Who we are
MyShopRender Ltd is a company registered in England and Wales (Company No. 17225592). We provide AI-powered listing automation tools for independent sellers on Etsy, eBay, Depop, Vinted, and Shopify.
For any privacy-related enquiries, please contact us at: [email protected]
What information we collect
We collect the minimum information necessary to provide the service:
- Email address
- Collected when you sign in. Used to authenticate your account and send transactional emails (magic links, billing receipts).
- Subscription and billing data
- Your plan status and monthly usage count are stored in our database. Payment details (card numbers, billing address) are handled entirely by Stripe and are never stored on our servers.
- Product photos
- When you use the browser extension to generate a listing, the photos you submit are sent to our server and passed to Anthropic's Claude API to generate listing copy. Photos are processed in memory and are not stored or retained after the response is returned.
- Approximate location (country only)
- When you generate a listing, our network provider (Cloudflare) derives a two-letter country code from your IP address. We use it only to localise the generated listing for your market: currency, spelling, and marketplace wording. You can override it at any time with the Market setting in the extension. The country code is used for that single request and is not stored against your account.
- IP address (free-trial abuse prevention)
- When a free trial is claimed, the claiming IP address is recorded so the free allowance cannot be claimed repeatedly. These records are kept separately, are not linked to your account profile, and are automatically deleted after 90 days.
We do not collect your name, physical address, phone number, or any marketplace credentials.
Why we collect it
Each piece of data has a specific purpose:
- Email address
- Used to identify your account and deliver authentication links. We do not use it for marketing without your consent.
- Subscription data
- Used to enforce plan limits and display your account status on the dashboard.
- Product photos
- Used solely to generate AI listing copy via Anthropic's Claude API. They are never used for any other purpose, analysed by us manually, or shared beyond what is necessary to deliver the service.
- Approximate location (country only)
- Used to write your listings in the right currency and dialect for your market. Nothing more.
- IP address (free-trial claims)
- Used to prevent repeated claims of the free trial allowance. Deleted automatically after 90 days.
How we store and protect your data
Your account data (email address, subscription status, usage counts) is stored in a PostgreSQL database hosted on Railway, a cloud infrastructure provider based in the United States. Railway maintains industry-standard security practices including encryption at rest and in transit.
All data transmitted between your browser, the browser extension, and our servers is encrypted using TLS. We do not store payment card details — these are handled exclusively by Stripe.
Product photos are held in server memory only for the duration of a single API request and are not written to disk or any persistent storage.
Third-party services
We use the following third-party services to operate MyShopRender. Each has its own privacy policy and data processing terms:
- Anthropic (Claude API)
- Your product photos and the listing copy request are sent to Anthropic's API to generate listing content. Anthropic's API does not use submitted data to train models by default. See anthropic.com/privacy.
- Stripe
- Handles all payment processing and subscription billing. Stripe stores your payment card details and billing information under their own privacy policy. See stripe.com/gb/privacy.
- Railway
- Hosts our server and database infrastructure. Your account data resides on Railway's cloud platform. See railway.app/legal/privacy.
- Resend
- Delivers transactional emails such as your login link. Your email address is passed to Resend for this purpose only. See resend.com/privacy.
- Cloudflare
- Provides our content delivery network and security layer. Traffic to myshoprender.com passes through Cloudflare, which derives the country code we use to localise your listings. See cloudflare.com/privacypolicy.
We do not sell, rent, or share your personal data with any third party for marketing or advertising purposes.
How long we keep your data
- Account data
- Retained for as long as your account is active. If you request account deletion, we will remove your personal data within 30 days, except where retention is required by law (for example, financial records required for HMRC compliance).
- Product photos
- Not retained. Processed in memory and discarded immediately after the listing response is returned.
- Billing records
- Stripe retains transaction records in accordance with their own retention policies and applicable financial regulations.
Your rights under UK GDPR
As a UK resident, you have the following rights regarding your personal data:
- Right of accessYou may request a copy of the personal data we hold about you at any time.
- Right to rectificationYou may ask us to correct any inaccurate or incomplete data.
- Right to erasureYou may request that we delete your account and associated personal data.
- Right to restrict processingYou may ask us to limit how we use your data in certain circumstances.
- Right to data portabilityYou may request a machine-readable copy of the data you have provided to us.
- Right to objectYou may object to our processing of your data where we rely on legitimate interests as our legal basis.
To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days. If you are unsatisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO).
Cookies
MyShopRender uses a single session cookie (msr_session) to keep you logged in. This cookie is strictly necessary for the service to function and does not track you across other websites. It is set as httpOnly and sameSite=lax, meaning it is not accessible to JavaScript and is not sent on cross-site requests.
We do not use any advertising, analytics, or tracking cookies.
Changes to this policy
We may update this Privacy Policy from time to time. Where changes are material, we will notify you by email at least 14 days before the updated policy takes effect. Your continued use of the service after that date constitutes acceptance of the revised policy.