Privacy Policy — Etsy SEO AI Plugin

1. What we collect

The Extension collects and processes only the minimum data required to do its job:

• Authentication information — an API token tied to your paid subscription. Stored locally via chrome.storage.local. Never transmitted except in authenticated requests to our generation API.
• Website content— the title, tags, and description fields of the Etsy listing you currently have open in the Etsy seller dashboard. These values are sent to our AI provider only when you click "Generate" and only for the duration of that single request.
• User preferences — your UI language (English / Ukrainian / Russian), saved prompt templates, and the Pro/Free plan flag. Stored locally on your device.

2. What we do NOT collect

• We do not collect your name, email, phone number, or postal address through the Extension itself.
• We do not collect health information, financial information, or payment data. Subscription billing is handled externally by Stripe.
• We do not collect your browsing history, web history, or data from any site other than Etsy seller pages.
• We do not collect your location, IP geolocation, or device identifiers beyond standard HTTPS metadata.
• We do not read, store, or transmit any content from Etsy sites outside the specific listing form fields the Extension is actively working on.

3. How we use your data

The data above is used solely to provide the core functionality of the Extension:

• Generate AI-powered SEO suggestions for your listings.
• Persist your settings across browser sessions.
• Authenticate your requests to our generation API against your subscription.

We do not use your data for advertising, profiling, creditworthiness checks, lending decisions, or any purpose unrelated to the Extension's single purpose.

4. Third parties

We share data with exactly two categories of third party, both strictly necessary:

• AI provider — when you request a suggestion, we send the listing fields you chose to optimize to our AI infrastructure provider (OpenRouter) to produce the SEO suggestions. The provider processes the request under its own privacy terms and does not retain the prompt as training data when used through our API endpoints.
• Stripe— handles subscription payments. The Extension itself never sees your payment card details; they are entered and stored directly on Stripe's systems.

We do not sell, rent, or otherwise transfer user data to any other third party for any purpose.

5. Where data is stored

• Your settings and API token live in your browser's local storage only.
• Generation logs (timestamps, token counts — NOT the listing content itself) are stored in our Supabase project (AWS us-east-1) for billing accuracy.
• Listing field contents sent to the AI provider for a generation request are transmitted over HTTPS and are not retained by us after the response is returned to the Extension.

6. Permissions the Extension requests

• storage — save your account token, language preference and minor UI state locally in your browser.
• identity — sign you in to your own MakeBox account via a standard OAuth flow (chrome.identity.launchWebAuthFlow). We only obtain a MakeBox auth token; we do not read your Google profile, contacts, or any other identity data.
• host permission for https://www.etsy.com/* — show the on-page panel and read the visible listing/shop fields (for context) to generate suggestions. The Extension does not modify Etsy pages or auto-fill any form — you copy a suggestion and paste it yourself.
• host permission for https://app.makebox.ai/* — the Extension's own backend and sign-in page: your API calls (generate a suggestion, keyword/shop insights, account plan) go here.

No permission is used beyond the function described. No remote code is executed — all JavaScript is bundled inside the Extension package.

7. Your rights

You can at any time:

• Uninstall the Extension — all locally stored data is deleted immediately by Chrome.
• Cancel your subscription — email us at the address below and we remove your account data within 30 days.
• Request a copy of the account data we hold about you.
• Request deletion of your account data (GDPR / CCPA).

8. Children

The Extension is not directed to children under 13 and we do not knowingly collect personal information from children.

9. Changes to this policy

We may update this Privacy Policy from time to time. The "Effective date" at the top reflects the most recent change. Material changes will be announced via the Chrome Web Store listing and, where possible, by notice inside the Extension.

10. Contact

Questions or requests regarding this Privacy Policy or your data:

• Email: sales@makebox.ai
• Website: https://makebox.ai

Operator: MakeBox AI. See our general site-wide Privacy Policy for terms that apply to the MakeBox AI website and other services.