Privacy Policy & Data Notice

1. Identity and Scope of the Service

Linkebay operates as an automated, multi-store operations platform for eBay sellers. Our platform provides inventory tracking, bi-directional stock synchronization, pricing automation, fulfillment reconciliation, and multi-currency profit calculation.

This policy applies to all users who access the List2Deliver portal and to data accessed through official eBay REST APIs under seller authorization.

2. eBay Marketplace Data We Collect

When a seller connects their eBay account to List2Deliver via eBay OAuth 2.0 authentication, we request only the minimal permissions required to provide inventory and order management functions. We collect and process:

• Seller Account Information: eBay User ID, store name, marketplace registration site, and store contact details.
• Authentication Credentials: Secure eBay OAuth 2.0 access and refresh tokens. We never collect or store seller eBay account passwords.
• Inventory & Listing Data: SKU numbers, listing titles, variations, inventory quantities, listing prices, categories, and item IDs.
• Order & Fulfillment Data: Order IDs, line items, buyer usernames, transaction amounts, shipping carrier methods, tracking numbers, and delivery addresses required solely for shipping fulfillment and tracking synchronization.
• Performance & Feedback Analytics: Seller standards, customer service metrics, return rates, and feedback summaries to assist the seller with operational quality monitoring.

3. How We Use eBay Marketplace Data

We process collected data exclusively for legitimate operational purposes authorized by the seller:

• Synchronizing inventory quantities in real time across multiple connected stores to prevent overselling and out-of-stock cancellations.
• Updating listing quantities, variations, and prices based on seller-configured rules and supplier stock feeds.
• Reconciling completed orders, verifying shipment status, and attaching tracking numbers.
• Calculating accurate net profits, marketplace fees, VAT, and currency conversion adjustments.
• Displaying store health, customer service cases, and operational logs to authorized store managers.

4. Third-Party Sharing and Non-Monetization Pledge

Marketplace data is only transmitted to:

• Official eBay APIs: To execute inventory updates, price adjustments, and fulfillment confirmations on behalf of the seller.
• Authorized Logistics & Tracking Services: Automated shipping tracking verification APIs (such as 17TRACK/Track718) strictly to verify package delivery status for the seller’s active orders.
• Hosting & Cloud Infrastructure: Highly secure, encrypted hosting providers operating under standard Data Processing Agreements (DPAs).

5. eBay Marketplace Account Deletion Compliance

In strict compliance with the eBay API License Agreement and eBay Marketplace Account Deletion notifications:

• When eBay delivers an automated Marketplace Account Deletion / Account Closure notification for any user whose data resides in our system, all personal data, order records, and identifiable identifiers associated with that user are permanently erased or pseudonymized within 30 days of receipt.
• Sellers may request complete deletion of their store data, inventory records, and order archives at any time by contacting our system administrator or disconnecting their store.

6. Data Security and Technical Safeguards

We implement comprehensive technical and organizational measures to protect data against unauthorized access, loss, or alteration:

• Encryption in Transit: All data transmissions between client browsers, our servers, and eBay REST APIs are strictly encrypted using TLS 1.3 / HTTPS.
• Encryption at Rest: OAuth tokens, API secrets, and sensitive integration credentials are encrypted in our database using robust encryption algorithms.
• Access Control: Granular, role-based access control (RBAC) ensures only authenticated, authorized operators can view specific store modules.
• Security Audits: Continuous logging and monitoring of API operations to detect and prevent unauthorized activities.

7. Data Retention & Revocation of Access

We retain operational data only as long as the seller maintains an active account and subscription with List2Deliver.

Sellers may revoke List2Deliver’s access to their eBay account at any moment through either:

• The List2Deliver Store Settings dashboard (disconnect integration).
• Directly within eBay: My eBay > Account > Permissions / Third-Party App Authorizations.

Upon revocation, active API synchronization ceases immediately and stored authentication tokens are permanently purged.

8. User Rights (GDPR, UK DPA, & CCPA)

Depending on your jurisdiction, you possess the following rights regarding your personal information:

• Right of Access: Request a copy of the personal data held about you.
• Right to Rectification: Request correction of inaccurate or incomplete information.
• Right to Erasure (Right to be Forgotten): Request permanent deletion of your stored records.
• Right to Restrict or Object: Restrict or object to specific data processing operations.
• Right to Data Portability: Receive your data in a structured, machine-readable format.

9. Cookies and Local Storage

List2Deliver uses strictly necessary session cookies and local storage tokens solely to maintain authenticated user login sessions, prevent cross-site request forgery (CSRF), and preserve essential interface preferences. We do not use third-party advertising or cross-site tracking cookies.

10. Contact and Data Inquiries

If you have questions, data inquiries, or wish to exercise your data protection rights under this Privacy Policy, please contact our data protection team: