Privacy policy

Last updated 20 October 2026

Voralba helps Etsy sellers turn artwork images into draft listings in their own shop. This policy explains what data Voralba uses, why, who it is shared with, and your rights. Voralba is in development; this policy will be updated before the service opens and whenever what we do with data changes.

Anything about your data: hello@voralba.com

What we use and why

• Your Etsy connection. You sign in through Etsy (OAuth). Etsy gives Voralba an access token limited to reading your shop and reading and writing your listings (shops_r, listings_r, listings_w). We use it only to read the template listing you choose and to create draft listings you ask for. Tokens are stored encrypted at rest and deleted when you disconnect your shop or delete your account. We never ask for your Etsy password.
• Your artwork. Mockups are rendered in your own browser. The finished photos are sent to Etsy as part of your draft listing. To suggest the title, tags, description and alt text, a reduced copy of each artwork image is sent to our AI provider. We do not keep your images once the draft has been created.
• Listing data. Titles, tags, prices and similar fields of your template and drafts are processed to create the drafts and kept only as long as needed to show you the result, within the limits of Etsy's API terms.
• Account and billing. Your Etsy shop ID and name, how many drafts you have used and, once paid plans exist, your purchase records. Payments are handled by our payment provider; we never see or store your card details.
• Technical data. Basic server logs (such as IP address and time of request) kept for a short period for security and to fix errors. One essential cookie keeps you signed in. No advertising or tracking cookies.

We do not sell your data, use it for advertising, or access your customers' orders or personal data.

Who processes it for us

• Etsy: your shop and listings live there.
• Cloudflare: hosting of the website and our server.
• Anthropic: the AI model that suggests listing text from your images.
• Stripe: payments, once paid plans exist.

Some of these providers may process data outside the European Economic Area, under the safeguards the law requires (such as standard contractual clauses).

Legal basis

We process your data to provide the service you ask for (performance of a contract), and logs for security (legitimate interest).

Your rights

You can ask to access, correct, export or delete your data, or object to or restrict its processing, by writing to hello@voralba.com. You can disconnect Voralba at any time from your Etsy account settings. You also have the right to complain to your data protection authority.

Security

All traffic uses HTTPS, access tokens are encrypted at rest, and we ask Etsy only for the permissions the service needs. If a security incident affects your data, we will tell Etsy within 24 hours and inform the affected users without undue delay.