Legal
Privacy Policy
Last updated: September 20, 2026
1. Overview
Veylto is a local-first desktop application developed under the independent Veylto Labs product brand. It is intended to help Etsy sellers manage authorized shop workflows. This policy explains what information may be processed, why it is used and the choices available to users.
2. Information processed
Depending on the features used, Veylto may process:
- account and shop identifiers returned through Etsy OAuth;
- listing, inventory, order and shop performance data authorized by the user;
- product images, mockups, prompts and other content submitted for AI-assisted workflows;
- application settings, workflow history and locally generated reports;
- technical diagnostics needed to operate, secure or troubleshoot the application.
3. Etsy authorization
Private Etsy data is accessed only after the seller authorizes the requested permissions through Etsy OAuth. Veylto does not ask users to share Etsy passwords or API credentials. Access can be revoked through the relevant Etsy account controls and, where available, through Veylto.
TikTok authorization and draft uploads
When TikTok features are enabled, Veylto may process the authorized TikTok account open ID, display name, avatar, OAuth authorization credentials and the local video explicitly selected by the seller for draft upload. This information is used only to identify the connected account and perform seller-initiated TikTok draft uploads. Veylto does not request TikTok passwords, scrape TikTok or access unrelated TikTok users. Connected access can be revoked through TikTok account controls and, where available, through Veylto.
Pinterest authorization and Pin publishing
When Pinterest features are enabled, Veylto may process Pinterest account information and content selected by the seller for Pinterest publishing.
This information is used only to connect the seller’s own Pinterest account, display available boards, and create or manage Pins explicitly selected and confirmed by the seller.
Veylto does not request Pinterest passwords, scrape Pinterest, access unrelated Pinterest users, perform mass posting, or publish content without the seller’s explicit action.
Pinterest access can be revoked through the seller’s Pinterest account settings and, where available, through Veylto.
Facebook and Instagram authorization
When Meta features are enabled, Veylto may connect to Facebook Pages and professional Instagram accounts through Meta’s authorization flow. Veylto may process account identifiers, Page and Instagram professional account identifiers, basic profile information, authorized permissions, media selected by the seller, captions and publication status.
Veylto does not request Facebook or Instagram passwords. Application secrets are protected by Veylto’s backend. Meta access is used only to connect the seller’s own accounts and perform actions explicitly requested by the seller.
Veylto does not access unrelated accounts, scrape Facebook or Instagram, publish content without the seller’s explicit action, or use Meta data for unrelated purposes.
Facebook and Instagram access can be revoked through the relevant Meta account settings and, where available, through Veylto. Data deletion requests are described at Data deletion.
4. Purpose of processing
Information is processed to provide requested features, analyze seller-provided images and mockups, generate and validate AI-assisted listing content, display shop data, prepare seller-reviewed changes, generate reports, maintain application state, diagnose failures and protect the service from misuse.
5. Local storage and service infrastructure
Veylto is designed around a desktop application and local workflow storage. Some functions may use secure service infrastructure, including OAuth coordination, credential protection, licensing, rate limiting and controlled Etsy API access. Information about infrastructure and retention will be maintained in this policy as services are introduced or changed.
6. AI providers
When a user selects an external AI provider, relevant input may be sent to that provider to complete the requested task. This may include text, product context, images or mockups selected by the user. Provider processing is governed by the provider’s own terms and privacy practices. Veylto is designed to show the selected provider and model rather than silently substituting another provider.
7. Sharing
Veylto does not sell personal information. Information may be shared only with service providers needed to deliver requested functionality, comply with law, protect rights and security, or complete a business transition subject to appropriate safeguards.
8. Retention and deletion
Locally stored information remains under the user’s control unless a feature states otherwise. Service-side information, where required, will be retained only for the period necessary for operation, security, legal compliance and dispute resolution. Users may request deletion of service-side personal information by contacting support.
9. Security
Reasonable technical and organizational measures are used or planned to protect information. No system can guarantee absolute security. Users remain responsible for protecting their device, account access, provider credentials and local backups.
10. International processing
Service providers may process information in countries other than the user’s country. Appropriate safeguards will be used where required by applicable law.
11. User rights
Depending on location, users may have rights to access, correct, delete, restrict or object to processing of personal information. Requests can be sent to support@veyltolabs.com.
12. Changes
This policy may be updated to reflect changes to Veylto’s services, architecture, features or legal obligations. The latest version will be published on this page with a revised date.
13. Contact
Privacy questions may be sent to support@veyltolabs.com.