Privacy policy

Last updated: 26 September 2026.

Albavo is a keyword research tool for Etsy sellers. This page says exactly what it stores, why, for how long, and how you can have your data removed.

1. Who is the data controller

The data controller is Jordan LAIR, sole trader (entrepreneur individuel), publisher of the Albavo service.

• Service: Albavo, albavo.com
• Data controller: Jordan LAIR, French sole trader
• Address: 39 rue du Déjeuner sur l'Herbe, 14730 Giberville, France
• SIREN: 109 798 280, RCS Caen
• Contact: contact@albavo.com
• Hosting provider: OUIHEBERG SARL, 9 rue des Colonnes, 75002 Paris, France, RCS Paris 888 341 997

2. What Albavo stores

a. Your account

If you connect your Etsy account, Albavo keeps your Etsy user id, your shop name and the access tokens issued by Etsy. Those tokens are used only to read your listings and shop information. Albavo never sees your Etsy password: you sign in on Etsy's own site, which returns a limited authorisation to us.

When you connect, Albavo only asks for read access to your shop and your listings: it cannot change anything on your Etsy account. The only exception, at your request: the New listing screen can offer to let you also grant write access to your listings; Etsy asks you on its own site and you can refuse. To date, nothing is written to your account.

Backup sign-in (optional). If you choose, from your account menu, an email address and a password so that you can get in even when signing in with Etsy is unavailable, Albavo keeps that address, linked to your Etsy user id, and a hash of the password (scrypt algorithm, with a salt unique to your account). The password itself is never stored: the hash lets us check the one you type, not recover it. This address is used only to identify you when you sign in. You can remove the backup sign-in at any time from the same menu: the address and the hash are then erased.

b. Shop and market data

Titles, tags, prices, favourites and shop information: yours, and those of the public listings returned by searches. This comes from Etsy and is kept so it does not have to be requested again on every visit.

c. Your readings and judgements

The keywords you analyse, the dated history of measurements, the judgements you make yourself (for example marking two listings as the same product), your keyword lists, and the readings you choose to send from your Etsy seller dashboard.

d. Display preferences

Three cookies store your language, light or dark theme, and target market. They contain no identifier and cannot be used to track anyone. A fourth, signed cookie keeps your session open.

If you arrive through another shop's referral link, that same session cookie holds the name of that shop until you connect your own. This is what lets the free month be credited to them. It is read for nothing else, never passed to a third party, and is dropped as soon as the link is made.

e. Server logs

Like any web server, ours records IP addresses, timestamps and requested pages. These logs are used for security and fault diagnosis, nothing else.

The server also counts, day by day, how many times each screen of the tool is opened. This counter is tied to no account, no shop and no address: it says which screens are used and which are not, nothing more.

f. Subscription and payment

If you take out a paid subscription, no card details are ever entered on Albavo: payment happens entirely on the pages of our provider Stripe. Card number, security code and billing address are collected and kept by Stripe alone. They never pass through our server, which therefore cannot read or store them.

For each subscribed shop, our server keeps only two technical identifiers issued by Stripe, the state of the subscription, its billing period and the date of the last update. Those identifiers reveal no personal information and are useless without the keys to our own Stripe account.

g. Address left to be told when subscriptions open

If you leave your email address on the home page or in the app to be told when subscriptions open, we store only that address, the language of the page and the date, plus, when it is left from the app, the name of the connected shop. It is used only to announce that subscriptions are open and to confirm the free months your shop has earned: no newsletter, no sharing with anyone. The announcement contains a removal link, which erases the address. You can withdraw it at any time from the app, through that link, or by writing to contact@albavo.com.

h. The browser extension

The Albavo extension is optional: the site works without it. Once installed, it reads only the pages you open yourself on etsy.com (your seller statistics, your search pages, the public listings and shops you look at) and takes the figures already displayed on them: number of results, search volumes, prices, positions.

Those readings go to your own Albavo dashboard and nowhere else. They join the data described in point c; the ones that describe a market rather than your shop feed the shared reserve, under the terms of point 4.

The extension keeps in your browser a key linking it to your account, and your display preferences for the side panel. It reads no other site, changes no page, clicks nothing on your behalf, publishes nothing, and records neither your browsing history, nor your keystrokes, nor your credentials. Uninstalling it stops every transmission immediately.

i. Photos in New listing

The New listing screen lets you add one to four photos of an item to a draft, to prepare its Etsy listing. Albavo stores only the photos you choose to send from that screen, and uses them only to prepare that listing.

Before sending, your browser reduces each photo (2,000 pixels at most on its longer side) and redraws it, which removes its metadata (EXIF data), including the GPS position of where it was taken. What the image shows does not change: anything visible in it besides the item (a person, a document, a room in your home) is kept and sent along with it.

The photos are kept on our server, in your shop's space. A photo you remove from a draft is not erased: it leaves the draft but stays stored with your shop's data. The photos are included in the server backups, like all other data (periods in point 6).

When you start the item reading (material, colour, shape, style), the draft's photos are sent to Anthropic for analysis (point 5).

j. Messages sent from the app

If you write to Albavo from the app, we keep your messages, the images you attach to them, the screen they were sent from and, if you give it, your email address, so we can reply to you.

k. Your visits

We note the days you visit and the features you use, to improve the service.

3. Why, and on what basis

4. Measurements shared between accounts

Some values are public facts about the marketplace: the number of active listings for a keyword is the same for everyone. Those measurements are pooled between accounts, with their date, so the same thing is not measured over and over.

Nothing personal goes into that pool: not your shop name, not your listings, not your judgements, not your lists. Another user can never learn that you searched for a keyword, nor see anything about your shop.

5. Who else sees this data

Albavo does not sell, rent or trade any data. Four providers are involved technically:

• Etsy: the source of the data. Your read requests go through their programming interface, under the authorisation you granted.
• Anthropic (United States): four optional features call an AI model. Comparing two listing photos sends it public Etsy image addresses. Suggesting an equivalent keyword in another language sends it keywords. Suggesting keywords from a product description sends it the text of that description. The item reading in New listing sends it the photos you added to the draft (point 2 i). No account data, no tokens.
• Stripe (Ireland, US group): subscription payments. Your payment details are collected and kept by Stripe, on its own pages, which Albavo has no access to. This provider is involved only if you take out a paid subscription.
• OuiHeberg: server hosting.

There is no other third-party call. Typefaces are served from our own server rather than an outside service: no IP address is passed to anyone merely by displaying a page.

6. For how long

• Account and tokens: until you disconnect your Etsy account or ask for deletion.
• Backup sign-in: until you remove it from your account menu, or ask for your account to be deleted.
• Readings, history, judgements: for as long as your account exists. Their whole value is that they last, since Etsy only shows a rolling thirty days.
• Messages: for as long as your account exists.
• Visits: for as long as your account exists.
• New listing photos: for as long as your account exists, like your readings, including those you removed from a draft; sooner if you ask for them to be erased.
• Server logs: a few weeks, by automatic rotation.
• Backups: one per night, then erased after sixty days; the most recent one is always kept.
• Address left for the opening: until that announcement is sent, then erased; sooner if you ask.
• Subscription and invoices: the state of the subscription for as long as it exists; accounting records for ten years, as the law requires. Payment details themselves are kept by Stripe alone, under its own policy.

7. Your rights

You have the right to access, correct, erase, restrict, object to and port your data. Write to contact@albavo.com; we answer within one month.

You can withdraw the authorisation given to Albavo at any time from your Etsy account settings, which immediately cuts our read access.

If an answer does not satisfy you, you may complain to your national data protection authority, or to the French CNIL.

8. Security

The site is served over HTTPS only. The session cookie is signed and sent over an encrypted connection only. Each shop's data is kept in a separate space.

The backup sign-in password is kept only as a hash and never appears in any log. After five failed attempts within fifteen minutes, from the same IP address or for the same email address, further attempts are refused for up to fifteen minutes. This count stays in the server's memory and is never written to disk.

9. Children

Albavo is aimed at professional or active Etsy sellers and is not intended for minors. We do not knowingly collect data about minors.

10. Changes

Any change to this page will be dated at the top. A significant change will be flagged inside the application.

See also the terms of use.