Privacy policy

Last updated October 18, 2026.

Draft for the beta. Have it reviewed by counsel before public launch, and replace the operator details below with your legal entity and contact address.

Who we are

Byvoro ("we") provides buyer-intelligence software for eBay sellers. The operator of this Byvoro instance is listed on the sign-up page's footer or available at the contact address below.

What Byvoro processes, and why

Byvoro exists to help a seller understand their own buyers. To do that it processes data about the seller's own orders. Byvoro is a tool the seller uses on their own sales records; it never contacts buyers on its own.

Seller account data: email address, password (stored only as a salted hash), display name, settings, and audit entries of actions taken in the app.
Order facts from the seller's exports or eBay connection: eBay order number, buyer username, the buyer's first name as shown on the shipping label, item titles, quantities, prices, dates, shipping service, refunds, feedback flags.
Coarse geography: the buyer's state or country and the first three digits of the postal code. Street address, full postal code, email address and phone number present in exports or API responses are discarded before anything is stored.
Listings the seller imports (titles, prices, quantities, item specifics).
Notes the seller writes about a buyer, and advice generated for the seller.
Credentials the seller provides: the seller's own eBay developer application keys, the eBay OAuth tokens eBay issues to that application, and, optionally, a Claude API key. These are encrypted at rest and used only to perform the function the seller enabled.

What Byvoro does not do

It does not send messages, emails or offers to buyers. Drafts and suggestions are shown to the seller, who decides what to send through eBay.
It does not sell, rent or share buyer data with third parties, and it does not use buyer data for advertising.
It does not operate eBay's website automatically. The optional browser extension only displays the seller's own stored information next to buyer names on pages the seller is already viewing.
It does not send buyer identities to the AI provider. The optional advisor receives aggregate statistics only; the optional reply-drafting feature receives the seller's own summary of a buyer's purchase history, never names, addresses or contact details.

eBay

When a seller connects eBay, Byvoro requests read-only access to orders through eBay's official API and stores the resulting order facts as described above. Byvoro subscribes to eBay's marketplace account-deletion notifications: when eBay notifies us that an eBay member has closed their account, we delete the data we hold about that member. Byvoro's use of eBay data is governed by eBay's API License Agreement and User Agreement, which prohibit using buyer information for marketing without consent and sharing it with third parties.

AI providers

If a seller saves a Claude API key, requests for the advisor and for reply drafts are sent to Anthropic's API under the seller's own key and Anthropic's terms. Byvoro sends aggregate statistics and, for drafts, a non-identifying summary of the buyer's purchase history together with the message the seller pastes in.

Retention and deletion

Order facts, listings and notes are kept for as long as the seller's account exists, so the buyer history remains useful.
A seller can clear their stored orders and listings at any time from the app, disconnect eBay, and delete their account, which removes all data tied to it.
Data about an eBay member is deleted when eBay sends an account-deletion notification for that member.
Backups are rotated on a short schedule and are protected like the live database.

Security

Connections use HTTPS. Passwords are hashed with scrypt. OAuth tokens and API keys are encrypted with AES-256-GCM. Sessions are signed, HttpOnly cookies. Access to the server is limited to the operator.

Your rights

Sellers can access, export and delete their data from the app. Buyers whose purchase history appears in a seller's account may contact the operator to ask what is held about them or to request deletion; because Byvoro stores no email addresses, requests must include the eBay username concerned. Residents of the EU/EEA, the UK and California have additional rights under GDPR, the UK GDPR and the CCPA, which the operator will honor.

Changes and contact

We will post changes to this policy on this page with a new date. Contact: the operator's address shown in the app's Settings page or on the sign-up page.