Privacy Policy

Tusella is an AI-assisted Etsy listing workspace built by Artem Kornieiev and Mykyta Glushko. This page explains what we collect, why, and what choices you have.

Tusella is operated by Tusella LLC (ТОВ «ТУСЕЛЛА»), a Ukrainian company and Diia.City resident, registered at Naberezhno-Luhova str. 12, Kyiv 04071, Ukraine, EDRPOU 46185773. Tusella LLC is the controller of the personal data described on this page. Contact: hello@tusella.com.

What we collect

• Your email, when you apply for early access or download a free tool like the Etsy Launch Engine. We use it to reply, deliver what you asked for, and send occasional updates you can unsubscribe from at any time.
• Etsy shop data, only if you connect a shop. Tusella connects through Etsy's official OAuth — you authorise it from Etsy, and we access only what's needed to draft and edit your listings. You can disconnect from Etsy at any time.
• Pinterest account data, only if you connect a Pinterest account. Tusella connects through Pinterest's official OAuth. We can read your boards and create Pins for you — but only Pins you have chosen and confirmed yourself in tusella. We don't keep a copy of your Pinterest data: your boards are loaded from Pinterest each time you open the Pin composer, and aren't stored afterwards. We keep only what's needed to carry out your instruction — the board you picked, the identifier of a Pin we created for you so we can link you to it, and your access token. You can disconnect Pinterest at any time.
• Payment and billing data, if you subscribe to a paid plan. Your payment is processed by Paddle, which acts as merchant of record and payment processor — we don't receive or store your card details. Paddle passes us your subscription status, plan, and billing state, which is what lets us grant you access to paid features.

Connected AI assistants

You can connect an AI assistant you already use, such as ChatGPT or Claude, to one of your Tusella teams. This is optional. The assistant cannot reach your team's shop or listing data until you approve the connection on a Tusella consent page, where you choose the team and whether the assistant may only view your listings or also edit them as drafts.

• What we receive from the assistant. The details it puts in each request, such as search terms, listing identifiers and proposed changes. We use them to carry out the request.
• What the assistant receives. The data that answers its request: your team's name, plan and your role; shop information; and listing content — text, prices, stock, variations, links to photos and videos, digital-file details, your private working names and labels, and how a listing differs from what is on Etsy. From then on that data is held by the company that provides your assistant, which you chose; see its terms and privacy policy for how it uses and keeps the data, which may include processing in other countries. The assistant app receives access tokens for this one Tusella connection. We never send it your Tusella or Etsy password or your Etsy access token.
• What the assistant can do. It can read your listings and, if you allowed editing, change them as drafts in Tusella. Its edits are saved to your listings and appear in their change history, marked as made by the assistant. It cannot publish to Etsy: publishing is always your own confirmation in Tusella.
• What we keep about the connection. The app's name, identifier and verified host, the team and the member who approved it, the access level, and when it was created, last used and disconnected, together with the sign-in records that establish and secure the connection. Tokens are stored as checksums, not as usable values. These records have no scheduled expiry: a disconnected connection leaves your Connected agents list but its record stays until the user or team is deleted or you ask us to delete it.
• What we keep about each request. The account and connection it came from, its permissions, the action asked for, when, how long it took, whether it succeeded, which shop, listing or change it concerned, which kinds of fields were involved, any error code, and a fingerprint of the request. This activity record does not hold the values the assistant sent or the answer it received. We use it to show you the assistant's activity, to troubleshoot, and to investigate security incidents. An hourly cleanup deletes activity records older than 30 days.
• What else is stored. To stop a repeated request from applying the same change twice, we keep a hashed retry identifier and the result of a completed change; these have no scheduled expiry. Short-lived working data for a request expires within an hour. The edits themselves and their history are part of your listings and are kept with them, not deleted after 30 days. We also collect operational logs and measurements about requests, errors, response times and access checks to run, troubleshoot and secure the connection.
• How to stop. In Tusella, open Settings → Connected agents, select Disconnect and confirm. We revoke that connection's tokens, so new requests are refused; a request already running may still finish. Disconnecting does not undo edits, delete the records described here, or remove data the assistant's provider already received. To ask for access to or deletion of what we hold, write to hello@tusella.com; for the provider's copy, use the provider's own controls.

Usage analytics and session recordings

To improve Tusella faster during the closed alpha for invited Ukrainian Etsy sellers, we collect usage events and masked session recordings linked only to a pseudonymous identifier; these remain personal data. They help us understand how you use the app and where the interface should be easier to use.

For this Ukrainian alpha, we process usage events and masked session recordings on the basis of our legitimate interest in identifying usability problems and improving Tusella, subject to your overriding rights and freedoms. Accepting the Terms and Privacy Policy does not constitute consent to optional analytics. You can object through Settings or hello@tusella.com.

Where applicable law requires prior consent, analytics, session recording, and their browser storage remain off until you opt in. You can withdraw consent at any time in Settings.

PostHog Inc. processes analytics for us under a DPA signed on 27 September 2026. Data is stored in its EU Cloud in Frankfurt, Germany. Within Tusella, access is restricted to authorized operators. PostHog and authorized subprocessors may process data outside the EEA, including in the United States, under the DPA's safeguards, including the EU–US Data Privacy Framework where applicable and Standard Contractual Clauses where required. Contact hello@tusella.com for information about transfer safeguards.

Session recordings are retained for 30 days. Events have a maximum retention of seven years under our PostHog plan; we delete identifiable events no later than 12 months after this closed alpha ends, and earlier when no longer necessary for the stated purpose or when you request deletion. We use localStorage for analytics only while it's switched on.

• What we collect. Page visits by URL pattern and key actions: registering, connecting a shop, importing, saving changes, publishing, viewing plans, and checkout. We also collect session recordings that show how you move through the interface.
• What we don't collect. We don't send PostHog your email, name, shop name, or listing text. On recordings, the text of Tusella's own interface (menus, buttons, headings, field labels) stays visible so we can see how the product is used; everything that belongs to you or your shop — listing texts, titles, tags, prices, shop and organization names, your name and email, anything you type into fields, photos and other media — is hidden. Session recording is disabled on sign-in, registration, billing/checkout, and internal operator pages.
• How to opt out. Analytics and session recordings are on by default except where applicable law requires prior consent; in those cases, analytics, recordings and their browser storage remain off until you opt in. Switching off "Help improve Tusella" in Settings immediately stops collection of usage events and session recordings.
• How to delete. Email hello@tusella.com: a Tusella operator will delete your PostHog person record and the associated events and recordings (this happens asynchronously). Switching analytics off stops new collection but does not itself delete earlier data.

Before production analytics is enabled, existing account holders who have not seen this notice will receive it, or have analytics disabled for their account.

Where you came from. When you create a Tusella account, we record how you found us: the domain of the site that sent you (never the full address) and any campaign tags (utm parameters) on the link you followed. We store them with your account so we can understand which channels bring sellers to Tusella. This website passes them to the app through the link itself; the website uses no cookies or browser storage for this.

Ukrainian — for participants of the closed Etsy seller alpha

Account emails

When you create a Tusella account, we use your email address to sign you in and to send emails about your account: a link to confirm the address, security notices such as a password reset or a password change, invitations and billing notices that concern your account, and — if you created an account but haven't connected an Etsy shop yet — at most two reminders to finish setting it up. Every reminder has a one-click link that stops them. Account and security emails keep arriving while you have an account.

Коли ти створюєш акаунт у Tusella, ми використовуємо твою email-адресу для входу й листів щодо акаунта: посилання для підтвердження адреси, повідомлення про безпеку (скидання чи зміна пароля), запрошення та платіжні повідомлення щодо твого акаунта, а якщо акаунт створено, але магазин Etsy ще не підключено, — щонайбільше два нагадування завершити налаштування. У кожному нагадуванні є посилання, яке вимикає їх одним кліком. Листи щодо акаунта й безпеки надходять, поки в тебе є акаунт.

Sign-in cookie

When you sign in to the Tusella app, it sets one small cookie, __Secure-tusella_recent, on tusella.com. It holds only the value “1” — no name, email, shop or account identifier — and lasts up to 14 days. Its only job is to show you “Open Tusella” on this site instead of the early-access sign-up. It signs you in to nothing, is not used for analytics, and is removed when you sign out.

Коли ти входиш у застосунок Tusella, він ставить на tusella.com одну маленьку cookie __Secure-tusella_recent. У ній лише значення «1» — без імені, email, магазину чи ідентифікатора акаунта, — і вона діє до 14 днів. Її єдина задача — показати тобі на цьому сайті «Open Tusella» замість заявки на ранній доступ. Вона нікуди тебе не логінить, не використовується для аналітики й зникає, коли ти виходиш.

What we don't do

• We don't sell your data.
• We don't publish anything to your Etsy shop without your review — every change waits for you to approve it.
• We don't publish to Pinterest automatically or in bulk — you choose and confirm every Pin before it goes out.
• Our hosting, email-delivery and analytics providers process personal data on our behalf under written processing agreements. Other recipients and their roles are described in this policy. Paddle's role as merchant of record for paid plans, described above under Payment and billing data, is separate from our processors.

Your choices

You can unsubscribe from emails, ask us what we hold about you, ask us to delete it, or disconnect any Etsy shop or Pinterest account. To do any of these, email hello@tusella.com.

You can request access to your data and information about its sources, purposes, location and recipients; request correction or deletion where legally applicable; submit a reasoned objection to processing; and withdraw consent where processing relies on consent. You may complain to the Ukrainian Parliament Commissioner for Human Rights or seek a judicial remedy. You also have rights concerning automated processing and decisions with legal consequences. Where GDPR applies, its rights to restriction and portability apply subject to their conditions, and you may complain to the competent supervisory authority. Contact hello@tusella.com.

Changes to this policy

We will update the date above when this policy changes and notify you of material changes before they take effect. Where required, we will obtain consent before introducing new processing.

Contact

Questions about privacy? hello@tusella.com.