Privacy Policy (Datenschutzerklärung)

Last updated: 30 August 2026

This policy explains what personal data Moustor processes, why, and your rights under the GDPR.

1. Controller

2. What we process and why

• Account data — e-mail address, password (stored as a salted hash), shop name and settings. Purpose: providing the service, login, support (Art. 6(1)(b) GDPR).
• Your shop content — products, shop knowledge, rules, and the customer conversations you paste or open in Etsy Messages, plus the drafts generated for them. Purpose: generating and validating reply drafts, conversation memory, usage statistics (Art. 6(1)(b)). On the free plan conversation history is kept for 7 days; on paid plans until you delete it or your account.
• Customer messages of your buyers — you decide which messages Moustor sees. You are the controller for your buyers' data; we process it on your behalf to draft replies. Do not paste more than needed.
• Billing data — handled by our merchant of record Paddle (see 3). We store only the Paddle customer and subscription identifiers and the subscription status.
• Technical data — IP address, request timestamps and a request id in server logs for security, abuse prevention and rate limiting (Art. 6(1)(f)); logs are rotated after a short period.

3. Processors and recipients

• AI drafting: the conversation text, your relevant products, knowledge and rules are sent to our AI provider OpenRouter, Inc. (US) which routes them to the model provider (currently Anthropic). Transfers are covered by standard contractual clauses / the EU-US Data Privacy Framework. The provider is contractually bound not to train on this data.
• Payments: Paddle.com Market Ltd (UK) / Paddle.com Inc. (US) as merchant of record processes your name, e-mail, billing address, payment details and invoices under its own privacy policy. When you are signed in, Paddle's script also receives your Paddle customer id to show you subscription reminders (Paddle Retain).
• Hosting: Hetzner Online GmbH, Germany (EU data centre). Database and backups stay in the EU.
• Etsy: the Moustor extension reads the message you are viewing on etsy.com and inserts your approved draft. Your product list is built from your own shop's listings in one of two ways: the extension reads your shop page in your browser, or — when you paste your shop URL — our server fetches your shop's public active listings from the Etsy Open API v3 using Moustor's own API key — the complete public listing record: title, description (including any product-safety / GPSR text you keep there), price, stock, tags, materials, favourite count, renewal settings, timestamps and images. While your shop is connected we refresh that listing mirror at least every 6 hours and switch off products whose listings are no longer active, so what Moustor shows never lags Etsy by more than Etsy's API Terms allow. We do not receive your Etsy credentials and do not act on your Etsy account. The term 'Etsy' is a trademark of Etsy, Inc. This application uses the Etsy API but is not endorsed or certified by Etsy, Inc.

4. Cookies and local storage

Moustor sets no tracking or advertising cookies. The web app keeps your login token in your browser's local storage (strictly necessary). Paddle's checkout and Retain script may set their own strictly necessary cookies; see Paddle's policy.

5. Retention

Account data is kept until you delete your account (dashboard → delete account), after which it is removed within 30 days except where invoices must be retained by Paddle for tax law (up to 10 years).

Listing data mirrored from Etsy is kept only as long as it serves your product list: it is refreshed while your shop is connected, deactivated as soon as the listing leaves Etsy, and deleted when you delete the product or your account. Your own notes on a product are yours and are never overwritten by a sync.

Beyond that, data ages out automatically — you do not have to ask:

• Customer messages and conversations — deleted 400 days after the last activity in the thread, together with the drafts generated for it.
• AI prompt logs (the request and response of each generation, which quote the buyer's message) — deleted after 30 days. They exist for debugging and abuse investigation only.
• Order data mirrored from Etsy (receipts and sold line items, used for your sales insights) — deleted after about 3 years.

Deleting your account removes everything it owns immediately; it does not wait for these periods.

6. Your rights

You have the right to access, rectify, erase and port your data, to restrict or object to processing, and to withdraw consent at any time. Contact hello@moustor.com. You may also lodge a complaint with a supervisory authority, e.g. the data-protection authority of your German federal state.

7. Changes

We will post changes to this policy here and, for material changes, notify you by e-mail.