Security

This page explains what access foliascore has to your accounts, how your data is protected, and what you can do with it.

Etsy — read-only access

foliascore connects to your Etsy shop using Etsy's OAuth. It only reads your orders, listings, fees, refunds, and ad spend — it never writes anything back to your Etsy shop, and never changes your listings, prices, inventory quantities, or orders. If you disconnect foliascore, that access is revoked immediately.

Google Drive — narrow scope

If you use the Google Sheets export feature, foliascore requests only the drive.file scope — the narrowest scope that allows creating and writing spreadsheets. We can only touch files that foliascore created; we cannot read or modify anything else in your Google Drive.

Data storage and encryption

• Your Etsy OAuth tokens are encrypted at the application layer before they're ever stored — a database leak alone would not expose them. All stored data is additionally encrypted at rest at the infrastructure layer.
• We keep nightly off-platform backups. Each backup is encrypted before it leaves our infrastructure and is deleted after 14 days.
• Data is hosted in the United States. See our Privacy Policy for the full provider list.

Your data, your call

You can delete your foliascore account and all of its data at any time from Settings → Danger zone inside the app. You can also email hello@foliascore.com and we will delete everything manually, typically within a few business days.

Questions

If you have a security question or concern, email hello@foliascore.com.