Skip to content

Privacy policy

Last updated: 20 September 2026

This policy explains what data Kawlen ("we") collects when you use kawlen.com and the Kawlen dashboard, why we collect it, how long we keep it, and what rights you have over it.

Kawlen is a tool for Etsy sellers. We connect to your Etsy shop only when you authorise it, and only with the scopes listed below.

Kawlen is operated by MAVI LLC (2030 Kerrisdale Dr., San Antonio, TX 78260, United States). MAVI LLC is the data controller responsible for processing your data. For anything at all: info@kawlen.com.

01Data we collect

Because you give it to us

  • Request form: name, email, shop name and link, monthly order range, and the description you write.
  • Account: your email address and language preference. Kawlen works without passwords; you sign in through a one-time link sent to your email.
  • What you enter in the dashboard: product costs, shipping spend, targets, tasks and notes.

Through your Etsy connection

When you connect your Etsy account, we access the following scopes through the Etsy Open API v3:

  • Shop information (shops_r): shop name, currency, holiday mode, shop sections.
  • Listings (listings_r / listings_w): title, description, tags, price, stock, variations, images and listing translations. Write access is used only for edits you approve yourself.
  • Orders and payment ledger (transactions_r): order line items, amounts, shipping status, Etsy fee and advertising cost entries.
  • Your account email (email_r): to match your Kawlen account with your Etsy account.

Through your Google Analytics 4 connection (optional)

If you choose to connect GA4, we read traffic reports for the property you select (sessions, source/medium, country, device breakdowns). This connection is optional and can be removed at any time.

Collected automatically

  • Application records: sync runs, error logs, security and audit records (who did what and when).
  • Technical data: IP address and browser information, for session security and abuse prevention.

02Data we do not collect

We never collect:

  • Your Etsy password — Kawlen never sees it; authorisation happens on Etsy's own screen.
  • Your buyers' email addresses.
  • The contents of your Etsy message inbox (convos) — the Etsy API does not expose it and we do not request it.
  • Your payment card details.

03What we use data for

  • Producing the analyses, reports and suggestions in the dashboard.
  • Applying listing edits you approve, and writing shipping tracking numbers to Etsy.
  • Sending functional emails about your account (sign-in link, invitation, notice of important changes).
  • Keeping the service secure, fixing errors and preventing abuse.
  • Meeting our legal obligations.

04What we do not do

  • We do not sell, rent or share your data with third parties for advertising.
  • We do not show your shop data to any other Kawlen user; each organisation's data is isolated at the database level.
  • We do not send marketing messages to your buyers on your behalf.
  • We do not scrape Etsy; official data comes only from the API connection you authorised.

05Estimated data

Some figures, such as search volume or a competitor's sales, do not come from Etsy. They come from a third-party statistical model. Such data is shown in its own colour with an "Estimate" label, is never merged with official Etsy data, and is stored separately. For these lookups we send the provider only the search term — never your shop identity.

06Third-party services we use

  • Supabase — database, authentication and file storage.
  • Vercel — application hosting.
  • Etsy, Inc. — the source of the shop data you authorise.
  • Google (Analytics Data API) — only if you set up the GA4 connection yourself.
  • An AI provider — relevant listing text is processed to generate suggestions; this data is not used to train the provider's models.

07How long we keep data

We prefer to be specific here:

  • Etsy access and refresh tokens: for as long as the connection is active. The token record is deleted immediately when you disconnect.
  • Shop data pulled from Etsy (listings, orders, payment ledger, reviews): while the connection is active, and for at most 30 days after you disconnect. That window exists so you can undo an accidental disconnect; on request we delete it right away.
  • Access request records: at most 12 months.
  • Audit and security logs: 12 months.
  • When you close your account: all data belonging to your organisation is deleted within 30 days.

08Disconnecting Etsy and deleting your data

You can remove the Etsy connection in two places: in Kawlen under Settings › Connections, or directly from your Etsy account at etsy.com/your/account/apps. Either way, Kawlen stops pulling new data.

If you want all your data deleted, write to info@kawlen.com. We complete such requests within 30 days at the latest and confirm in writing when it is done.

09Your rights

Depending on where you live, under the GDPR and/or Turkish data protection law (KVKK) you have the right to access your data, ask for it to be corrected or deleted, restrict processing, request portability, and object to processing.

To exercise any of these, write to info@kawlen.com. After verifying your identity we respond within 30 days at the latest. If you find our response inadequate, you may complain to the data protection authority in your country.

10Cookies

We use only the cookies the service needs to work: a session cookie to keep you signed in, and a language preference cookie. We use no advertising cookies and do not track you across sites.

11Security

  • All traffic is encrypted with HTTPS; data is encrypted at rest by our hosting provider.
  • Row level security (RLS) is enforced in the database: only members of an organisation can reach that organisation's data.
  • Etsy tokens are read only by the server that runs sync jobs; they are never sent to the browser.
  • Administrative actions are written to an audit log.

12Where data is held

MAVI LLC, which operates Kawlen, is established in the United States, and data is hosted on servers there. If you are in the European Union or Türkiye, your data is therefore transferred outside those jurisdictions. That transfer is necessary to provide the service to you and is safeguarded by the standard data protection terms in our contracts with our hosting providers.

13Children

Kawlen is not directed at people under 18 and we do not knowingly collect their data.

14Changes to this policy

When we update this policy we change the date on this page. If a change is significant, we also notify the email address on your account.

15Contact

For anything about privacy: info@kawlen.com. For everything else: info@kawlen.com.

The term 'Etsy' is a trademark of Etsy, Inc. This application uses the Etsy API but is not endorsed or certified by Etsy, Inc.