Eto Eto

Privacy Policy

Last updated: February 2025

1. Introduction

Welcome to Eto. Eto is operated by ETO, a business entity founded and based in Finland ("ETO," "we," "our," or "us"). We are committed to protecting your privacy and operating a privacy-centric platform. This Privacy Policy explains how we handle information when you use our e-commerce productivity platform specializing in Etsy store management.

Eto is designed with privacy at its core. We do not monitor, log, or store your search queries, research activity, or platform usage behavior on our servers. Your activity on Eto is your own, and you bear sole responsibility for how you use our platform and the decisions you make based on information obtained through it.

By using our services, you agree to the practices described in this policy. If you do not agree, please do not use our services.

2. Information We Collect

We collect only the information strictly necessary to deliver our services. We do not engage in behavioral tracking, activity logging, or profiling of our users.

2.1 Information You Provide

  • Account Information: Name, email address, password, and registration details
  • Store Connection Data: Etsy shop details and OAuth connection tokens. All API keys and access tokens are stored using encryption at rest
  • Product Data: Product listings, images, descriptions, and inventory information that you choose to manage through our platform
  • Order Information: Order details and transaction data imported through connected services
  • Communication Data: Messages and support tickets you send to us

2.2 Information We Do Not Collect

Eto is a privacy-centric platform. We want to be explicit about what we do not collect or store:

  • Search Queries: We do not log, store, or monitor what you search for on our platform
  • Usage Behavior: We do not track which features you use, how long you use them, or your activity patterns within the platform
  • Research Activity: Your product research, keyword analysis, and market research activity is not recorded or stored beyond your active session
  • Browsing History: We do not maintain logs of pages you visit or actions you take within the platform

2.3 Web Analytics

Our website uses Google Analytics, a third-party service, to collect aggregate site performance metrics such as total page views and general traffic patterns. This data is processed by Google, is not linked to your individual Eto account or in-platform activity, and is used solely to understand overall site performance. You may opt out of Google Analytics by using browser extensions or adjusting your cookie preferences.

2.4 Third-Party Integrations

When you connect third-party services to our platform, we access data from those services solely to provide the functionality you have requested:

  • Etsy API data (shop information, listings, orders) accessed through your authorized OAuth connection
  • Gmail/Email service data (for order management), accessed only with your explicit authorization
  • Payment processing information, handled entirely by our third-party payment processor (Stripe)

2.5 Public Data Sources

Market research data, product information, and marketplace analytics provided through our platform are derived exclusively from publicly available sources. Eto does not access any private, restricted, or non-public data. All data displayed in our research tools is information that is freely accessible to any member of the public.

3. How We Use Your Information

We use the information we collect for the following purposes:

  • Service Delivery: To provide, maintain, and improve our platform and services
  • Account Management: To create and manage your account, process transactions, and send notifications
  • Store Management: To connect and manage your Etsy stores, sync listings, and process orders
  • Product Research: To enable product research, keyword analysis, and market insights
  • Communication: To respond to inquiries, provide customer support, and send service updates
  • Platform Improvement: To identify and resolve technical issues and improve the reliability of our services, without tracking individual user behavior
  • Security: To detect, prevent, and address technical issues, fraud, and security threats
  • Legal Compliance: To comply with legal obligations and enforce our terms of service

4. Information Sharing and Disclosure

We do not sell your personal information. We may share your information in the following circumstances:

4.1 Service Providers

We may share information with third-party service providers who perform services on our behalf, such as:

  • Cloud hosting and infrastructure providers
  • Payment processors and billing services
  • Google Analytics for aggregate web metrics only
  • Customer support platforms

4.2 Legal Requirements

We may disclose information if required by law, court order, or government regulation, or to:

  • Comply with legal obligations
  • Protect our rights, property, or safety
  • Prevent fraud or security issues
  • Respond to legal requests

4.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

5. Data Security

We implement appropriate technical and organizational measures to protect your information, including:

  • Encryption: All sensitive data, including API keys, access tokens, and credentials, is encrypted at rest and in transit
  • Secure authentication and access controls
  • Regular security assessments and updates
  • Limited access to personal information on a need-to-know basis

5.1 Hosting and Infrastructure

Our platform and data are hosted on Railway.com, a cloud infrastructure provider. Data is stored on Railway's managed PostgreSQL databases with encryption and access controls. For information about Railway's security practices, please refer to Railway's own privacy and security documentation.

5.2 Security Limitations

No method of transmission over the internet or electronic storage is 100% secure. While we implement industry-standard security measures to protect your information, we cannot guarantee absolute security. In the unlikely event of a data breach, ETO, its founder, employees, and agents shall not be held liable for any direct, indirect, incidental, or consequential losses arising from such a breach, to the maximum extent permitted by applicable law. We will, however, comply with all applicable breach notification requirements under Finnish and EU law.

6. User Responsibility

Eto is built on the principle that your business activity is yours alone. We do not monitor how you use our tools, and we do not retain records of your searches, research queries, or platform interactions beyond what is necessary for the immediate delivery of the service.

Because we do not track your activity, you bear sole responsibility for your use of the platform, including compliance with all applicable laws and the terms of service of any third-party platforms you interact with through Eto, including but not limited to Etsy's Terms of Use.

7. Your Rights and Choices

You have the following rights regarding your personal information:

  • Access: Request access to your personal information
  • Correction: Request correction of inaccurate or incomplete information
  • Deletion: Request deletion of your personal information
  • Portability: Request a copy of your data in a portable format
  • Opt-Out: Unsubscribe from marketing communications
  • Account Deletion: Delete your account and associated data

To exercise these rights, please contact us at the information provided in the Contact section below.

8. Cookies and Tracking Technologies

We use cookies strictly for essential platform functionality, including session management and authentication. We do not use cookies to track your behavior, build user profiles, or serve targeted advertising.

Our website uses Google Analytics, which places its own cookies to collect aggregate site performance data. This data is not linked to your individual Eto account. You can instruct your browser to refuse all cookies or install a Google Analytics opt-out browser extension. However, refusing essential cookies may prevent you from using some portions of our service.

9. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. When you delete your account, we will delete or anonymize your personal information, except where we are required to retain it for legal purposes.

10. Children's Privacy

Our services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal information, please contact us, and we will take steps to delete such information.

11. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from those in your country. By using our services, you consent to the transfer of your information to these countries.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. You are advised to review this Privacy Policy periodically for any changes.

13. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us: