Privacy Policy (Datenschutzerklärung)

Last updated: 16 September 2026

This policy explains what personal data Moustor processes, why, and your rights under the GDPR.

1. Controller

2. What we process and why

• Account data — e-mail address, password (stored as a salted hash), shop name and settings. Purpose: providing the service, login, support (Art. 6(1)(b) GDPR).
• Your shop content — products, shop knowledge, rules, and the customer conversations you paste or open in Etsy Messages, plus the drafts generated for them. Purpose: generating and validating reply drafts, conversation memory, usage statistics (Art. 6(1)(b)). On the free plan conversation history is kept for 7 days; on paid plans until you delete it or your account.
• Customer messages of your buyers — you decide which messages Moustor sees. You are the controller for your buyers' data; we process it on your behalf to draft replies. Do not paste more than needed.
• Private message reminders — when you save one, we store the selected sent-message snapshot, its conversation name and identifier, the due date/time and any private note. Purpose: providing the private follow-up you asked for (Art. 6(1)(b) GDPR). A reminder never sends or schedules a buyer message.
• Billing data — handled by our merchant of record Paddle (see 3). We store only the Paddle customer and subscription identifiers and the subscription status.
• Technical data — IP address, request timestamps and a request id in server logs for security, abuse prevention and rate limiting (Art. 6(1)(f)); logs are rotated after a short period.

3. Processors and recipients

• AI drafting: the conversation text, your relevant products, knowledge and rules are sent to our AI provider OpenRouter, Inc. (US) which routes them to the model provider (currently Anthropic). Transfers are covered by standard contractual clauses / the EU-US Data Privacy Framework. The provider is contractually bound not to train on this data.
• Payments: Paddle.com Market Ltd (UK) / Paddle.com Inc. (US) as merchant of record processes your name, e-mail, billing address, payment details and invoices under its own privacy policy. When you are signed in, Paddle's script also receives your Paddle customer id to show you subscription reminders (Paddle Retain).
• Hosting: Hetzner Online GmbH, Germany (EU data centre). Database and backups stay in the EU.
• Etsy: when you request a draft, the Moustor extension reads the open conversation, available order details and your note, and sends that context to Moustor for AI drafting. It inserts a draft for you to review, edit and send. When you click Send after drafting, it records reply feedback, including edited reply text when applicable. The extension does not import products or read shop listing grids. Product import and sync are handled separately by our server through the Etsy Open API v3 — the complete public listing record: title, description (including any product-safety / GPSR text you keep there), price, stock, tags, materials, favourite count, renewal settings, timestamps and images. While your shop is connected we refresh that listing mirror at least every 6 hours and switch off products whose listings are no longer active, so what Moustor shows never lags Etsy by more than Etsy's API Terms allow. We do not receive your Etsy credentials and do not act on your Etsy account. The term 'Etsy' is a trademark of Etsy, Inc. This application uses the Etsy API but is not endorsed or certified by Etsy, Inc.

4. Cookies and local storage

We use necessary session cookies and browser storage to keep you signed in and remember your privacy choices. Paddle's checkout and Retain script may use necessary cookies; see Paddle's policy.

Optional product analytics and Reddit advertising measurement have separate consent choices. Advertising measurement is off until you opt in (Art. 6(1)(a) GDPR). If you agree, we retain a Reddit ad-click identifier in your browser for attribution for up to seven days and use the Reddit Pixel on the public homepage to report a page visit, and on an isolated account-created page to report a completed signup. The pixel may set first-party advertising cookies and sends Reddit your IP address, browser/device information, advertising identifiers and a random conversion identifier. We do not pass your email, account identifiers, buyer messages or drafts to the pixel, and it is not loaded in private app screens.

Reddit processes this information to attribute and measure advertising, including processing outside the EEA, under its privacy policy. You may refuse optional measurement or withdraw consent at any time using Privacy choices. Withdrawal stops future measurement and clears the Reddit click identifier and pixel cookies that Moustor can access; it does not undo earlier processing.

5. Retention

Account data is kept until you delete your account (dashboard → delete account), after which it is removed within 30 days except where invoices must be retained by Paddle for tax law (up to 10 years).

Listing data mirrored from Etsy is kept only as long as it serves your product list: it is refreshed while your shop is connected, deactivated as soon as the listing leaves Etsy, and deleted when you delete the product or your account. Your own notes on a product are yours and are never overwritten by a sync.

Beyond that, data ages out automatically — you do not have to ask:

• Customer messages and conversations — deleted 400 days after the last activity in the thread, together with the drafts and message reminders generated for it. Deleting a conversation or your account also deletes its reminders.
• AI prompt logs (the request and response of each generation, which quote the buyer's message) — deleted after 30 days. They exist for debugging and abuse investigation only.
• Order data mirrored from Etsy (receipts and sold line items, used for your sales insights) — deleted after about 3 years.

Deleting your account removes everything it owns immediately; it does not wait for these periods.

6. Your rights

You have the right to access, rectify, erase and port your data, to restrict or object to processing, and to withdraw consent at any time. Contact hello@moustor.com. You may also lodge a complaint with a supervisory authority, e.g. the data-protection authority of your German federal state.

7. Changes

We will post changes to this policy here and, for material changes, notify you by e-mail.