Privacy Policy
How we collect, use, and protect your information.
This Privacy Policy explains what personal information we collect when you use the AuctionHelper Service ("Service"), how we use it, and the choices you have.
Information we collect
- Account information — email address, hashed password, account preferences you configure.
- eBay connection data — OAuth refresh tokens (encrypted at rest), your eBay username, and permission scopes you have granted.
- Marketplace data — listings, orders, prices, and other eBay data we retrieve on your behalf in the course of providing the Service.
- Usage data — logs of API calls, page views, and actions you take in the Service. Used for operational security, audit compliance, and product improvement.
How we use your information
- To provide the Service — retrieving your eBay listings, pricing them against comps, publishing or modifying listings you explicitly request.
- For security and abuse prevention — rate limiting, brute-force detection, fraud investigation.
- To comply with legal obligations — including eBay's marketplace-account-deletion requirements, which trigger deletion of your data upon notification.
- To communicate with you — service announcements, security notifications, and (only if you opt in) marketing.
How we share your information
We do not sell your personal information. We share it only:
- With eBay, as required to operate the Service on your behalf.
- With sub-processors (cloud hosting, transactional email, monitoring) under written data-processing agreements.
- When legally required — subpoena, court order, or valid law-enforcement request.
Data retention
We retain your account and marketplace data for as long as your account is active. Marketplace cache data respects eBay's retention rules (typically 24 hours for pricing, up to 30 days for other fields). Query logs are retained for up to 24 months for audit compliance. Details in our Data Handling Policy.
Your choices
- You may revoke our eBay OAuth access at any time from your eBay account settings.
- You may request a copy of your personal data or ask us to delete it by emailing info@auctionhelper.com.
- You may opt out of marketing emails via the unsubscribe link in every marketing message.
Security
We use industry-standard security practices: TLS 1.2+ for all network traffic, bcrypt for password storage, Fernet symmetric encryption for OAuth refresh tokens with keys held in AWS SSM SecureString, and structured audit logging.
Children
The Service is not intended for children under 18.
Changes to this policy
We may update this Privacy Policy from time to time. Material changes will be communicated by email or in-product notice.
Contact
Privacy inquiries: info@auctionhelper.com