Merchzo Privacy Policy

When you create an account, we receive your email address and any name or profile information you choose to provide. Authentication information is handled through Supabase.

To use Merchzo, you may provide reference images, uploaded designs, prompts and instructions, product settings, listing content, generated files, and saved projects or listings.

Our hosting and security infrastructure may generate basic request and server logs, IP address, device and browser information, timestamps, and error or security information. We use these records to operate and protect the service.

When you request design, image, research, or text features, relevant prompts, instructions, images, and product details may be sent to configured AI or image processing providers only as needed to perform that request. Review output before using it publicly.

We use Vercel for hosting and Supabase for authentication, database, and storage. Depending on the feature and configuration, Cloudflare may process image generation, Google Gemini may process analysis or text, and Apify may support keyword research. These providers process information needed to deliver the feature.

Merchzo intends to let sellers connect Etsy accounts through Etsy's official OAuth authorization flow. This connection is not active yet. You will choose whether to authorize access; Merchzo will never ask for your Etsy password.

When available, we will request only the scopes needed for enabled features and use Etsy API information for seller-requested Merchzo functionality. We will not use screen scraping as a substitute for authenticated Etsy API access. You will be able to disconnect Etsy when the integration is implemented.

Etsy is a separate third-party service governed by its own terms and privacy policies.

When third-party integrations become available, connection tokens may be stored on the server and used only to perform functions you authorize. We will describe the available controls when those connections launch.

We use information to provide Merchzo, authenticate accounts, save projects and settings, process requested designs and content, provide integrations you activate, prevent abuse, troubleshoot errors, and communicate service or support information.

We share information with service providers needed to operate requested functionality, when required by law, or as part of a business transfer. Merchzo does not sell users' personal information to advertisers.

We retain data for as long as reasonably necessary to provide the service, maintain legitimate records, meet legal or security obligations, or until deletion where applicable. A deletion request may not remove information that must reasonably be retained for those purposes.

You may update account or profile information, choose whether to activate third-party integrations, and disconnect integrations when supported. You may also contact support or request account and data deletion.

See Data & Account Deletion for the current request process.

We use reasonable technical and organizational measures designed to protect information. No online service can guarantee absolute security.

Merchzo is not intended for children under 13. If you believe a child under 13 has provided information, contact us.

We may update this policy as the service changes. The updated date on this page will show when the current version took effect.

For privacy questions or requests, email us at the support address below.