objection:** Object to certain types of processing To exercise any of these rights, contact us at privacy@easelist.ai. We will respond within 30 days. If you use the browser extension, see Section 8 for how to revoke a site's access or stop collection. ### California Residents (CCPA) If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information is collected, the right to delete it, and the right to opt out of its sale. **We do not sell personal information.** ### EU / UK Residents (GDPR) If you are located in the European Economic Area or United Kingdom, our legal basis for processing your data is: (a) performance of our contract with you; (b) your explicit consent where applicable; or (c) our legitimate interests in operating and improving the Platform. You have the right to lodge a complaint with your local data protection authority. ## 10. Children's Privacy The Platform is not directed at children under the age of 13. We do not knowingly collect personal information from children. If you believe we have inadvertently collected such information, please contact us immediately and we will delete it promptly. ## 11. Changes to This Policy We may update this Privacy Policy from time to time. We will notify you of material changes by updating the "Last Updated" date above and, where appropriate, by email or in-app notification. Your continued use of the Platform after changes take effect constitutes your acceptance of the updated policy. ## 12. Contact For privacy-related inquiries or to exercise your data rights, contact us at: privacy@easelist.ai