Privacy Policy

MI Tags Manager ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Chrome browser extension and related services (collectively, the "Service").

Please read this Privacy Policy carefully. By using the Service, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our Service.

1. Information We Collect

1.1 Personal Information

We collect the following personal information that you provide to us:

Email Address: Required for account creation, authentication via One-Time Password (OTP), email verification, and service communications.

1.2 Etsy Marketplace Insights Data

When you use our Service on Etsy's Marketplace Insights pages, our extension automatically collects and processes the following data visible on those pages:

Search Tags/Keywords: The tags and keywords displayed in Marketplace Insights
Listings Count: The number of listings associated with each tag
Search Volume: The number of searches for each tag
Timestamp: The date and time when data was last updated (continuously refreshed to the most recent)

Important Note: We do NOT access, collect, or store any of your Etsy listing data, shop information, sales data, customer information, or any other private data from your Etsy account. We only parse publicly visible information from Marketplace Insights pages when you are actively viewing them.

1.3 User Preferences and Settings

Saved Tags: Tags/keywords you choose to save for quick access
Interface Settings: Your UI preferences and customization options
Subscription Status: Information about your subscription tier (free/trial/paid)

1.4 Authentication Data

One-Time Passwords (OTP): Temporarily stored for authentication purposes only
Session Tokens: Stored locally in your browser to maintain your logged-in state

1.5 Information We Do NOT Collect

We want to be transparent about what we do not collect:

Your Etsy account credentials or cookies
Your Etsy listing data, titles, descriptions, images, or prices
Your Etsy shop name, sales data, or customer information
Your search history or browsing behavior
IP addresses or device information
Usage analytics or tracking data
Payment card information (handled securely by Stripe)
Transaction history
Error logs or crash reports

2. How We Use Your Information

2.1 To Provide and Maintain Our Service

Authenticate your identity via OTP-based login
Verify your email address to ensure account security
Display cached Marketplace Insights data to reduce load times
Synchronize your saved tags and preferences across devices
Manage your subscription status and access to features

2.2 To Communicate With You

Send authentication codes (OTP) for login
Send email verification links
Notify you of important service updates, changes, or maintenance

Note: We do NOT send marketing emails or promotional newsletters.

2.3 To Improve Our Service

Analyze aggregated, anonymized tag data to understand popular search terms
Improve our data caching mechanisms
Enhance user experience and service functionality

2.4 For Payment Processing

Process subscription payments through Stripe
Manage subscription status (active, trial, canceled)
Control access to paid features based on subscription tier

3. How We Store Your Information

3.1 Local Browser Storage

The following data is stored locally in your browser using Chrome's storage API:

Your saved tags/keywords
Your last used email address for login convenience
Authentication session tokens
Interface preferences and settings

This data remains on your device and can be cleared by removing the extension or clearing browser data.

3.2 Server Storage

The following data is stored on our secure servers located in Ionos data centers in Germany:

Email addresses
Marketplace Insights data (tags, listings count, search volume, timestamps)
Subscription status
One-Time Passwords (temporary, deleted after use or expiration)
User interface preferences

3.3 Data Security

We implement appropriate technical and organizational security measures to protect your data, including:

Encrypted data transmission (SSL/TLS)
Secure server infrastructure with regular updates
Password hashing and secure authentication mechanisms
Regular security audits and monitoring
Access controls and authentication requirements

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee absolute security.

4. How We Share Your Information

4.1 Third-Party Service Providers

We share certain information with trusted third-party service providers who assist us in operating our Service. These providers are contractually obligated to use your information only for the purposes we specify and to protect your information.

Stripe (Payment Processing)

Information Shared: Email address, subscription status
Purpose: Process subscription payments and manage billing
Privacy Policy: https://stripe.com/privacy
Note: Payment card information is handled directly by Stripe and is never stored on or transmitted through our servers

Amazon Web Services (AWS) SES (Email Delivery)

Information Shared: Email addresses
Purpose: Deliver authentication codes (OTP), verification emails, and service notifications
Privacy Policy: https://aws.amazon.com/privacy/

4.2 We Do NOT Sell Your Information

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

4.3 Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court order or government agency), or to:

Comply with legal obligations
Protect and defend our rights or property
Prevent or investigate possible wrongdoing in connection with the Service
Protect the personal safety of users of the Service or the public

4.4 Business Transfers

If we are involved in a merger, acquisition, or asset sale, your personal information may be transferred. We will provide notice before your personal information is transferred and becomes subject to a different Privacy Policy.

5. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

Retention Periods:

Email Address: Retained while your account is active and for 30 days after account deletion
Marketplace Insights Data: Continuously updated with latest data; historical data is overwritten
Saved Tags and Preferences: Retained while your account is active and deleted upon account deletion
OTP Codes: Deleted immediately after successful authentication or after expiration (typically 10 minutes)
Subscription Data: Retained while your account is active and for up to 7 years after account deletion for accounting and legal compliance purposes

When we no longer need your personal information for the purposes stated in this policy, we will delete or anonymize it in accordance with applicable data protection laws.

6. Your Data Protection Rights

Depending on your location, you may have the following rights regarding your personal information:

6.1 General Rights (All Users)

Right to Access: Request a copy of the personal information we hold about you
Right to Correction: Request correction of inaccurate or incomplete information
Right to Deletion: Request deletion of your personal information (subject to legal obligations)
Right to Data Portability: Request a copy of your data in a structured, machine-readable format

6.2 GDPR Rights (European Union Users)

If you are located in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR):

Right to Object: Object to our processing of your personal information
Right to Restriction: Request restriction of processing your personal information
Right to Withdraw Consent: Withdraw your consent at any time where we rely on consent to process your personal information
Right to Lodge a Complaint: File a complaint with your local data protection authority

6.3 CCPA Rights (California Users)

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA):

Right to Know: Request information about the categories and specific pieces of personal information we collect
Right to Delete: Request deletion of your personal information
Right to Opt-Out: Opt-out of the sale of personal information (Note: We do not sell personal information)
Right to Non-Discrimination: Not receive discriminatory treatment for exercising your CCPA rights

6.4 How to Exercise Your Rights

To exercise any of these rights, please contact us at admin@mitagsmanager.com. We will respond to your request within 30 days.

To protect your privacy and security, we may need to verify your identity before processing your request. We may ask you to provide additional information or use the email address associated with your account for verification purposes.

7. International Data Transfers

Our servers are located in Germany (Ionos data centers). If you are accessing our Service from outside the European Economic Area (EEA), please be aware that your information may be transferred to, stored, and processed in Germany.

We ensure that all international data transfers comply with applicable data protection laws, including the GDPR. For users in the EEA, we rely on the European Commission's adequacy decisions and implement appropriate safeguards such as Standard Contractual Clauses where necessary.

By using our Service, you consent to the transfer of your information to Germany and our third-party service providers located in other countries, as described in this Privacy Policy.

8. Children's Privacy

Our Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children under 18. If you are a parent or guardian and you become aware that your child has provided us with personal information, please contact us at admin@mitagsmanager.com.

If we become aware that we have collected personal information from children under 18 without verification of parental consent, we will take steps to delete that information from our servers promptly.

9. Cookies and Tracking Technologies

Our Service does not use cookies or tracking technologies for analytics, advertising, or marketing purposes.

We only use essential browser storage (via Chrome's storage API) to:

Maintain your login session
Store your saved tags and preferences locally
Remember your last used email address for login convenience

These are necessary for the basic functionality of our Service and cannot be disabled without affecting core features.

Note: Our Service does not access, use, or store any cookies set by Etsy or other websites you visit.

10. Third-Party Links

Our Service may contain links to third-party websites, including Etsy.com and our payment processor Stripe. We are not responsible for the privacy practices or content of these third-party sites.

We encourage you to review the privacy policies of any third-party sites you visit:

Etsy Privacy Policy: https://www.etsy.com/legal/privacy/
Stripe Privacy Policy: https://stripe.com/privacy
AWS Privacy Notice: https://aws.amazon.com/privacy/

11. Changes to This Privacy Policy

We may update our Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by:

Updating the "Last Updated" date at the top of this Privacy Policy
Sending an email notification to the email address associated with your account
Displaying a prominent notice within the Service

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information.

Your continued use of the Service after any changes to this Privacy Policy constitutes your acceptance of the updated policy. If you do not agree to the updated policy, you must stop using our Service and may request deletion of your account.

12. Data Breach Notification

In the event of a data breach that affects your personal information, we will:

Notify affected users via email within 72 hours of discovering the breach
Provide details about the nature of the breach and the information affected
Describe the measures we are taking to address the breach and prevent future incidents
Notify relevant supervisory authorities as required by applicable law

13. Account Deletion

You have the right to delete your account at any time. To delete your account:

Contact us at admin@mitagsmanager.com with your request
We will verify your identity using your registered email address
Upon confirmation, we will delete your account and associated data within 30 days

What happens when you delete your account:

Your email address, saved tags, and preferences will be permanently deleted
Your Marketplace Insights data will be anonymized or deleted
Your subscription will be canceled (no refunds for partial billing periods)
Local data stored in your browser will remain until you uninstall the extension or clear browser data
Some information may be retained for up to 7 years for accounting and legal compliance purposes

14. Legal Basis for Processing (GDPR)

For users in the European Economic Area, we process your personal information based on the following legal grounds:

14.1 Consent

You provide explicit consent when you create an account and agree to this Privacy Policy.

14.2 Contract Performance

Processing is necessary to provide the Service you have subscribed to, including:

Account creation and authentication
Providing access to cached Marketplace Insights data
Managing your subscription
Synchronizing your preferences across devices

14.3 Legitimate Interests

We process certain data based on our legitimate interests in:

Improving our Service through analysis of aggregated, anonymized data
Ensuring the security and integrity of our Service
Communicating important service updates

14.4 Legal Obligations

We may process your data to comply with legal obligations, such as:

Responding to lawful requests from public authorities
Complying with tax and accounting regulations
Maintaining records as required by law