Privacy Policy
Last updated: October 8, 2026
This Privacy Policy explains how GLOBAL SHOP RETAIL LTD ("we", "us") collects, uses and protects information when you use eBay Lister (the "Service"), a tool that imports product information from AliExpress and creates and manages listings on your eBay store.
1. Information we collect
- Account information: your email address and a securely hashed password.
- eBay account data: when you connect a store through eBay's sign-in, we receive OAuth access and refresh tokens, your eBay user name and user ID, and the store data needed to list items: business policies (shipping, return and payment), inventory locations, categories and item specifics. We never see or store your eBay password.
- Product and listing data: AliExpress product details you import (titles, descriptions, images, variations, prices, stock) and the listings, templates and settings you create.
- Technical data: server logs (IP address, request time, pages requested, errors) used for security and troubleshooting.
- Cookies: one essential session cookie to keep you signed in. We do not use advertising or tracking cookies.
2. How we use information
- To provide the Service: connect your eBay store, import products, create, publish, update and end listings, and sync prices and quantities.
- To secure the Service, prevent abuse and fix problems.
- To contact you about your account or important changes to the Service.
We do not sell your information, and we do not use eBay data for advertising or for any purpose other than providing the Service to you.
3. eBay data
Data received through eBay's APIs is used only to perform the actions you request in the Service, in accordance with the eBay API License Agreement. eBay access tokens are encrypted at rest. You can disconnect a store at any time in the Service, and you can revoke eBay Lister's access from your eBay account settings.
4. Service providers
We share data only with providers that help us run the Service:
- eBay: to manage your listings on your behalf.
- AliExpress: product pages or APIs are requested to import and sync product information.
- Vercel: application hosting.
- MongoDB Atlas: database hosting.
- Exchange-rate service (European Central Bank reference rates): currency conversion. No personal data is sent.
We may disclose information if required by law or to protect the rights and safety of our users or the Service.
5. Data retention and deletion
We keep your data while your account is active. You can delete your account and all associated data at any time from Settings → Delete account. When eBay notifies us that an eBay account has been closed or its owner has asked for deletion, we delete the connected store and its listing data. See our Data Deletion page for details.
Server logs are kept for a limited period for security purposes. Sync history is automatically deleted after 30 days.
6. Security
We use HTTPS for all traffic, hash passwords with bcrypt, encrypt eBay tokens with AES-256, and restrict access to production systems. No method of transmission or storage is completely secure, but we work to protect your information.
7. Your rights
Depending on where you live (for example under the GDPR or CCPA), you may have the right to access, correct, delete or export your personal data, and to object to or restrict its processing. Contact us at support@buythemesplugins.com and we will respond within 30 days.
8. International transfers
Our providers may process data in countries other than yours, including the United States. We rely on their safeguards for such transfers.
9. Children
The Service is intended for businesses and is not directed at children under 16. We do not knowingly collect their data.
10. Changes
We may update this policy. We will change the "Last updated" date and, for significant changes, notify signed-in users.
11. Contact
GLOBAL SHOP RETAIL LTD, email: support@buythemesplugins.com