Privacy Policy

1. Who we are

This service ("RdPod", "we", "us", "our") is operated by RdPod. You can reach us about privacy at [email protected].

2. Scope

This policy explains what information we collect when you use RdPod at https://rdpod.io, how we use and protect it, the third-party data sources we consume, and your rights. It applies to the RdPod application and its API.

3. Information we collect

• Account information — the email address you register with, a securely hashed password (we never store your password in plain text), your role, and account timestamps (created / last login). We also store your welcome-popup state per announcement (shown, deferred, dismissed, or whether you followed its button), with the times.
• Technical & usage data — your IP address, browser user-agent, and request logs (endpoint, time, status). We keep these in an internal audit log for security, abuse prevention and rate-limiting only.
• Local storage — after you sign in, we store a session authentication token in your browser's local storage. This is a strictly functional mechanism to keep you signed in. We do not use advertising or cross-site tracking cookies.
• Third-party market & trend data — we retrieve publicly available, aggregate marketplace and interest data from third-party sources and APIs (see Section 6). This data describes products, listings, shops and aggregate trends — not the private data of the individuals who use those platforms.

4. How we use information

• To provide the service — authenticate you and display market-research and consumer-trend insights.
• To keep the platform secure — detect and prevent abuse, enforce rate limits, and maintain an audit trail.
• To operate, maintain, debug and improve the service.

We do not sell your personal information, and we do not use it for advertising or profiling of individuals.

5. Legal bases (where GDPR / similar laws apply)

• Performance of a contract — to give you access to the service you signed up for.
• Legitimate interests — to secure the platform and prevent abuse.
• Consent — where required by law for any non-essential storage on your device (we currently use only functional storage).

6. Third-party data sources

RdPod reads publicly available data from third-party marketplaces and their APIs to compute aggregate trends. Each of these providers has its own terms and privacy policy that govern the underlying data. We consume this data only in aggregate and only to display consumer-trend insights inside the app.

7. Use of the Pinterest API

8. How we share information

We do not sell your personal data. We disclose information only to:

• Infrastructure providers that host and deliver the service (e.g. our server host and content-delivery / network-security provider), acting as our processors under appropriate safeguards.
• Authorities, where we are legally required to do so, or to protect our rights and the safety of users.

9. Data retention

We keep account information for as long as your account is active. Security and audit logs are retained only for a limited period necessary for security and abuse-prevention, after which they are deleted or anonymized. Aggregate market data is kept only for as long as it is relevant to trend analysis.

10. Security

We protect data with measures including hashed passwords, token-based authentication, role-based access controls, encrypted transport (HTTPS), and monitoring of access and abuse. No method of transmission or storage is 100% secure, but we work to protect your information using reasonable safeguards.

11. Your rights

Depending on your location, you may have the right to access, correct, delete, or export your personal data, to object to or restrict certain processing, and to withdraw consent. To exercise any of these rights, contact us at [email protected]. You may also revoke any third-party API authorization at any time, and we will delete related data on request.

12. International transfers

Our infrastructure may process data in countries other than yours. Where required, we rely on appropriate safeguards for such transfers.

13. Children

RdPod is a professional research tool and is not directed to children. We do not knowingly collect personal data from anyone under the age of 16 (or the minimum age required in your jurisdiction).

14. Changes to this policy

We may update this policy from time to time. We will change the "Last updated" date above and, for material changes, take reasonable steps to notify users.

15. The RdPod browser extension

The RdPod extension for Chrome (the "extension") shows RdPod's market data on the Etsy pages you open. It runs only on www.etsy.com; besides Etsy's own pages and Etsy's public listing data, it connects only to RdPod (app.rdpod.io).

• What it reads. On Etsy pages you open, the extension reads the listing and shop identifiers shown on the page and the public listing information Etsy provides to your browser (for example title, tags, price, number of favorites and the stock quantity Etsy shows), and the public counters of a shop page (sales, listings, admirers, reviews). On an Etsy search page it reads the search terms in the page address and the page's public results (the order of the listings shown, the number of results and Etsy's suggested searches). On a shop page it may also read, at a gentle pace, the same public information for other listings of that shop. It does not read your Etsy account, messages, orders, payment details, or anything on other websites.
• What it sends to RdPod. The listing and shop identifiers of the Etsy pages you open (to look up RdPod's data), the search terms and public results of the Etsy search pages you open, and the public listing information and shop counters described above. RdPod uses this information to compute aggregate market metrics (for example sales and stock movements) shown to RdPod users, and counts, across all extension accounts together, which search terms, shops, listings and categories are looked at most, to understand market trends. These statistics show numbers of pages and of accounts, never what a particular person looked at. The data is not linked to your Etsy identity; within RdPod it is associated with your RdPod account only for security, abuse prevention, plan limits and counting different accounts in these statistics. Account-linked raw readings are kept for up to 30 days. After that, readings retained for market metrics no longer have your account identifier; the market metrics remain as part of RdPod's market data. Database backups that include these rows are retained for up to 8 days for daily copies and 29 days for weekly copies, counted from when each backup is taken.
• Sign-in. The extension signs in with a key you create on your RdPod account page, or a one-click connection. The key is kept in the extension's storage; you can disconnect at any time in the extension or revoke it on your account page.
• Stored on your device. Your settings, saved listings, highlight rules and a short queue of data waiting to be sent are kept in the extension's local storage in your browser.
• Downloads. When you click "Download" on a listing page, the extension saves that listing's photos to your Downloads folder. Nothing is downloaded without your click.
• The extension's requests are kept without your IP address. We do not collect anything about your location, and the extension follows Chrome's language setting.
• We do not sell this data, use it for advertising, or use it to determine creditworthiness. Our use of data from the extension complies with the Chrome Web Store User Data Policy, including the Limited Use requirements.

16. Contact

Questions or requests about this policy or your data: [email protected].