Privacy Policy

MadebyAandADesigns · Last updated: April 2026 · Operator: Antonio Ulloa

About This Application

This is a private, internal order management tool used exclusively by the shop owner of MadebyAandADesigns on Etsy. It is not a public-facing product and is not accessible to customers or the general public.

Data We Access

Etsy order data — order IDs, buyer first names, personalization text, and shipping details, accessed via the Etsy API solely for order fulfillment and production planning.
Shippo tracking data — carrier tracking status for shipped orders.
Listing data — product titles, prices, views, and favorites for internal analytics.
No payment card numbers, full billing addresses, or sensitive financial data are accessed or stored.

Data Storage

Order and listing data is stored in a private AWS DynamoDB database in the us-east-2 region, accessible only to the shop owner. Records are automatically deleted after 90 days via DynamoDB TTL.

No data is stored on end-user devices. Session data is stored in an encrypted, server-side cookie.

SMS Notifications

This application sends automated SMS alerts exclusively to the shop owner's personal mobile phone number via Twilio. The recipient phone number is entered by the owner directly into the server configuration at setup time.

        No customer or end-user phone numbers are collected, stored, or messaged under any circumstances. Mobile phone numbers are never shared with third parties or affiliates for marketing or promotional purposes. Message frequency varies based on order volume — typically 1–10 messages per day. Message and data rates may apply.
      

Data Sharing

No personal data is sold, rented, or shared with third parties for marketing or advertising purposes. Order data is used solely for internal shop operations.

Data is shared only with the following service providers, strictly to operate the application:

Etsy API — order and listing data retrieval
Twilio — SMS delivery to the shop owner only
AWS Bedrock — AI-assisted personalization parsing (data is not retained by AWS beyond the duration of the API call)
Shippo — shipment tracking status

Security

All data is transmitted over HTTPS. API credentials and session secrets are stored as environment variables and are never committed to source control. Access to the application requires Etsy OAuth authentication.

Your Rights

As this application processes only the shop owner's own business data, no third-party data subject rights apply. Etsy buyer data is governed by Etsy's Privacy Policy.

Contact

For questions about this privacy policy, contact the shop owner via the MadebyAandADesigns Etsy shop.