Privacy Policy

Last updated: July 12, 2026

This Privacy Policy explains how ShopItUp ("ShopItUp", "we", "us") collects, uses, stores, and protects your information when you use our website, application, and browser extension (together, the "Service"). By using the Service you agree to this policy.

Who this is for

ShopItUp is a multi-channel selling tool for online resellers. It connects to the marketplaces and services you choose (such as Poshmark, Shopify, and Google Merchant Center) and automates tasks on your own accounts on your behalf — for example, sharing your own Poshmark closet, or syncing your own inventory.

Information we collect

  • Account information — your name, email address, and password (stored hashed), created when you register.
  • Connected-account authorization — when you connect a marketplace or service, we store the credentials or tokens needed to act on your behalf:
    • Poshmark — your existing Poshmark session token, captured (with your consent, via our browser extension) from your own logged-in browser so our service can automate your own closet. We never ask for or store your Poshmark password.
    • Shopify — the store domain and access token you provide from your own Shopify admin.
    • Google Merchant Center — an OAuth token you authorize, used only with the Google Content API to sync your own product listings.
  • Catalog and inventory data — the products, images, prices, and listings you manage in the Service.
  • Payment information — subscription billing is processed by Stripe; we do not store your full card number.
  • Usage and device data — basic logs (e.g. actions taken, timestamps, error diagnostics) used to operate and troubleshoot the Service.

How we use your information

We use your information solely to provide the Service you requested — to authenticate you, connect your chosen marketplaces, sync your catalog, automate the tasks you enable (such as closet sharing), process your subscription, and support and secure your account. We do not sell your personal information, and we do not use it for advertising.

Google user data and Limited Use

Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. Specifically, we access the Google Content API for Shopping scope only to sync your own product listings to your own Google Merchant Center account at your direction. We do not transfer this data to third parties except as needed to provide that feature, do not use it for advertising, and do not allow humans to read it except with your consent, for security, or as required by law.

How your information is shared

We share data only as needed to run the Service:

  • The marketplaces and services you connect (Poshmark, Shopify, Google) — to perform the actions you enable on your own accounts.
  • Service providers that operate the platform — e.g. Stripe (payments), our hosting and residential-proxy providers, and a CAPTCHA-solving provider — strictly to deliver the Service.

We do not sell, rent, or trade your personal information, and we never share it for third-party marketing.

Storage and security

Data is transmitted over HTTPS and sensitive credentials (such as your marketplace session tokens) are encrypted at rest. We restrict access to your data to what is necessary to operate the Service.

Data retention and deletion

We retain your data while your account is active. You can disconnect any marketplace integration at any time in your dashboard (which removes the stored token), and you may request deletion of your account and associated data by contacting us. Disconnecting or logging out of a marketplace also invalidates the stored session for that platform.

Your rights

You may access, correct, export, or delete your personal information by using your account settings or by contacting us. We will respond to verified requests as required by applicable law.

Cookies

We use cookies necessary to keep you signed in and to operate the Service. We do not use them for advertising.

Children

The Service is not directed to children under 16, and we do not knowingly collect their information.

Changes to this policy

We may update this policy from time to time; material changes will be reflected by the "Last updated" date above and, where appropriate, additional notice.

Contact

Questions or data requests: [email protected]