Privacy Policy

Alomations is operated by Alomations LLC, a single-member limited liability company formed in the State of Wyoming, United States. We provide an AI-powered Etsy listing automation platform, and we act as the data controller for your personal data when you use our website and Service.

Address for legal notices: 30 N Gould St, Ste N, Sheridan, WY 82801, United States. This is our registered agent's address. The quickest way to reach a person is email: info@alomations.com.

Most of our customers are in Türkiye and we process their personal data, so KVKK (Law No. 6698) applies to us alongside the GDPR, even though we are established in the United States. Where the two differ we apply whichever gives you the stronger protection. If you are in Türkiye, the notice written for you is KVKK Aydınlatma Metni.

This policy describes how we collect, use, disclose, and protect personal data when you visit our site, create an account, and use our Service.

• Account data: name, email, password hash, and team association.
• Shop data: Etsy shop identifiers, OAuth tokens, templates, and configuration you provide.
• Usage data: app interactions, plan usage (e.g., listings generated), device info, approximate location, and logs.
• Support data: messages and attachments you share via the contact form or email.
• Billing data: processed by our payment provider; we store status, plan, and last 4 digits/expiry where provided, but not full card numbers.
• Marketing attribution: if you allow marketing cookies, the link, campaign or ad that brought you to our site (utm tags and the ad click ID: gclid from Google, fbclid from Meta), saved with your account when you sign up.

• Directly from you (forms, support requests).
• Automatically via cookies and similar technologies (see Cookie Policy).
• From third‑party providers you connect (e.g., Etsy, analytics, payments).

• To provide and operate the Service (account, generation, publishing, syncing).
• To personalize features and improve performance.
• To communicate with you about updates and support.
• To comply with legal obligations and enforce terms.
• With your consent, to measure which of our ads bring signups and subscriptions, and to show our ads to people more likely to find them useful.

Generating a design, cleaning it up, or writing listing copy sends content to an AI provider. Because that means your material is handled outside our own systems, we set out which of it goes to which kind of provider.

• Image generation and editing — your prompt and any reference image you upload go to a specialist image-generation provider.
• Titles, tags and descriptions — the design context, product type and your existing listing text go to a large-language-model provider.
• Aloma tasks — when you ask Aloma to plan and make listings, your brief, your own shop's listing titles and their public view and favourite counts, and the images it generates go to that same large-language-model provider, so it can work out what sells in your shop and check its own output. No other seller's shop data is used.
• Sharpening artwork for print: the image you submit goes to an image-conversion provider.
• Community translation — the post text you ask to translate goes to a machine-translation provider.

All of these providers are established in the United States. We name the categories rather than the companies; if you need the specific identities — for your own compliance file, or a due-diligence review — ask us and we will provide them.

We send the minimum each step needs. Your password, payment details and your buyers' personal data are never sent to an AI provider.

We do not permit these providers to train their models on your content. If a provider changes its position on that, we will update this policy and tell you before the change takes effect.

AI output is generated automatically and can be wrong. Nothing is published to your Etsy shop unless you chose to publish it — either by publishing a listing yourself, or by approving an Aloma task plan with publishing switched on, which lets that task publish the listings it made for you without asking again. Aloma publishes only within a plan you approved, or within a standing permission you created and can remove at any time, and no decision with a legal or similarly significant effect on you is made by an automated system alone.

• Contract: to provide the Service you requested.
• Legitimate interests: to secure and improve our Service.
• Consent: analytics and marketing cookies (including ad attribution), and measuring our ads. You can withdraw it at any time under Cookie Settings in the site footer.
• Legal obligation: to meet regulatory requirements.

We share data with the companies that help us run Alomations — hosting, storage, payments, email, error tracking, AI generation and, when you use it, order fulfilment. Each is bound by a data processing agreement and may only use your data to provide its service to us.

They fall into these categories: hosting and storage, payment processing, transactional email, error monitoring, AI generation and translation, and — only when you use it — print fulfilment and shipping. They are established in the United States and the European Union.

We describe them by category rather than by name. If you need the specific identities, the countries each one processes in, or a copy of the terms that protect a transfer, write to us and we will send them.

We may disclose data if required by law or to protect rights and safety.

Advertising partners. If you allow marketing cookies, the Meta Pixel (Meta Platforms) and the Google Ads tag (Google) run on our site so we can measure our ads. They receive their own cookie IDs, standard browser data such as your IP address and browser type, the pages you visit, and events such as signing up, connecting an Etsy shop and starting a subscription (with its amount and currency). Each event carries a random event number so it is not counted twice; the number is not linked to your account. We never send them your name, your email address or any data from your Etsy shop. You can withdraw consent at any time under Cookie Settings in the site footer.

For the Meta Pixel, where the GDPR applies, we and Meta Platforms Ireland are joint controllers for collecting this data on our site and sending it to Meta, under Meta's Controller Addendum. What Meta does with the data after that is Meta's own responsibility. For the Google Ads tag, we and Google are each an independent controller, under Google's controller terms. Both may use the data for their own purposes, as described in the Meta Privacy Policy and the Google Privacy Policy.

We do not sell personal data. We collect only the minimum details needed to provide the Service.

Your data is processed in the United States and the European Union. For transfers out of the EEA or the UK we rely on our providers' data processing terms, which include the EU Standard Contractual Clauses where the provider offers them.

Turkish law (KVKK Article 9) requires an appropriate safeguard for regular transfers abroad, usually the Turkish standard contract. We have not yet signed that contract with our providers. The KVKK Aydınlatma Metni explains this in Turkish. For the current status, or a copy of a provider's terms, write to us.

We keep personal data for as long as we need it to run the Service, and for as long as the law requires us to. Rather than leave that as a phrase, here are the periods we actually operate:

We delete or anonymise data when it is no longer needed for the purpose it was collected for.

Account deactivation: if you deactivate your account, we retain your account data (designs, templates, orders, and settings) so you can view and download it anytime, and reactivate later by subscribing to a plan. While deactivated, you will not receive emails from us other than essential account-security messages. If you prefer permanent erasure, submit a request to support: we anonymize your personal data (identity, contact details except email, and buyer information) and lock the account. Your email address is retained after erasure for account-integrity and communication-suppression purposes.

We use administrative, technical, and organizational measures to protect data, including encryption in transit and at rest. No method is 100% secure.

• Access, rectify, or delete your data.
• Portability and restriction of processing.
• Object to processing based on legitimate interests.
• Withdraw consent at any time (where applicable).
• Complain to your local supervisory authority.

The Service is not intended for children under 16. We do not knowingly collect data from children.

We honour the Global Privacy Control signal as an opt-out of marketing and analytics cookies: a browser that sends it is treated as having opted out, unless you have explicitly accepted those cookies on our site. We do not respond to the older Do Not Track signal. Use our preference center and your browser settings to manage cookies.

We may update this Policy. We will post changes here with a new date. Material changes may be communicated by email or in‑app.

Questions? Email info@alomations.com or reach us via the form at /contact.