Privacy Policy

1. Who we are

CashCowly (cashcowly.io) is operated by Digital Cash Cow Co., Ltd., Thailand ("we", "us"). This policy covers the cashcowly.io website, the CashCowly Research Chrome extension, and the CashCowly Flow desktop app, including its optional Pinterest feature. CashCowly is an independent tool and is not affiliated with Etsy, Inc. or Pinterest, Inc.

2. Information we collect

Account and purchases

• Your email address, name (if provided) and password. Passwords are handled by our authentication provider and are never stored in plain text.
• Plan, subscription status and purchase history. Card payments are processed by Stripe; we do not receive or store your full card number.
• Affiliate program details if you join it, and referral codes used at checkout.
• Giveaway registrations (email, name and the network address used to register) to run the giveaway and prevent duplicate or abusive entries.

Licenses and devices

• Your license key and license status.
• For the Chrome extension: a session identifier, basic browser/device information and the network (IP) address used, so we can enforce the number of active sessions.
• For CashCowly Flow: a random device identifier created by the app, a device label (such as "Windows · CashCowly Flow" and the app version), and when each device was added and last used.

CashCowly Flow and Etsy

• Your Etsy API credentials and Etsy sign-in stay on your computer. The Flow app stores them in your operating system's secure credential storage and uses them to talk to Etsy directly. They are not sent to us.
• Product folders, images and files you choose are read on your computer and uploaded directly to your Etsy shop when you create a draft.
• To enforce your plan we record the Etsy shop ID and shop name you connect, the Etsy listing IDs of drafts created with Flow, draft counts and AI credit usage.

AI listing assistance (optional)

If you use AI to generate listing text, the product images and text you select are sent to our server and to OpenAI to produce the result. We use them only to fulfil that request and record the credit used.

Pinterest (optional)

• When you connect Pinterest, we store your Pinterest account ID and username, and encrypted access and refresh tokens. The permissions requested let Flow read your boards and create Pins.
• We store the board you choose, your pacing settings, and a queue of Pins to create. Pins are created only from listings you created with Flow and published on Etsy, using that listing's public image, title, description and link.
• We do not read your other Pins, followers or messages, and we do not post anything except the Pins described above.
• You can disconnect at any time in the Flow app (this deletes the stored tokens and stops queued Pins) or remove CashCowly's access in your Pinterest settings. Pins already published remain on Pinterest until you delete them.

Emails and technical data

• Service emails we send (such as invitations, license and security notices) and whether delivery succeeded.
• Network addresses and request logs for security, abuse prevention and rate limiting.
• Cookies needed to keep you signed in. We do not use advertising or cross-site tracking cookies.

3. How we use information

• To provide the website, extension and Flow app, and to verify licenses, devices and plan limits.
• To process payments, send service emails and provide support.
• To keep accounts secure and prevent fraud and abuse.
• To meet legal and accounting obligations.

We do not sell your personal information and we do not use it for advertising.

4. Service providers

We share information only with providers that help us run the service, and only as needed:

• Supabase — database and authentication
• Vercel — website hosting
• Stripe — payments
• Resend — email delivery
• OpenAI — AI listing assistance, only when you use it
• Pinterest — only when you connect Pinterest, to create the Pins you set up

The Flow app communicates with Etsy directly from your computer using your own Etsy credentials. These providers may process data outside Thailand. We may also disclose information if required by law.

5. Retention

We keep account, license and usage records while your account is active and as long as needed for the purposes above and our legal obligations. Pinterest tokens are deleted when you disconnect Pinterest or when your account is deleted. You can ask us to delete your account at any time.

6. Security

We use encrypted connections, access controls and encryption of stored third-party tokens. No method of transmission or storage is completely secure, but we work to protect your information.

7. Your rights

Subject to applicable law, including Thailand's Personal Data Protection Act, you may ask to access, correct, delete or receive a copy of your personal data, object to or restrict its use, and withdraw consent where we rely on it. Contact us at support@cashcowly.io. You may also complain to the relevant data protection authority.

8. Children

Our services are intended for sellers and are not directed to children.

9. Changes to this policy

We may update this policy. We will change the "Last updated" date above and, for significant changes, notify account holders by email or on the website.

10. Contact

Digital Cash Cow Co., Ltd. · support@cashcowly.io