BoostDaShop is operated by Dorya LLC, a limited liability company registered in the State of New Mexico, United States.
When you register: full name (optional), email address, password (bcrypt hash — never plain text), subscription plan and billing status.
Products tracked, price alerts configured, AI listings generated, profit calculations, and support tickets submitted.
IP address, browser type, device information, pages visited, cookies and session tokens.
Payment is processed exclusively by Stripe, Inc. We never store your card details. We only receive subscription status, payment events, and a Stripe customer ID.
When you track products from supported marketplaces and suppliers, we may collect and store product data such as title, price, image, URL, and price history snapshots.
| Purpose | Legal Basis |
|---|---|
| Providing the service | Contract performance |
| Transactional emails (alerts, 2FA, receipts) | Contract performance |
| Weekly price digest emails | Legitimate interest / Consent |
| Fraud prevention and rate limiting | Legitimate interest |
| Improving the service and feature development | Legitimate interest |
| Legal obligations | Legal obligation |
We do not sell your personal data. We share data only with:
| Provider | Purpose | Location |
|---|---|---|
| Stripe | Payment processing | USA |
| Resend | Email delivery | USA |
| Anthropic | AI listing generation | USA |
| Hetzner | Server hosting | Germany |
| Data Type | Retention Period |
|---|---|
| Account data | Until deletion + 30 days |
| Price snapshots | 2 years |
| AI listings | Until deleted or account deletion |
| Support tickets | 3 years |
| Payment records | 7 years (legal obligation) |
| Server logs | 90 days |
Under GDPR and applicable privacy laws, you have the right to:
To exercise your rights, email: privacy@boostdashop.com. We respond within 30 days.
| Cookie | Purpose | Duration |
|---|---|---|
| bds_access_token | Authentication | 15 minutes |
| bds_token_expires_at | Token expiry tracking | Session |
| Session storage | User profile cache | Session |
We use only essential cookies required for authentication and core platform functionality. No advertising or third-party tracking cookies are used.
We implement: bcrypt password hashing (12 rounds), two-factor authentication via email, JWT tokens with 15-minute expiry, HTTPS on all connections, API keys stored as SHA-256 hashes, and HMAC-SHA256 webhook verification.
BoostDaShop integrates with third-party platforms, including eBay, using official APIs. When you connect your account, we access only the data necessary to provide our services, such as your listings, orders, and store-related information.
We do not collect or store data about other sellers or their listings beyond what is publicly available through official APIs and strictly required for generating aggregated insights. This data is used exclusively to provide recommendations and insights to improve your own listings and store performance.
We do not use marketplace data to profile or track other sellers.
Dorya LLC is based in the United States. If you are in the EU, your data may be transferred to and processed in the USA. We rely on Standard Contractual Clauses (SCCs) and our service providers' data protection commitments.
BoostDaShop is not directed at children under 16. If you believe a child has provided us with personal data, contact us at privacy@boostdashop.com.
We may update this Privacy Policy from time to time. We will notify you of significant changes by email. The "Last updated" date at the top reflects the most recent version.
Dorya LLC
304 S. Jones Blvd, Suite 8838, Las Vegas, NV 89107, USA
privacy@boostdashop.com
BoostDaShop is an independent tool and is not affiliated with or endorsed by eBay.