Trust
Your store, your credentials, your call
This app holds the keys to your livelihood — a connected marketplace account is not a low-stakes integration. Here is precisely what is stored, where it goes, and what you can take back.
Credentials
We never see a marketplace password
Connecting an account uses each marketplace's own OAuth sign-in. You authenticate with them; they hand us a token scoped to what the app does.
Tokens encrypted at rest
The refresh token a marketplace issues is encrypted before it is stored, so a database dump is not a set of working credentials.
Passwords are hashed, never stored
Your Thryft Shop password is stored as a bcrypt hash. We could not tell you what it is, and neither could anyone who reached the database.
Revocable from both ends
Disconnect a marketplace in Settings, or revoke this app's access from the marketplace's own account page. Either works, independently.
Sign out everywhere
One action invalidates every session on every device — the thing you want when a phone goes missing.
AI processing
What the model sees, and what it doesn't
Only the photos you submit for a draft
Product images go to Anthropic's Claude API to identify the item and write the listing. Your account details, payment information and marketplace tokens are never part of that request.
Your content is not training data
Photos and listings are processed to produce your draft. They are not used for advertising, and they are not sold.
Nothing publishes on its own
The AI produces a draft and a list of what it was unsure about. A human decision — yours — stands between every draft and every marketplace.
Subprocessors
Everyone who touches your data
The complete list. If a provider is not here, your data does not reach it.
| Provider | Purpose | What it handles |
|---|---|---|
| Anthropic | Claude vision and text models — identifies items and drafts listing copy | Product photos and listing text |
| Stripe | Payment processing for token packs | Card details, direct to Stripe — never through us |
| Neon | Managed Postgres — accounts, listings, token ledger | Account and listing data |
| Cloudflare R2 | Object storage for photos, and the origin marketplaces fetch images from | Uploaded and optimized photos |
| Fly.io | Application hosting | All traffic to the app |
| eBay, Etsy, Depop | The marketplaces you choose to connect | Only the listings you publish there |
Deletion
Delete it yourself, right now
Settings → Delete account. No email to send, no waiting period, no retention window to sit through.
Goes immediately
- · Your account and login
- · Every listing draft
- · Stored marketplace tokens
- · Uploaded photos (the sweep follows just behind)
What deletion cannot reach
Listings you already published stay live on eBay, Etsy or Depop under your own seller account — they are yours, on their platform. End them there if you want them down. Deleting here also does not revoke the authorization on the marketplace's side; do that in their settings.
Found a security issue? Write to support@thryftshop.com and we'll get back to you.