Privacy policy

• Your account: your name, email address and password. Passwords are stored only as a salted hash.
• Your shop: what you enter or import: items, photos, costs, storage locations, listings, sales, expenses, mileage, receipts and notes.
• Orders and buyers: when a sale syncs from a marketplace, the buyer's name and shipping address on that order, so you can ship it and keep records. Buyer messages and offers you receive or paste into the inbox.
• Marketplace connections: the access tokens marketplaces (eBay, Etsy, Shopify and others) give Otter when you connect them, and your account ID there. Tokens are encrypted (AES-256-GCM) before they are stored and are never sent to your browser.
• Optional connections: if you connect an email inbox to read purchase receipts or buyer-message notices, its password is encrypted the same way. The same applies to a Discord bot token for deal alerts.
• Browser extension: the pairing code links your browser to your shop. We store only a hash of it. Passwords for Poshmark, Mercari, Facebook and other sites stay in your browser; Otter never sees them.
• Sign-in cookie: one cookie keeps you signed in. We don't use analytics, advertising or tracking cookies.

• To run the features you use: inventory, listings, cross-listing, sales sync, take-downs, shipping, profit reports, the inbox and alerts.
• To act on marketplaces only when you ask: publish listings you approve, end listings when an item sells, sync your orders, change prices you set, and send replies you send.
• To send account email, such as password reset links.

We don't sell your data, use it for advertising, or share it with anyone except the service providers below, and then only to run Otter.

• Cloudflare hosts the website.
• Supabase hosts the database and stored files (photos, receipts), in the United States.
• Resend sends account email.
• Anthropic (Claude) writes listing drafts and reads receipts and buyer messages, when those features are on. The photos and text needed for that request are sent to it. Anthropic doesn't use them to train its models.
• Marketplaces you connect (eBay, Etsy, Shopify, Whatnot, Amazon) receive what Otter sends on your behalf: listings, price changes, take-downs and replies. Shippo receives the addresses for shipping labels you buy through Otter, and Discord receives alerts if you set up a webhook.

Data from eBay is used only to provide Otter's features to the seller who connected it. Otter follows eBay's marketplace account deletion process: when eBay tells us an account was closed, we disconnect it and delete the tokens and eBay account ID we stored for it.

• Your data is kept while your account is open.
• You can delete all of your shop's data at any time: Your account → Danger zone → Start over. It removes items, photos, listings, sales, messages and files. You can choose to keep your marketplace connections.
• Disconnecting a marketplace in Settings deletes the tokens Otter stored for it.
• To close your account and delete everything, including your login, email hello@ottersell.com from the address you signed up with.

Connections to Otter use HTTPS. Each shop's data is kept apart at the database level, so one shop can't read another's. Marketplace tokens and connected passwords are encrypted at rest. No system is perfectly secure; if we learn of a breach that affects your data, we'll tell you.

Otter is for adults running a selling business. It isn't meant for children under 13, and we don't knowingly collect their data.

If this policy changes, the date at the top changes too. For anything significant, we'll say so in the app. Questions or requests: hello@ottersell.com. See also About Otter.