Privacy Policy

Last updated: September 28, 2026

1. Information We Collect

Information you provide

• Account information: name and email address when you create an account.
• Photos: product photos you choose to upload to generate a listing. These are processed by AI services and stored temporarily on our servers.
• Listing content: titles, descriptions, prices, categories, tags, and other listing fields generated from your photos or entered manually.
• Facebook credentials: your Facebook account session is used exclusively to publish listings on your behalf on Facebook Marketplace. We do not store your Facebook password.
• eBay OAuth token: if you connect your eBay account, we store a secure OAuth access token and refresh token issued by eBay, used solely to create and manage listings on your eBay account. We do not store your eBay password.
• Etsy OAuth token: if you connect your Etsy account, we store a secure OAuth access token and refresh token issued by Etsy, used solely to create and manage listings in your Etsy shop. We do not store your Etsy password.
• Reverb OAuth token: if you connect your Reverb account, we store a secure OAuth access token issued by Reverb, used solely to create and manage listings on your Reverb account. We do not store your Reverb password.

Information collected automatically

• Device type and operating system version (for debugging).
• Push notification token (to notify you when a listing is published).

2. How We Use Your Information

• To create and publish listings on Facebook Marketplace, eBay, Etsy, and/or Reverb on your behalf, for whichever platforms you choose to enable.
• To analyze product photos using AI to generate listing content (title, description, price, category, tags).
• To upload product images to Cloudinary (a cloud image hosting service) so that eBay, Etsy, and Reverb can retrieve them via a public URL.
• To send push notifications about the status of your listings.
• To refresh your eBay, Etsy, and Reverb OAuth tokens automatically before they expire, so listings can be published without interruption.
• To improve the service and fix technical issues.

3. Third-Party Services

We use the following third-party services to operate the app. Each has its own privacy policy:

• Anthropic (Claude AI) — photo and text analysis to generate listing content.
• OpenAI (GPT-4o) — supplementary text generation.
• Google (Gemini) — image processing.
• Photoroom — background removal from product photos.
• Facebook / Meta — listing publication on Facebook Marketplace.
• eBay — listing publication via the eBay Sell API. By connecting your eBay account you agree to eBay’s User Agreement.
• Etsy — listing publication via the Etsy Open API v3. By connecting your Etsy account you agree to Etsy’s Terms of Use.
• Reverb — listing publication via the Reverb API. By connecting your Reverb account you agree to Reverb’s Terms of Service.
• Cloudinary — cloud image hosting used to provide public image URLs required by eBay, Etsy, and Reverb. Images are stored in a private folder associated with your listings.
• Webshare — proxy services for server requests.

Photos uploaded by you may be sent to these services solely to generate or publish listing content. We do not sell your photos or personal data to third parties.

4. OAuth Tokens and Third-Party Account Access

When you connect your eBay, Etsy, or Reverb account, you authorize Ezlist to act on your behalf through the official OAuth flow provided by each platform. The access granted is limited to the specific permissions you approved:

• eBay: create and manage your inventory and listings (sell.inventory, sell.account, sell.fulfillment scopes).
• Etsy: read and write your listings and shop data (listings_r, listings_w, shops_r, transactions_r scopes).
• Reverb: read and write your listings on your Reverb account.

You can revoke this access at any time by disconnecting the account in the Ezlist app (Account → Marketplaces → Disconnect), or directly through the marketplace’s own account security settings.

5. Data Retention

• Product photos are stored on our servers for up to 30 days and then automatically deleted.
• Images uploaded to Cloudinary are retained for up to 90 days and then deleted.
• Listing data (title, price, status, marketplace URLs) is retained while your account is active.
• eBay, Etsy, and Reverb OAuth tokens are deleted immediately when you disconnect the account or delete your Ezlist account.
• You can request deletion of all your data at any time by contacting us or using the “Delete Account” option in the app.

6. Data Security

All communication between the app and our servers uses HTTPS encryption. Passwords are stored using bcrypt hashing. OAuth access and refresh tokens for eBay, Etsy, and Reverb are stored in our database and protected by server-side access controls. We do not store your Facebook, eBay, Etsy, or Reverb passwords. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

In the event of a data breach that compromises your personal information, we will notify affected users by email without undue delay, and will comply with any notification obligations required by applicable law.

7. Your Rights

You have the right to:

• Access the personal data we hold about you.
• Request correction or deletion of your data.
• Revoke third-party marketplace access (eBay, Etsy, Reverb) at any time.
• Withdraw consent at any time by deleting your account.

8. California and Other U.S. State Privacy Rights

Depending on your state of residence (including California, Virginia, Colorado, Connecticut, and Utah), you may have additional rights, such as the right to know what personal information we collect, the right to access or delete it, the right to correct it, and the right to opt out of its sale or sharing. We do not sell your personal information, and we do not share it for cross-context behavioral advertising. To exercise any of these rights, contact us at the email below. We will not discriminate against you for exercising them.

9. Children’s Privacy

Ezlist is not directed to children or minors under 18. We do not knowingly collect personal information from anyone under 18.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via the app or email.

11. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, contact us at:

Epitaxy Lab LLC
Denton, Texas, United States
Email: ezlistmarket@gmail.com