StoreVitals
Start for free

Legal

Privacy policy

What we read, why we read it, and what we never store. The short version: your shop's data is yours, it is read-only, and we keep as little of it as the product can run on.

Last updated 7 September 2026 · Applies to storevitals.app and the StoreVitals application.

StoreVitals ("we", "us") is a diagnostic tool for Etsy sellers. This policy explains what we collect, why, and what we do with it. The short version: we read your shop's data so we can show it back to you with a diagnosis; we do not sell it, we do not write to your shop, and we store as little as we can.

Who we are

StoreVitals is operated by Shourabh Modak, a sole trader registered in Queensland, Australia (ABN 65 238 574 946), trading as StoreVitals. You can reach us at hello@storevitals.app, which is read by the person who built it.

What we collect, and why

Waitlist (closed). Before sign-up opened we ran a waitlist that stored an email address, shop URL, order-volume range and Google Analytics answer. The form is gone. Entries collected then are kept only until we have contacted the people on it, and are then deleted.

Account. Signing in creates an account holding your email address and a randomly generated workspace identifier. Authentication is handled by a managed identity provider; we do not store your password.

Etsy shop data. With your permission, granted through Etsy's own authorisation screen, we read your shop's listings, orders, transactions, payment ledger and reviews. We request read-only scopes and never write to, publish to, or change anything in your shop. This data is what the product runs on: it is stored in your workspace and used to compute the findings, verdicts and figures shown to you.

Review text is not stored. For reviews we keep the star rating, the date and whether the review had text. We never store a buyer's words.

Google Analytics. If you choose to connect a Google Analytics property, we read aggregated traffic and engagement data for your shop pages, using the read-only scope analytics.readonly. This data carries no personal information about your visitors and no money figures; it is joined to your Etsy data by listing only. We request no other Google scope, and we never write to, modify or delete anything in your Google Analytics account.

How we handle data from Google APIs. StoreVitals’ use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically, data obtained through Google Analytics is used only to provide and improve the shop analytics you see in your own workspace; it is never transferred to anyone else except as needed to provide that service, to comply with applicable law, or as part of a merger or acquisition; it is never used for advertising, and it is never sold. It is not used to train generalised artificial-intelligence or machine-learning models, and no human reads it except where you have given explicit permission, where it is necessary for security purposes such as investigating abuse, or where the law requires it. Revoking StoreVitals’ access in your Google account permissions stops any further reads immediately.

Costs you enter. Cost-of-goods figures and supplier invoices you upload are used only to compute your profit. Invoice files are parsed for a column mapping and the resulting figures; we do not use them for anything else.

Questions you ask. Questions typed into "Ask your shop" are sent, together with the relevant figures from your workspace, to a third-party language-model provider to compose the answer. The provider is Anthropic, whose API terms prohibit training on data submitted through it (see Anthropic's privacy policy and commercial terms). Your figures are computed before the model sees them; it writes sentences and never produces a number.

Technical logs. Standard server logs (request paths, timestamps, error details) are kept for a limited period to keep the service running and to investigate problems.

What we do not do

How we measure this website

We use Google Analytics on these public marketing pages to see how many people visit and where they came from: a link on Instagram, a video, a search. It runs in a cookieless mode: it is configured with browser storage switched off and advertising and analytics consent denied by default, so it writes no cookie and stores nothing in your browser. That is why there is no cookie banner on this site.

The honest trade: without anything stored in your browser, we cannot tell a returning visitor from a new one, so our visitor counts are approximate and err on the high side. We think a page that measures itself imprecisely is better than a page that asks you to accept tracking before you can read it.

What is collected is the page you viewed, the referring site or campaign, and coarse technical details your browser sends anyway (approximate region, device type, language). We also record when someone clicks a sign-up button, so we can tell which channel sends people, never who they are. Google's handling of this data is covered by Google's privacy policy. Amazon CloudFront, which serves this site, also keeps standard access logs.

The signed-in application at /app carries no analytics of any kind.

Where your data is stored

Your shop data is stored with Amazon Web Services in the Sydney region (ap-southeast-2), and access tokens for Etsy and Google are encrypted at rest. Two things sit outside that region by necessity and hold no personal data: the certificate for this website, which Amazon requires to live in us-east-1, and this public marketing site itself, which is served from a global content delivery network. Questions sent to "Ask your shop" are processed by Anthropic in the United States.

How long we keep it

Waitlist entries are kept until launch and for a reasonable period afterwards, then deleted unless you have created an account. Workspace data is kept for as long as your account exists. You can delete a shop yourself, from Settings → Delete this shop, and it is erased straight away — the lake data, the computed numbers, and our stored Etsy and Google tokens. You can also ask us to, at hello@storevitals.app, and we do the same within 30 days. Revoking our access in your Etsy or Google account settings stops any further reads immediately.

Your rights

You can ask us at any time what we hold about you, ask for it to be corrected or deleted, or ask for a copy. Email hello@storevitals.app. If you are in the UK, EU or Australia you also have the rights set out in the applicable privacy law, including the right to complain to your supervisory authority.

Third parties we rely on

Changes to this policy

If we change this policy in a way that matters, we will email account holders and update the date at the top of this page.