Privacy Policy

Last updated: April 1, 2026

Spectro Web Solutions ("we", "us", "our") operates the SWS EtsyTool Chrome extension and related services. This Privacy Policy explains what data we collect, how we use it, who we share it with, and your rights regarding your data.

We take data protection seriously. As a service that handles customer order data, we are committed to protecting the privacy and security of all personal information processed through our platform.

1. Data Controller

Spectro Web Solutions, based in Poland, is the data controller for personal data processed through the Service. For data protection inquiries, contact us at spectrowebsolutions@gmail.com.

2. Data We Collect

2.1 Account Data (collected directly from you)

• Email address (for authentication and communication)
• Password (hashed, never stored in plain text)
• Subscription status and plan details

2.2 Order Data (collected from your Etsy CSV exports)

When you import an Etsy CSV file, the following data from your customers' orders is processed:

• Order ID (Etsy transaction identifier)
• Recipient name (the buyer / shipping recipient)
• Shipping address (street, city, province, postal code, country)
• Product SKUs, quantities, and prices
• Currency information

2.3 Usage Data (collected automatically)

• Number of orders processed per month
• Activity logs (import events, send events, error events)
• Timestamps of actions performed

2.4 Data We Do NOT Collect

• We do not collect buyer email addresses or phone numbers
• We do not collect payment card information
• We do not collect browsing history or track your web activity
• We do not access your Etsy account credentials
• We do not access your Dianxiaomi account credentials

3. How We Use Your Data

Data	Purpose	Legal Basis
Email & password	Account authentication	Contract performance
Order data	Process and submit orders to Dianxiaomi on your behalf	Contract performance
Shipping addresses	AI-powered address correction for accurate delivery	Legitimate interest
Usage data	Enforce subscription limits, prevent abuse	Legitimate interest
Activity logs	Customer support, debugging, service improvement	Legitimate interest

4. Third-Party Data Sharing

We share data only with the following third parties, strictly for service functionality:

4.1 Supabase (Database & Authentication)

Your account data and order data are stored on Supabase servers located in Singapore (Southeast Asia region). Supabase provides our database and authentication infrastructure. Supabase Privacy Policy.

4.2 Google Gemini AI (Address Correction)

Shipping addresses are sent to Google's Gemini AI API for correction (fixing spelling, standardizing formats, filling missing data). Only address components are sent — no email addresses, payment data, or buyer contact details are included. Google AI Terms.

4.3 Dianxiaomi (Order Submission)

Order data is submitted to Dianxiaomi's API on your behalf, using your existing authenticated session in the browser. We do not store or access your Dianxiaomi credentials.

We do not sell, rent, or share your data with any other third parties for marketing or advertising purposes.

5. Data Storage and Security

• All data is stored on Supabase servers with encryption at rest and in transit (TLS/HTTPS)
• Passwords are hashed using bcrypt — we cannot see your password
• Database access is protected by Row Level Security (RLS) — users can only access their own data
• API keys are stored server-side, not in the extension code
• The Chrome extension only communicates over HTTPS
• Session tokens are stored securely in Chrome's extension storage (encrypted, per-extension)

6. Data Retention

• Account data is retained as long as your account is active
• Order data is retained for up to 12 months after processing for customer support and dispute resolution
• Activity logs are retained for up to 6 months
• Upon account deletion request, all your data will be permanently deleted within 30 days

7. Your Rights

Under applicable data protection laws (including GDPR, as we are based in Poland), you have the right to:

• Access — Request a copy of all personal data we hold about you
• Rectification — Request correction of inaccurate data
• Erasure — Request deletion of your data ("right to be forgotten")
• Restriction — Request we limit processing of your data
• Portability — Request your data in a machine-readable format
• Objection — Object to processing based on legitimate interest

To exercise any of these rights, email us at spectrowebsolutions@gmail.com. We will respond within 30 days.

8. International Data Transfers

Your data is stored on servers in Singapore (Supabase) and may be processed by Google's servers globally (for AI address correction). These transfers are necessary for the performance of the Service. We rely on the service providers' compliance with applicable data protection standards.

9. Cookies and Tracking

The SWS EtsyTool Chrome extension does not use cookies or tracking technologies. Our website may use essential cookies for basic functionality only. We do not use analytics tracking, advertising pixels, or third-party tracking scripts.

10. Children's Privacy

The Service is intended for business use by adults aged 18 and older. We do not knowingly collect personal data from children under 18. If we discover that we have collected data from a minor, we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via the email address associated with your account. The "last updated" date at the top indicates when the policy was last revised.

12. Contact Us

For privacy-related questions, data requests, or complaints:

• Email: spectrowebsolutions@gmail.com
• WeChat: Savish_22

If you are unsatisfied with our response, you have the right to lodge a complaint with your local data protection authority. In Poland, this is the UODO (Urząd Ochrony Danych Osobowych).