Nossify is operated by UPNOSS LLC. This policy explains what we process, why we use it and your choices. Providing this notice does not constitute consent to processing that requires a separate choice.
1. Information we process
- Account: name, email, user ID, session and sign-in provider information.
- Shop: Etsy shop, listing, inventory, variation and related transaction data within your permissions; OAuth access/refresh tokens required for the connection.
- Content: uploaded images, references, prompts, personalization text, designs, mockups, videos and SEO/listing content.
- Billing: plan, credit usage, payment/subscription identifiers and transaction status. The payment service provider processes full card details; Nossify does not store them.
- Technical information: IP and browser/device information, error/security logs, timestamps and feature usage.
2. Purposes and legal grounds
We use data for account access/security, requested research and production, shop connections and listing management, billing/credits, support and troubleshooting. Depending on the activity, the grounds are performance of a contract, legal obligations, protection of rights, or balanced legitimate interests. Optional processing requiring consent needs a separate choice.
Our KVKK Notice explains the Turkish grounds in detail. For the EU/EEA or UK, contract, legal obligation, legitimate interests and, where required, consent apply to the relevant processing.
3. Providers and AI processing
We use infrastructure and storage, payment, email and authentication providers to deliver the service. Connected marketplaces exchange data within your permissions and the operations you select.
Depending on the feature/model, prompts and relevant images may be sent to AI service providers and the underlying model infrastructure. Avoid unnecessary personal data, sensitive information or content you cannot lawfully use. Provider retention and model-use terms vary; we do not promise universal zero retention or exclusion from training across all providers.
Selling your data is not part of our service. Information may be disclosed to authorities within the applicable legal requirements.
4. Etsy connection and research catalog
Private shop data is accessed within the OAuth permissions you grant. You may revoke access in Etsy or disconnect Nossify. Disconnecting does not automatically delete previously transferred listings or records retained for legal reasons.
Product, shop and keyword research may reuse accessible listing/shop observations in caches or a shared catalog. Private shop tokens, account details and personal bookmarks are not exposed as shared search results. Research scores are estimates, not verified search volumes or sales records.
5. International processing
Providers may process data outside your country, including outside Turkey, the EEA or the UK. Cross-border processing must separately satisfy the applicable transfer rules; using the service is not itself transfer consent. The KVKK Notice explains the Turkish Article 9 framework. Contact info@nossify.com for information about relevant recipients and transfer safeguards.
6. Retention, disconnection and deletion
We retain data for the service as needed; accounting, security or dispute records may be retained for the applicable legal period. Data without a continuing purpose is deleted or anonymized. Backup and provider cleanup follows their respective cycles.
You can request account deletion in account settings. The current flow has a seven-day waiting period; signing in during that period may cancel the request. Contact info@nossify.com about deletion scope or access problems.
8. Your rights and requests
Applicable law may provide access, correction, deletion, objection, restriction and, where relevant, portability rights. You may withdraw consent for consent-based processing without affecting earlier lawful processing. Send requests from your registered email to info@nossify.com.
The KVKK Notice covers Turkish Article 11 rights, the maximum 30-day response period and complaint procedures. Your right to complain to the competent data protection authority in other jurisdictions remains available.
9. Security, children and updates
Access controls and technical/organizational measures support security; no system guarantees absolute security. The service is intended for adult sellers, not accounts opened by people under 18. Necessary rights and permissions are required when using personal information such as children’s names in designs.
We update the date when the policy changes; significant changes may be communicated in-service or by email. Data controller: UPNOSS LLC. Contact: info@nossify.com.