Privacy policy

Last updated: 19 October 2026.

Albavo is a keyword research tool for Etsy sellers. This page says exactly what it stores, why, for how long, and how you can have your data removed.

1. Who is the data controller

The data controller is Jordan LAIR, sole trader (entrepreneur individuel), publisher of the Albavo service.

• Service: Albavo, albavo.com
• Data controller: Jordan LAIR, French sole trader
• Address: 39 rue du Déjeuner sur l'Herbe, 14730 Giberville, France
• SIREN: 109 798 280, RCS Caen
• Contact: contact@albavo.com
• Hosting provider: OUIHEBERG SARL, 9 rue des Colonnes, 75002 Paris, France, RCS Paris 888 341 997

2. What Albavo stores

a. Your account

You can create an Albavo account in two ways: with an email address and a password, or with your Google account. Albavo then keeps your email address and the date it was verified, and, depending on the case, a hash of your password (scrypt algorithm, with a salt unique to your account) or the identifier Google gives your account. The password itself is never stored. With Google, Albavo only asks for your email address and the confirmation that it is verified: not your name, your photo or your contacts.

If you then connect your Etsy account, Albavo keeps your Etsy user id, your shop name and the access tokens issued by Etsy. Those tokens are used only to read your listings and shop information. Albavo never sees your Etsy password: you sign in on Etsy's own site, which returns a limited authorisation to us.

When you connect, Albavo only asks for read access to your shop and your listings: it cannot change anything on your Etsy account. The only exception, at your request: the New listing screen can offer to let you also grant write access to your listings; Etsy asks you on its own site and you can refuse. This permission is offered only with the Agency plan, by invitation; it is used only to create listing drafts, which Albavo never publishes.

Proving the shop is yours. To see your shop without connecting your Etsy account, Albavo gives you a short code to paste into your shop's message to buyers. Albavo then reads that message, which is public, through Etsy's interface, just long enough to find the code, and stops. The message itself is not kept; only a hash of the code is, with the date of the proof. You can remove the code from your message as soon as the shop is linked.

b. Shop and market data

Titles, tags, prices, favourites and shop information: yours, and those of the public listings returned by searches. This comes from Etsy and is kept so it does not have to be requested again on every visit.

c. Your readings and judgements

The keywords you analyse, the dated history of measurements, the judgements you make yourself (for example marking two listings as the same product), your keyword lists, and the readings you choose to send from your Etsy seller dashboard.

d. Display preferences

Three cookies store your language, light or dark theme, and target market. They contain no identifier and cannot be used to track anyone. A fourth, signed cookie keeps your session open. A fifth, signed cookie recognises a browser that has already signed in to Albavo, so that it keeps the Etsy connection when it is closed to new shops. It contains no identifier and lasts one year.

If you arrive through another shop's referral link, that same session cookie holds the name of that shop until you connect your own. This is what lets the free month be credited to them. It is read for nothing else, never passed to a third party, and is dropped as soon as the link is made.

e. Server logs

Like any web server, ours records IP addresses, timestamps and requested pages. These logs are used for security and fault diagnosis, nothing else.

The server also counts, day by day, how many times each screen of the tool is opened. This counter is tied to no account, no shop and no address: it says which screens are used and which are not, nothing more.

f. Subscription and payment

If you take out a paid subscription, no card details are ever entered on Albavo: payment happens entirely on the pages of our provider Stripe. Card number, security code and billing address are collected and kept by Stripe alone. They never pass through our server, which therefore cannot read or store them.

For each subscribed shop, our server keeps only two technical identifiers issued by Stripe, the state of the subscription, its billing period and the date of the last update. Those identifiers reveal no personal information and are useless without the keys to our own Stripe account.

g. Address left when Etsy refuses a new shop

Etsy limits the number of shops an application can connect. If Etsy refuses your connection for this reason, or if Albavo closes new connections to keep those spots, you can leave your email address to be told when a spot opens up. It is used only for that message: we keep it until it is sent, then delete it, and you can ask us to delete it sooner by writing to contact@albavo.com. The form that announced the opening of subscriptions no longer exists.

h. The browser extension

The Albavo extension is optional: the site works without it. Once installed, it reads only the pages you open yourself on etsy.com (your seller statistics, your search pages, the public listings and shops you look at) and takes the figures already displayed on them: number of results, search volumes, prices, positions.

Those readings go to your own Albavo dashboard and nowhere else. They join the data described in point c; the ones that describe a market rather than your shop feed the shared reserve, under the terms of point 4.

The extension keeps in your browser a key linking it to your account, and your display preferences for the side panel. It reads no other site, changes no page, clicks nothing on your behalf, publishes nothing, and records neither your browsing history, nor your keystrokes, nor your credentials. Uninstalling it stops every transmission immediately.

i. Photos in New listing

The New listing screen lets you add one to four photos of an item to a draft, to prepare its Etsy listing. Albavo stores only the photos you choose to send from that screen, and uses them only to prepare that listing.

Before sending, your browser reduces each photo (2,000 pixels at most on its longer side) and redraws it, which removes its metadata (EXIF data), including the GPS position of where it was taken. What the image shows does not change: anything visible in it besides the item (a person, a document, a room in your home) is kept and sent along with it.

The photos are kept on our server, in your shop's space. A photo you remove from a draft is not erased: it leaves the draft but stays stored with your shop's data. The photos are included in the server backups, like all other data (periods in point 6).

When you start the item reading (material, colour, shape, style), the draft's photos are sent to Anthropic for analysis (point 5).

j. Messages sent from the app

If you write to Albavo from the app, we keep your messages, the images you attach to them, the screen they were sent from and, if you give it, your email address, so we can reply to you.

k. Your visits

We note the days you visit and the features you use, to improve the service.

l. Protection against abuse

To limit mass sign-ups and password guessing, Albavo counts, without keeping them any longer, the requests made from the same IP address (for IPv6, from its prefix) and to the same email address: account creations, links sent, proof codes, sign-in attempts. These counters are only used during their window (fifteen minutes for sign-in attempts, one hour or twenty-four hours for the rest), then erased at the next pass.

3. Why, and on what basis

4. Measurements shared between accounts

Some values are public facts about the marketplace: the number of active listings for a keyword is the same for everyone. Those measurements are pooled between accounts, with their date, so the same thing is not measured over and over.

Nothing personal goes into that pool: not your shop name, not your listings, not your judgements, not your lists. Another user can never learn that you searched for a keyword, nor see anything about your shop.

5. Who else sees this data

Albavo does not sell, rent or trade any data. Five providers are involved technically:

• Etsy: the source of the data. Your read requests go through their programming interface, under the authorisation you granted.
• Anthropic (United States): four optional features call an AI model. Comparing two listing photos sends it public Etsy image addresses. Suggesting an equivalent keyword in another language sends it keywords. Suggesting keywords from a product description sends it the text of that description. The item reading in New listing sends it the photos you added to the draft (point 2 i). No account data, no tokens.
• Stripe (Ireland, US group): subscription payments. Your payment details are collected and kept by Stripe, on its own pages, which Albavo has no access to. This provider is involved only if you take out a paid subscription.
• Google (United States): only if you choose "Continue with Google". Google identifies you and sends us your email address and an account identifier. Albavo calls Google only for this sign-in.
• OuiHeberg: server hosting and sending of emails.

There is no other third-party call. Typefaces are served from our own server rather than an outside service: no IP address is passed to anyone merely by displaying a page.

6. For how long

• Account and tokens: until you disconnect your Etsy account or ask for deletion.
• Albavo account (address, password hash, Google identifier): for as long as your account exists; erased on request. An address that was never verified can be taken by someone else after twenty-four hours, or at once if someone else proves with Google that the address is theirs, and a dated record of it is kept.
• Abuse counters: from fifteen minutes to twenty-four hours (point 2 l).
• Readings, history, judgements: for as long as your account exists. Their whole value is that they last, since Etsy only shows a rolling thirty days.
• Messages: for as long as your account exists.
• Visits: for as long as your account exists.
• New listing photos: for as long as your account exists, like your readings, including those you removed from a draft; sooner if you ask for them to be erased.
• Server logs: a few weeks, by automatic rotation.
• Backups: one per night, then erased after sixty days; the most recent one is always kept.
• Subscription and invoices: the state of the subscription for as long as it exists; accounting records for ten years, as the law requires. Payment details themselves are kept by Stripe alone, under its own policy.

7. Your rights

You have the right to access, correct, erase, restrict, object to and port your data. Write to contact@albavo.com; we answer within one month.

You can withdraw the authorisation given to Albavo at any time from your Etsy account settings, which immediately cuts our read access.

If an answer does not satisfy you, you may complain to your national data protection authority, or to the French CNIL.

8. Security

The site is served over HTTPS only. The session cookie is signed and sent over an encrypted connection only. Each shop's data is kept in a separate space.

Your account password is kept only as a hash and never appears in any log. After five failed attempts within fifteen minutes, from the same IP address or for the same email address, further attempts are refused for up to fifteen minutes (point 2 l).

9. Children

Albavo is aimed at professional or active Etsy sellers and is not intended for minors. We do not knowingly collect data about minors.

10. Changes

Any change to this page will be dated at the top. A significant change will be flagged inside the application.

See also the terms of use.