NicheNet Privacy Policy

This Privacy Policy explains how NicheNet (“we”, “us”) collects, uses, and protects information when you use the NicheNet website at https://nichenet.fynktech.com and related services (together, the “Service”). Last updated October 16, 2026.

1. Who we are

Brand: NicheNet
Website: https://nichenet.fynktech.com
Country of operation: Pakistan
Privacy & support email: uzairhassan1357@gmail.com

NicheNet is a listing helper for makers and sellers who draft and manage listings for shops they own or are authorized to operate, using Etsy’s official API. Contact us at the email above for privacy questions, deletion requests, or support.

2. What data we collect

From Etsy (through OAuth)

When you connect your shop, we access only what the OAuth permissions you approve allow. NicheNet currently requests these scopes only (minimum needed to create and manage your listings):

• listings_r / listings_w — read and create/edit listings
• shops_r / shops_w — read shop info and update shop sections needed for listings

With those scopes we may process:

• Shop name and shop ID
• Listing data you create or manage through NicheNet (titles, descriptions, tags, prices, quantity, taxonomy/category)
• Listing photos you upload or publish through the Service
• Shipping profiles, processing / readiness profiles, and return policies needed to create listings
• Inventory and listing state (draft or active) for listings created or updated via NicheNet

We do not request transactions_r, buyer emails, or order contents. We never ask for your Etsy password. We do not screen-scrape Etsy; shop data comes from the official API only.

From you directly

• Name and email address for your NicheNet account
• Login credentials for NicheNet (passwords are stored only as secure hashes)
• Plan or credit information associated with your account
• Support chat messages, and a name/email if you contact support before signing in
• Product details, photos, and notes you enter to draft a listing
• Listing drafts, generated draft images, and preferences you save in the Service

Automatically

• IP address and basic request metadata when you use the website or APIs
• Browser and device type (via standard HTTP headers)
• Session tokens stored in your browser so you stay signed in
• Usage needed to operate the Service (for example credit ledger events and activity logs)

We do not currently use a third-party product analytics SDK (such as PostHog) on the Service. If that changes, we will update this policy and describe how to opt out.

3. How we use it

We use this information to:

• Create drafts and, after your review, publish or manage listings for the shop you connect
• Show your dashboard, credit balance, and drafts
• Provide optional AI drafting of listing text or photo layouts when you ask for those features
• Provide customer support and improve reliability and security of the tool

We do not sell your personal data or shop data. We do not use Etsy data to train AI models. Any AI processing is only to provide the draft feature you requested. You remain responsible for reviewing AI outputs before publishing.

4. Etsy access and tokens

• Sellers connect through Etsy’s official OAuth flow and can review the permissions granted.
• We never ask for Etsy passwords.
• You can disconnect anytime in Etsy → Settings → Privacy & security → Apps, and/or by removing the connection from NicheNet’s integration settings when signed in.
• Access tokens are stored securely in our database and are never shown publicly in the UI.

5. Sharing with third parties

We share data only with service providers that help us run NicheNet, and only as needed for their service:

• Hosting: Vercel (application hosting; functions currently in the United States)
• Database & auth backend: Supabase (account data, sessions, tokens, drafts, activity)
• Media CDN / storage: Bunny.net (listing or draft image delivery where used)
• AI: Google Gemini API — optional listing text drafts and photo helpers when you use those features
• Etsy: the Etsy API, to create and manage listings for your connected shop

Each provider receives only what it needs to provide its service. We do not sell data to advertisers or data brokers.

6. Storage and security

• Application hosting is on Vercel; primary application data is stored with Supabase. Media may be stored/served via Bunny.net. Processing and storage regions follow those providers’ infrastructure (commonly including the United States and other regions they operate).
• Data in transit is protected with HTTPS/TLS.
• Access to production systems is restricted to authorized operators of NicheNet.
• Passwords are hashed; OAuth tokens are stored server-side and not displayed publicly.

No method of transmission or storage is 100% secure. We take reasonable measures appropriate to the Service, but we cannot guarantee absolute security.

7. Retention and deletion

• Shop connection data: We keep shop connection and related listing data only while your shop is connected and your NicheNet account remains active for that purpose. After you disconnect your shop or close your NicheNet account, we delete or anonymize Etsy-derived data within 30 days, except where we must keep a limited record for security, dispute, or legal compliance.
• We refresh displayed listing data so it is not shown more than six hours older than Etsy, and other Etsy content not more than twenty-four hours older, matching Etsy’s API Terms caching rules. We do not store listing snapshots longer than needed to operate the Service for you.
• Account & support data: kept while your account is active; deleted when an operator deletes the account or when you request deletion and we complete the request.

To request deletion, email uzairhassan1357@gmail.com from the email on your account. You can also disconnect Etsy as described above.

8. Data breaches

If we become aware of a personal data breach affecting NicheNet users or Etsy-connected shop data, we will notify affected users without undue delay. Where Etsy’s API terms apply, we will also report the breach to dpo@etsy.com and to the affected seller within 24 hours of becoming aware of it.

9. Your rights

Subject to applicable law, you may request:

• Access to personal data we hold about you
• Correction of inaccurate data
• Deletion of your account or personal data
• A portable export of account data we can reasonably provide

If you are in the UK or EEA, you may also have rights under the UK GDPR / EU GDPR, including the right to object to certain processing and to lodge a complaint with your local supervisory authority. Privacy requests: uzairhassan1357@gmail.com.

10. Cookies

NicheNet uses essential cookies or browser storage (for example session tokens) so you can sign in and use the Service. We do not currently use advertising cookies or third-party analytics cookies. You can clear site data in your browser settings; doing so may sign you out.

11. Children

The Service is not directed to anyone under 18. We do not knowingly collect personal information from children. If you believe a minor has provided data, contact uzairhassan1357@gmail.com and we will delete it.

12. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version on this page and change the “Last updated” date. For material changes, we may also notify you by email or an in-product notice when practical. Continued use of the Service after an update means you accept the revised policy.

13. Trademark notice

The term “Etsy” is a trademark of Etsy, Inc. This application uses the Etsy API but is not endorsed or certified by Etsy, Inc.

Contact

Privacy and support: uzairhassan1357@gmail.com
Website: https://nichenet.fynktech.com