Privacy Policy

Last updated: October 4, 2026

This Privacy Policy explains how ShotNList ("we", "us", "our") collects, uses, and protects information when you use our website (shotnlist.com), our Chrome extension, and related services (collectively, the "Service").

1. Who We Are

ShotNList is an eBay and Etsy listing automation tool built for gemstone and jewelry sellers. The Service includes a website where you manage your account and settings, and a Chrome extension that automates listing creation, relisting, offers, and buyer messages on your behalf, directly in your browser.

2. Information We Collect

Data type	Why we collect it
Account info (name, email, hashed password)	To create and secure your ShotNList account
eBay OAuth access & refresh tokens	To list, relist, send offers, and message buyers on your behalf via eBay's official API. We never see or store your eBay password.
Etsy OAuth access & refresh tokens	To create listings and keep your inventory in sync on your behalf via Etsy's official API. We never see or store your Etsy password.
Excel/listing data you upload (titles, prices, SKUs, gemstone specifics)	To create and manage your eBay/Etsy listings
Product photos you select	To upload them directly to your eBay/Etsy listings — photos are sent straight from your device to eBay/Etsy and are not stored on our servers longer than needed to process a job
Job & activity logs (listings created, offers sent, messages sent)	To show you progress and history in your dashboard
Browser extension settings (stored locally via Chrome storage)	To remember your preferences across sessions

3. How the Chrome Extension Works

The ShotNList Chrome extension requests the following permissions, used only for the purposes described:

activeTab / scripting: to read and fill in listing fields on eBay and Etsy pages you have open, only when you start a listing job.
tabs / windows: to open and close eBay/Etsy tabs needed to complete automation tasks (e.g. sending an offer, relisting an item).
storage / unlimitedStorage: to store your login session and settings locally in your browser, and to temporarily hold uploaded photos before they're sent to eBay/Etsy.
alarms: to schedule periodic checks (e.g. checking for listings that are about to expire).
notifications: to alert you when a job finishes or an error occurs.
power: to keep your screen awake only while a listing job you started is running, so the job is not interrupted. This is released automatically as soon as the job ends.
offscreen: to generate listing description cards and slideshow videos locally in your browser — this processing happens on your device, not on our servers.
Host permissions (ebay.com, etsy.com, shotnlist.com): required to read/fill listing pages and to sync job data with your ShotNList account.

The extension only acts on eBay or Etsy pages, and only when you explicitly start a job from the ShotNList dashboard or extension popup. It does not run in the background on unrelated websites.

4. How We Use Your Information

To operate core features: Auto Lister, Smart Relist, Offer Sender, Auto Messages, and cross-channel inventory sync
To show you your activity, job history, and analytics in your dashboard
To communicate with you about your account or the Service
To improve and troubleshoot the Service

We do not sell your personal data, your eBay/Etsy data, or your listing data to third parties. We do not use your data to train AI models.

5. Third-Party Services We Use

Service	Purpose
eBay APIs (Trading API, Fulfillment API, Negotiation API)	Listing creation, order/shipping data, offers
Etsy API	Listing creation on Etsy, and reading order/sale data to keep inventory in sync across channels (when an item sells on one channel, the matching listing on the other channel is deactivated)
Groq (AI text generation)	Powers Smart Relist title rewriting. Only the relevant listing title is sent — never your account credentials, login info, or full eBay/Etsy data. See Groq's Privacy Policy.

6. Data Storage & Security

Your eBay and Etsy OAuth tokens are stored encrypted-at-rest on our server and are never exposed to the browser or extension directly.
Passwords are hashed using industry-standard bcrypt hashing — we cannot see your plaintext password.
All traffic between your browser, our server, and eBay/Etsy is encrypted via HTTPS/TLS.
Server access is restricted, key-based, and regularly patched.

7. Data Retention

We retain account and job data for as long as your account is active. You can request deletion of your account and associated data at any time by contacting us (see Section 10). Disconnecting your eBay or Etsy account revokes our access token and deletes it from our records.

8. Your Choices

You can disconnect your eBay or Etsy account at any time from the ShotNList dashboard.
You can uninstall the Chrome extension at any time, which removes all locally stored extension data from your browser.
You can request a copy of your data or full account deletion by contacting us.

9. Children's Privacy

ShotNList is intended for business use by eBay/Etsy sellers and is not directed at children under 16. We do not knowingly collect data from children.

10. Contact Us

If you have questions about this Privacy Policy or your data, contact us at: shotnlist@gmail.com

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date at the top of this page.