← LumiPoints

Privacy Policy

Last updated: October 21, 2026

1. Who we are

LumiPoints ("LumiPoints", "we") is an analytics tool for Etsy and Printify sellers, operated by Maksym Horinov, based in Ontario, Canada. Contact: [email protected] · +1 (647) 793 9495. We are the data controller for the personal data described below.

2. What we collect

Your LumiPoints account

Your email address and password hash when you create an account.

Etsy

You connect your Etsy shop through Etsy's official API using OAuth. With your permission we read your orders, listings, fees, ad charges and payment ledger entries in order to compute your profit and loss. Access is read-only by default. Order records from your shop can include buyer names, locations, and order details.

Printify

You connect Printify through Printify's official API using a Personal Access Token that you create in your Printify account and paste into LumiPoints. We do not use Printify OAuth and we never ask for your Printify password. A Personal Access Token gives access to your whole Printify account; LumiPoints uses it only to read the data listed below and to manage the webhooks it creates. Before you connect, LumiPoints shows what it reads and how it stores it, and asks you to accept our Terms (including the Printify section) and this Privacy Policy; we record that consent with its date and version.

We read your Printify shops (ID and name); your products and their variants (titles, SKUs, options, prices and your production costs); your orders (status, totals, production and shipping costs, tax, shipping dates and tracking, line items, and the country and region of the shipping address — we do not store the buyer's name, street address, city, postal code, email, phone or company); shipping rates for your products; and Printify's public product catalog and print providers. To keep orders and prices up to date we register webhooks on your shop for order updates and catalog price changes.

Pinterest (optional)

LumiPoints can connect to your Pinterest business account through the official Pinterest API using OAuth. This connection is optional and is never required to use LumiPoints. If you choose to connect a Pinterest business account, we read your boards, your own Pins and their metrics, and Pinterest search trend data. We store only the numeric performance metrics and IDs of your own account and Pins — never Pin content.

What we access. With your permission we request the minimum set of scopes we need: read and write access to your boards and Pins (boards:read, boards:write, pins:read, pins:write) and read access to your account (user_accounts:read). This lets us show you your own boards and Pins, the organic metrics of your own Pins (impressions, Pin clicks, outbound clicks, saves), aggregated Pinterest search trend data, and publish a Pin when you ask us to. We do not request access to your advertising data, and we never ask for your Pinterest password.

Billing

Payments are handled by Paddle.com, our Merchant of Record. We do not store your card details.

3. How we use it

• Etsy and Printify data is used only to show you your own numbers: production and order costs, fees, profit and loss, and pricing, and to match Printify orders to your Etsy orders.
• Buyer data inside your orders is processed only to match costs and fees to orders and show you your own numbers. We do not use it for marketing and we do not sell it.
• We do not write anything to your shop without your explicit action (the optional Repricer applies price changes only after you approve them).
• We do not sell your data.
• We do not benchmark or share your numbers with other sellers.
• We do not use your data to train AI models. LumiPoints has no built-in AI; if you connect your own AI assistant via MCP, it reads your Etsy and Printify data — read-only, except price changes you explicitly allow. Pinterest data is never available through MCP.

Pinterest — publishing is always your explicit action. We do not post automatically, on a schedule, or in bulk. For every Pin you see a preview and confirm that specific Pin before it is created. We record the action and the ID of the created Pin in your LumiPoints activity log while Pinterest stays connected, so that you can see your own history of changes.

Pinterest — we do not share, sell or repurpose it. Pinterest data is used only to provide this service to you, the account holder. We do not combine it with other sellers' data, do not use it for advertising, do not make it available to third-party tools or AI assistants you connect to LumiPoints, and do not use it to train, fine-tune or develop any AI or machine-learning model.

4. How we store and protect it

Connections run over TLS. Your Etsy, Printify and Pinterest access tokens are stored encrypted (AES-256). Access is restricted to what is needed to operate the service.

• Etsy and Printify — the data listed above is stored in our database so that we can compute your numbers; it belongs to your account only. Your Printify token is used only to read your data and manage the webhooks we created.
• Pinterest — what we store. To show how your account performs over time, we store performance analytics for your own Pinterest account and Pins, which you expressly authorize when you connect: numeric metrics (impressions, saves, Pin clicks, outbound clicks and similar daily counts, plus account counters such as followers and number of Pins), your Pinterest account ID and account type (business or personal), Pin and board IDs, Pin format, creation date, and the ID of your own Etsy listing a Pin links to. This data belongs to your account only and is never combined with other users' data.
• Pinterest — what we do not store. Pin titles, descriptions, images, links, alt text, board names, profile details and Pinterest Trends results — neither on our servers nor in your browser's storage. We request them from Pinterest each time you open the page. We do not store the content of your Pins or boards (titles, descriptions, images, links, board names), and we never publish a Pin without your explicit confirmation of that specific Pin.
• Your Pinterest access token is stored encrypted (AES-256) alongside your account, because the connection cannot work without it.
• Backups — our database backups are overwritten on a rolling basis within 30 days, so data we delete also leaves our backups within that time.

5. Retention and deletion

• Etsy — kept while your account is active. When you disconnect an Etsy shop, we stop syncing it and keep its data so that your past numbers stay complete; to remove it, delete your account or email us. If you pause your account, we keep it for up to 365 days so you can come back. When you delete your account, we delete it immediately.
• Printify — when you disconnect a Printify shop, we remove the webhooks we created on that shop and delete your token immediately. We keep that shop's data for 30 days so that its costs remain visible (marked "Printify (disconnected)") and so that reconnecting the same shop within that time restores it. This is in line with Printify's requirement to delete Merchant data within 30 days. Within 30 days we delete all data from that shop, including costs you copied from Printify into LumiPoints. Costs you entered yourself for listings and orders are kept; adjustments you recorded on Printify orders (credits, reprints) are deleted together with those orders; entries in your change history stay, without amounts taken from Printify. You can also delete the token in Printify: My Account → Connections. Pausing your LumiPoints account disconnects Printify in the same way. When you delete your LumiPoints account, we remove our webhooks and delete all Printify data immediately.
• Pinterest — when you disconnect Pinterest, we revoke the token with Pinterest, delete it on our side and immediately delete all stored Pinterest metrics and IDs; entries about Pins you published remain in your activity log without any Pinterest IDs. If you revoke access in Pinterest, delete your Pinterest account, or pause or delete your LumiPoints account, we delete stored Pinterest data within 30 days. You can revoke our access at any time in your Pinterest account settings, or by disconnecting Pinterest inside LumiPoints.
• Any time — you can request deletion of your data by emailing [email protected].

6. Sharing and sub-processors

We do not sell your data and do not transfer Etsy, Printify or Pinterest data to third parties, except to the service providers below that run LumiPoints for us. LumiPoints is not publicly hosted at the time of this update; when it runs publicly, it is hosted with the providers listed here. Etsy, Printify and Pinterest are the platforms you connect, not our sub-processors. We will update this list before adding a new provider.

• Hetzner Online GmbH (Germany) — server hosting.
• Neon (United States) — database hosting.
• Paddle.com (United Kingdom) — billing; Merchant of Record for all paid plans.
• Resend (United States) — sending account emails (sign-in, verification, service notices).
• Google (United States) — "Sign in with Google", only if you choose it.
• Cloudflare (United States) — hosting of the lumipoints.com website.
• OpenStreetMap Nominatim — turning city, region and country names from your orders into map coordinates for the orders map. No names, street addresses or emails are sent.

Cookies. The lumipoints.com landing site sets no analytics or marketing cookies. The app uses strictly necessary cookies for signing in.

7. Your rights (GDPR)

If you are in the EU/EEA or UK, you have the right to access, rectify, export, restrict, object to processing of, and erase your personal data. Write to [email protected] and we will respond within 30 days. You also have the right to lodge a complaint with your supervisory authority.

8. Contact

Maksym Horinov · Ontario, Canada · [email protected] · +1 (647) 793 9495. Questions and deletion requests, including about Pinterest and Printify data: [email protected].