Privacy Policy

1. Information we collect

We collect only what we need to operate the Service:

• Account information: your email address and your store or organization name.
• eBay connection: the authorization (OAuth) access and refresh tokens for the eBay account you connect, which we store encrypted, plus the business-policy and inventory-location identifiers we retrieve in order to publish listings.
• Listing and order data: the product identifiers and prices you list, and the eBay order and sale data we import for the profit tracker.
• Billing information: if you subscribe to a paid plan, our payment processor collects and processes your payment details; we receive limited billing status (such as your plan, subscription status, and identifiers) but not your full card number.
• Consent records: a record that you accepted the Terms and Privacy Policy, acknowledged the marketplace-compliance notice, or authorized a trial/subscription, with the version, the timestamp, and the IP address the acceptance came from (kept as proof of the agreement, for example if a charge is disputed).
• Usage and technical data: basic logs needed to operate, secure, and troubleshoot the Service.

2. What we do not collect

We never ask for or store your eBay or other marketplace password; connections use secure authorization tokens instead. Payment card details are handled by our payment processor and are not stored by us.

3. How we use your information

We use your information to:

• provide the Service — create and manage your eBay listings, monitor prices and stock, and compute your profit;
• authenticate you, including sending one-time sign-in codes to your email;
• process subscriptions and billing through our payment processor;
• operate, secure, maintain, and improve the Service;
• keep records of consent and comply with legal obligations;
• send you service-related communications about your account (for example sign-in codes, billing notices, and important updates about the Service) — these are necessary to provide the Service and are sent regardless of your marketing preferences;
• if you have opted in, send you marketing communications such as product updates, tips, and offers. Marketing email is optional: you can opt in or out at any time in your account settings, or by using the unsubscribe link in any marketing email. Opting out does not affect the service-related communications above.

4. How we share information

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We share data only with service providers that help us run the Service, and with the marketplaces and APIs you direct us to use:

• eBay — to create, revise, and end listings and read orders on your behalf, as you direct;
• A third-party product-data provider — to retrieve product catalog data;
• Google — only if you choose to sign in with Google;
• our hosting and email providers (for example, Render and Resend) — to run the Service and deliver sign-in codes;
• a payment processor, to process paid subscriptions;
• authorities or others where required by law, to enforce our terms, or to protect rights, safety, and security.

5. Product and marketplace data

Product information is retrieved from a third-party product-data provider. Your eBay account data is accessed through eBay’s APIs using the permissions you grant, solely to provide the features you use. We use eBay data and third-party product data only as needed to operate the Service for you and in accordance with the applicable marketplace requirements. We may also disclose information where required by law.

6. Data storage and security

We host data with reputable providers and encrypt sensitive credentials — including your eBay tokens — at rest. No method of transmission or storage is completely secure, but we take reasonable technical and organizational measures to protect your information.

7. Data retention and account deletion

We keep your information while your account is active and as needed to provide the Service. You can request deletion of your account and associated data from your dashboard or by contacting us. When you request deletion, we remove or de-identify personal information that we are not required or reasonably permitted to keep. Certain records may be retained where legally required or reasonably necessary (for example, for billing and tax records, fraud prevention, security, dispute resolution, or to comply with legal obligations) and are deleted when no longer needed for those purposes. To prevent repeated use of trials, after an account that used a trial or subscription is deleted we keep only the connected eBay store's username, a one-way coded version of the email address (it can't be turned back into the address), and the date.

8. Your choices and privacy rights

You can disconnect your eBay account at any time, which revokes our access to it.

Depending on where you live, applicable law (such as the EU/UK GDPR or U.S. state privacy laws including the California Consumer Privacy Act (CCPA) and the Texas Data Privacy and Security Act (TDPSA)) may provide some or all of the following rights with respect to your personal information, subject to that law’s conditions and exceptions:

• Confirmation and access: confirm whether we process your personal information and access it;
• Copy / portability: obtain a copy of the personal information you provided, in a portable format;
• Correction: correct inaccurate personal information;
• Deletion: request deletion of your personal information;
• Opt-outs: where applicable, opt out of targeted advertising, sale of personal information, or certain profiling (as noted, we do not sell personal information or use it for cross-context behavioral advertising);
• Appeal: appeal our decision on a privacy request.

9. How to exercise your rights

You can submit access, correction, data-export, deletion, or appeal requests through our privacy request page at /privacy-request, or by emailing info@meridianbot.io. We will verify your request as required by applicable law and respond within the timeframe the law requires. Where the law permits, you may authorize an agent to submit a request on your behalf. We will not discriminate against you for exercising your rights.

10. Cookies and local storage

We use minimal browser local storage to keep you signed in (a session token). We do not use third-party advertising cookies or sell data to advertisers.

11. Children

The Service is not directed to anyone under 18, and we do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.

12. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be posted on this page with an updated date.

13. Contact

Questions about your privacy or this policy? Email info@meridianbot.io.