Privacy Policy

1. Data We Access and Cache

OrbitSKU links to Shopify, Etsy, and eBay APIs to sync inventory numbers. We access and temporarily cache product titles, SKUs, active quantities, and image URLs. We do not store buyer names, shipping addresses, or payment credentials.

2. API Credentials Safety

All database-stored platform connection keys, client secrets, and OAuth bearer tokens are protected using industry-standard AES-256 database row-level encryption. These tokens are only retrieved to execute sync actions on your behalf.

3. Cookies and Analytics

OrbitSKU utilizes secure session cookies to remember authentication tokens for logged-in accounts. We do not engage in cross-site tracking or sell user data to advertising aggregators.

4. Your Right to Delete Data

You can delete store access links at any time in your Settings portal. Doing so wipes all associated cached product logs and credentials from our databases instantly.

5. Our Role as a Service Provider (Data Processor)

When you connect a store, OrbitSKU acts as a service provider and data processor on your behalf, and you remain the controller of your store's and your customers' data. We access data through each platform's official API (including the Etsy API) and process it solely to provide the inventory-sync services you request — reading listings, SKUs, quantities, prices, and order events to keep stock levels accurate across channels. We request only the minimum data and permissions needed for these services, retain it no longer than reasonably necessary, secure it with encryption in transit and at rest, and never sell it, use it to train AI models, or share it with third parties except the platforms you have connected. You control what we may access and can revoke access and delete your data at any time from Settings. We process all data in accordance with applicable privacy laws and each platform's developer terms.

6. Data Incidents

If we discover or reasonably suspect that data accessed through a connected platform has been compromised, we will investigate promptly and notify affected users, and where required the relevant platform (for example, Etsy), within the timeframes required by applicable law and the platform's developer terms. Report any suspected security issue to support@orbitsku.com.