Data Retention Policy

Published by: OrderOcean, a trading name of DAATAA LIMITED, registered in England and Wales (Company No. 08638599). Registered office: Unit 14 Queens Cross Business Park, Angel Street, Dudley, England, DY1 1TB. Contact: [email protected]

This page explains how OrderOcean stores, processes, and deletes data obtained through marketplace API integrations, including the Etsy Open API. The periods below describe the retention rules OrderOcean applies to each category of marketplace API data.

Etsy API Data Retention

Data category How it is stored Why it is processed Retention while connected Deletion after disconnect Backup expiry
OAuth access token Encrypted at rest, server-side only, never in frontend Authenticate Etsy API requests Until expiry Deleted and revoked immediately on disconnect No plaintext backup retained
OAuth refresh token Encrypted at rest, server-side only, never in frontend Maintain seller-authorised connection While seller account is connected Revoked via Etsy API and deleted immediately on disconnect No plaintext backup retained
Etsy shop identity (shop ID, shop name) Encrypted database, tenant-scoped Connect seller’s Etsy shop; scope all Etsy data to correct seller While seller account is connected Deleted within 30 days of account closure or disconnect Expires from encrypted backups within 60 days
Etsy listing / inventory data Encrypted database, tenant-scoped Inventory and listing management; displayed content refreshed per Etsy freshness rules (6-hour maximum for listing data) While seller account is connected Deleted within 30 days of disconnect Expires from encrypted backups within 60 days
Etsy order / receipt data Encrypted database, tenant-scoped Order management and fulfilment workflow Only as long as operationally required Deleted or anonymised within 30 days of disconnect Expires from encrypted backups within 60 days
Buyer shipping address Encrypted database, tenant-scoped Fulfilment processing only; not used for marketing Only while operationally required for the specific fulfilment task Deleted promptly after fulfilment need ends; no later than 30 days after disconnect Expires from encrypted backups within 60 days
Tracking / fulfilment records Encrypted database, tenant-scoped Confirm fulfilment status submitted to Etsy Limited operational period Deleted within 30 days of disconnect Expires from encrypted backups within 60 days
Application error logs Log management system Security, debugging, incident response 90 days rolling Logs are redacted of tokens, PII, and OAuth credentials before storage Expires per log retention schedule

Etsy Freshness Controls

Etsy listing data displayed by OrderOcean is refreshed at least every 6 hours, as required by Etsy’s API Terms. Other Etsy content displayed is refreshed at least every 24 hours. Stale data is not displayed beyond these thresholds.

What OrderOcean Does Not Do With Etsy Data

  • OrderOcean does not sell Etsy data.
  • OrderOcean does not use Etsy data for advertising or marketing audiences.
  • OrderOcean does not use Etsy data to train AI or machine learning models.
  • OrderOcean does not scrape Etsy.
  • OrderOcean does not collect or store Etsy account passwords.
  • OrderOcean does not access buyer email addresses unless separately approved by Etsy.

Your Rights

You have the right to request access to, correction of, or deletion of your personal data held by OrderOcean. To exercise these rights, contact [email protected]. We will respond within 30 days.

Changes to This Policy

We will update this page when our data retention practices change. The date at the top of the page reflects the last update.

Last updated: September 2026