Privacy Policy

Publicly available listing data (Free Check)

LemonSuite processes publicly available data from Etsy listings solely for analysis and comparison. This data includes title, description, price, reviews, favorites, and similar publicly visible information.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest). Processing is for the provision of analysis and comparison features for users.

Storage: Public listing data is processed without user identification. Permanent storage only occurs if you sign up and explicitly consent.

Your own listing data (after sign-up)

By signing up and adding your own listings, you consent to the analysis of this data. We process your listing data solely to provide full analyses, comparison features, and optimization suggestions.

Legal basis: Art. 6(1)(b) GDPR (contract performance) and Art. 6(1)(a) GDPR (consent by use).

Purpose limitation: Your listing data is used solely for analysis and comparison. No disclosure to third parties, no profiling of individuals.

Comparison data (competitor listings)

If you use comparison features, you can enter URLs of other Etsy listings. This data is processed and stored for the purpose of performing the comparison.

Note: Only listing data (no personal data of sellers) is processed. The focus is on analyzing listings as objects, not on evaluating individuals.

Use of Clerk

For authentication and user management we use the service provider Clerk, Inc. (660 King Street, Unit 345, San Francisco, CA 94107, USA). Clerk processes your personal data on behalf of LemonSuite as a processor pursuant to Art. 28 GDPR.

Data processed

Clerk processes the following personal data in connection with authentication:

• Email address (for sign-up and communication)
• Name and username (if provided)
• Profile picture (if uploaded)
• IP address and device information (for security purposes)
• Sign-in and session data

Legal basis

Art. 6(1)(b) GDPR (contract performance): Processing is necessary for the provision of authentication and thus for the use of our services.

Transfer to third countries

Clerk processes data in the USA. The transfer is based on the EU-U.S. Data Privacy Framework (DPF), under which Clerk is certified. In addition, Standard Contractual Clauses (SCCs) pursuant to Art. 46 GDPR apply.

Clerk has appointed an EU representative: VeraSafe Ireland Ltd., Unit 3D North Point House, North Point Business Park, New Mallow Road, Cork T23AT2P, Ireland. Contact

Your rights

You have the right to obtain information about your data stored with Clerk and to have it rectified, erased, or its processing restricted. You can exercise these rights directly via your Clerk account or contact us.

Further information

For more information on Clerk's data processing, see the Clerk Privacy Policy and the Data Processing Agreement (DPA).

User activity logs

For troubleshooting, support, and improvement of our services we store significant user actions in logs. These logs contain the following personal data:

• User ID (to identify the user)
• IP address (for security and error analysis)
• User agent (browser and device information)
• Actions performed (e.g. listing sync, analysis, shop sync)
• Action status (success, error, started)
• Error messages (for failed actions, for support purposes)
• Timestamp of the action

Purpose of processing

• Troubleshooting: Tracing errors and issues
• Support: Assisting with user requests and issues
• Service improvement: Understanding how users use our services
• Security: Detecting unusual activity

Legal basis

Art. 6(1)(f) GDPR (legitimate interest): Processing is necessary for troubleshooting, support, and improvement of our services. This serves both our and your legitimate interests.

Retention period

User activity logs are stored for 90 days and then automatically deleted. This period is necessary to trace errors and provide support.

Deletion on account deletion

When you delete your account, all your user activity logs are automatically and fully deleted. This corresponds to your right to erasure under Art. 17 GDPR ("right to be forgotten").

Data minimization and redaction

We apply the principle of data minimization:

• Only significant actions are logged (e.g. sync, analysis), not every single interaction
• Sensitive data (e.g. tokens, passwords) is automatically redacted and not stored
• Logs contain only the minimum information necessary for debugging and support

Access to logs

Logs are only accessible to authorized administrators and are used solely for the purposes stated above. All access to logs is itself logged (audit log).

Your rights

You have the right to obtain information about your stored logs (Art. 15 GDPR) or to request their early deletion (Art. 17 GDPR). Please contact the controller for this (contact details below).

Controller

The controller responsible for data processing on this website is the operator:
LemonSuite
E-Mail: support@lemonsuite.co

For data subject requests (access, erasure, objection, etc.) please use this email address.