How We Work With Platforms

Etsy

Etsy Open API v3

We use Etsy's official API to read your product listings and sync your shop data for content creation.

• Data Access: Read-only access to your shop's listings, images, and product details. We cannot modify your Etsy shop. We do not access transactions, orders, buyer profiles, reviews, or shipping data.
• Authorization: OAuth 2.0 authentication — you authorize exactly what data we can access. You can revoke access at any time through your Etsy account settings.
• Rate Limits: We respect Etsy's API rate limits (Queries Per Day and Queries Per Second), which vary by application. Current limits are visible in the Etsy Developer Portal. We implement caching to minimize API calls.
• Data Freshness: Listing content displayed in our system is refreshed regularly to remain current with your Etsy shop (within 6 hours for listings, 24 hours for other content). If content is deleted or modified on Etsy, our system reflects those changes within these timeframes.
• Content Usage: Your product photos and descriptions are used solely to generate social media content for your own accounts. We use a pre-trained third-party AI model (GPT-4) for content generation only. We do NOT train, fine-tune, or build any AI or machine learning model using Etsy data. We do not collect, scan, or aggregate Etsy content for analytics, machine learning, or data licensing purposes.
• Traffic Direction: Every social media post we create includes a direct link back to your Etsy product listing. We drive traffic to Etsy — not away from it.
• Commercial Access: ArtisanPromoter operates with Etsy Commercial Access, allowing us to serve any Etsy seller who authorizes our application.
• Official API Only: We access Etsy data exclusively through the official Etsy Open API v3. We do not use scraping, browser extensions, bots, or any unofficial methods to access Etsy data.
• No Data Selling: We do not sell, license, or commercialize Etsy data to any third party.
• Compliance: We follow Etsy's API Terms of Use and Developer Policy, including all requirements in Sections 3 and 5.

Facebook & Instagram (Meta)

Meta Graph API / Instagram Graph API

We use Meta's official APIs to publish content to your Facebook Page and Instagram Business account on your behalf.

• Data Access: We only access data you explicitly authorize — your pages, posts, and basic metrics.
• Posting: Content is published using the Content Publishing API. Our team creates and schedules posts, which are delivered automatically at the scheduled time.
• Content Policy: In compliance with Meta's Developer Policies (Section 2.1), we do not prefill captions or posts. All content is uniquely created by our editorial team (business employees) acting on your behalf.
• Rate Limits (Pages API): API calls are limited to 4,800 × number of engaged users per 24-hour period when using Page/System User tokens. We monitor and respect these limits.
• Rate Limits (Instagram): Instagram Graph API allows 25 API-published posts per Instagram Business account per 24-hour period. API calls are limited to 4,800 × number of impressions per 24 hours. We schedule within these limits.
• Automation Rules: We comply with Meta's Platform Policies and Developer Policies — no spam, no misleading content, no automated engagement farming.
• Content Standards: All generated content complies with Meta's Community Standards and is reviewed by our editorial team before publishing.
• User Consent: By connecting your account, you authorize us to publish content on your behalf.
• Security Standards: We maintain industry-standard administrative, physical, and technical safeguards for Platform Data protection, in accordance with Meta's Platform Terms (Section 6).
• Incident Response: Security incidents involving Platform Data are reported to Meta within 24 hours of discovery, per Meta's Platform Terms.
• No Password Storage: We never collect, store, or ask for your Facebook or Instagram login credentials. We access your accounts only through secure OAuth tokens that you can revoke at any time.
• EEA/UK Users: Data transfers comply with Meta's Standard Contractual Clauses (Module One: Controller to Controller). Ireland is the designated Member State for dispute resolution.

Pinterest

Pinterest API v5

We use Pinterest's official API to create pins and manage content on your boards.

• Data Access: Read/write access to your boards and pins — only what you authorize.
• Posting: Our team manually creates and approves each Pin before publishing. Pins are delivered via the official API with your product images and professionally crafted descriptions.
• Agent Authorization: By connecting your account, you authorize ArtisanPromoter's editorial team to act as your agent in selecting and approving each individual Pin. Every Pin is chosen individually by our team—no bulk automation.
• Posting Limits: Pinterest allows generous daily posting limits via API. We operate well within these limits.
• Content Policies: All content complies with Pinterest's Community Guidelines and Developer Guidelines — no spam, no misleading claims.
• Manual Review: Every Pin is individually reviewed and approved by our editorial team before publishing.
• Commercial Content: Pins linking to your Etsy shop are clearly commercial content published through your authorized business account.

X

X API v2

We use X's official API to publish posts on your behalf after editorial review.

• Data Access: Read/write access to your posts and basic profile data — only what you authorize.
• Posting: Posts are published via the official API. Our editorial team creates and reviews each post before it goes live.
• Posting Limits: X's API has daily posting limits (varies by tier: Free=1,500/month, Basic=3,000/month, Pro=60,000/month). We respect these limits and schedule appropriately.
• Automation Policy: We comply with X's Automation Rules, Developer Agreement, and Developer Policy. By using our service, you provide express consent to automated posting on your behalf.
• Content Standards: No misleading content, no spam, no prohibited content per X's Rules.
• Transparency: We maintain clear records of all posts made on your behalf.
• No Automated Likes: We do NOT perform automated likes on X — this is strictly prohibited by X's policies.
• No Identical Cross-Posting: We do NOT post identical or substantially similar content across multiple X accounts.
• No AI Training: We do NOT use X Content to fine-tune or train AI models (per X Developer Agreement Section III.A).
• No Surveillance: We do NOT use X Content for surveillance, tracking, or monitoring X users.
• No Sensitive Data Derivation: We do NOT derive or infer sensitive information about X users (health, political affiliation, religion, race, sexual orientation, etc.).
• Content Deletion: We delete X Content within 24 hours when requested by X or by you.
• No Password Storage: We never store or request your X login credentials — OAuth only.
• Off-X Matching: We do not associate your X identity with off-platform identifiers without your express opt-in consent.

LinkedIn

LinkedIn Marketing API

We use LinkedIn's Marketing API (a vetted API program) to publish content to your LinkedIn Page or profile. Important: LinkedIn's general Self-Serve API does not permit automated posting—you must use the Marketing API for this purpose.

• Vetted API Program: The Marketing API requires LinkedIn approval. We have been vetted and approved for posting capabilities.
• Data Access: Access limited to your profile or organization page and posting capabilities — only what you authorize as an Account Manager or Authorized Client.
• Posting: Posts are published via the Posts API (Share on LinkedIn). Our team creates and reviews content tailored for LinkedIn's professional audience.
• Rate Limits: LinkedIn allows generous daily posting limits through the Marketing API. We schedule appropriately.
• Content Policies: All content complies with LinkedIn's User Agreement and Professional Community Policies.
• Professional Standards: Content is crafted for LinkedIn's professional audience — no spam, no misleading claims, professional tone.
• No Password Storage: We never collect, store, or request your LinkedIn login credentials — OAuth authentication only.
• No Scraping: We do not use bots, crawlers, or automated methods to scrape LinkedIn data outside the official Marketing API.
• Data Deletion: We delete stored LinkedIn Marketing Data within 10 days when you cease using our service or request deletion.
• EEA/UK Users: Your agreement is with LinkedIn Ireland Unlimited Company. Disputes are governed by Irish law and resolved in Irish courts.

🤖 How We Use AI

ArtisanPromoter uses artificial intelligence to generate social media content based on your product listings. Here's how we handle AI responsibly:

• Content Generation: We use a pre-trained third-party AI language model (GPT-4) to draft social media posts, captions, and descriptions based on your individual product data. This is content generation, not model training.
• No AI Training on Platform Data: We do NOT train, fine-tune, or build any AI or machine learning model using data from Etsy, Meta, Pinterest, X, or LinkedIn. We do not collect, scan, or aggregate platform data for analytics, machine learning, or AI training purposes. The AI model is pre-trained by its provider and is used solely for content generation.
• Human Oversight: Every piece of AI-generated content is reviewed and edited by our editorial team before publishing.
• Originality: AI-generated content is crafted to be unique and not duplicative across accounts or posts.
• Per-Seller Processing: Each seller's data is processed independently. We never combine or aggregate data across sellers.
• Your Content: You retain ownership of your product images and original content. AI-generated variations are licensed to you for your use.

🛡️ Our Compliance Principles

• User Authorization: Every platform connection requires your explicit OAuth authorization. We never access accounts without permission.
• Editorial Review: All content is created and reviewed by our team before publishing. We maintain quality standards and platform compliance.
• No Spam: We do not engage in mass posting, fake engagement, or any activity that violates platform spam policies.
• Rate Limit Compliance: We monitor and respect each platform's API rate limits to ensure reliable, uninterrupted service.
• Data Minimization: We only collect and use data necessary to provide our service. Your data is not sold or shared with third parties.
• Platform Changes: We monitor platform policy changes and update our practices to maintain compliance.
• Easy Disconnection: You can revoke our access to any connected account at any time through your platform settings or by contacting us.
• Security Standards: We maintain industry-standard administrative, physical, and technical safeguards to protect Platform Data, meeting or exceeding security requirements of all connected platforms.
• Incident Response: Security incidents are reported to affected platforms within 24 hours of discovery (Meta Platform Terms Section 6, Etsy API Terms, and others as applicable).
• No Credential Storage: We never collect, store, or request login credentials (passwords) for any connected platform. We use only secure OAuth tokens for authentication.

📧 Questions About Compliance?

If you have questions about how we work with platforms or our compliance practices, please reach out:

• Email: compliance@artisanpromoter.com
• Response Time: We aim to respond within 48 hours