Privacy policy
What Productero collects, why, who sees it, and what the Chrome extension does and does not do.
Effective November 5, 2026
Who we are
Productero ("we", "us") is a crosslisting service for resellers at productero.mochi-zen.com, with a companion Chrome extension. Questions about this policy go to frank@instantcitysolutions.com.
What we collect and why
| What | Why |
|---|---|
| Your email address | It is your account. We send sign-in codes and notices about your sales and listings to it. |
| Sign-in sessions | Keeps you signed in. We store a hashed copy of the session token, never the token itself. Sessions last 30 days. |
| Your inventory | Items you add: titles, descriptions, prices, condition, brand, size, color, category, tags, SKU, private notes and photos. Photos are stored in our storage and served from our site. |
| Listings | For each marketplace an item is on: its listing id, link and status, so we can keep listings in step. |
| Sales | When something sells: the marketplace, order number, quantity and price, so each sale is counted once. We do not store buyers' names, addresses or messages. |
| Storefront settings | Store address, name, bio, location and social handle (public), and your ship-from ZIP code (private; eBay requires it to list). |
| eBay connection | If you connect eBay through its API: the access and refresh tokens eBay issues, and your eBay user id and username. Used only to list, revise and end your listings and to read your orders. |
| Extension pairing | A hashed copy of your extension's token, its version and when it last checked in, plus whether Chrome is signed in to each marketplace (and the username shown there). |
| Billing | Your plan, trial dates and Stripe customer and subscription ids. Card details are handled by Stripe; we never see or store them. |
| Alerts and work history | Notices shown in your dashboard (kept 90 days) and a record of listing and delisting work (kept 30 days after it finishes). |
| Abuse protection | Your IP address and email are counted briefly to rate-limit sign-in attempts. The counters expire within hours. |
The Chrome extension
The extension exists because Poshmark and Mercari (and eBay, until our eBay API access is approved) have no public API for sellers. It does that work in your own Chrome.
- Where it runs: only on poshmark.com, mercari.com, ebay.com and productero.mochi-zen.com. It does not read or act on any other site.
- What it does: creates, edits and removes your listings when you ask Productero to, and reads your own listing and sold pages to notice sales and import your existing listings. What it reads is sent only to Productero, and only the parts needed to sync.
- Your accounts: it uses the sessions you are already signed in to. It never reads, collects or stores your marketplace passwords.
- What it never does: it does not collect your browsing history, show ads, track you across sites or sell anything about you.
- On your computer: it keeps its pairing token, a short log of recent actions and a list of sales it has already reported, in Chrome's extension storage. Removing the extension deletes them.
What is public
Your storefront at productero.mochi-zen.com/s/your-store is public by design: your store name, bio and location, and for each item you choose to show, its photos, title, description, price, brand, size, condition and links to its live listings. You can hide any item, or the whole store, in your settings. Private notes and your ship-from ZIP code are never shown.
Who we share it with
We do not sell your information, and we do not use it for advertising. We share it only to run the service:
- The marketplaces you choose: when you publish an item, its details and photos go to eBay, Poshmark or Mercari, through eBay's API or through the extension.
- Amazon Web Services hosts Productero in the United States (us-east-1): our servers, database, photo storage and the email we send.
- Stripe processes payments for paid plans.
- When the law requires it: if we must disclose information to comply with a valid legal request.
Cookies
We use one cookie: the session cookie that keeps you signed in. It is HttpOnly and Secure. We do not use advertising or analytics cookies.
Security
Data is encrypted in transit (HTTPS) and at rest. Session and extension tokens are stored only as one-way hashes. Access to production systems is limited to the people who run the service. No system is perfectly secure; if we learn of a breach that affects you, we will tell you.
Keeping and deleting your data
We keep your account data while your account is open. To delete your account and everything in it, email frank@instantcitysolutions.com from your account's address. We delete it within 30 days, except what we must keep for tax or legal reasons (such as billing records).
If you delete your eBay account, eBay notifies us, and we remove the eBay tokens and ids we hold for you. You can also disconnect eBay or unpair the extension at any time from the Connections page, which revokes our access right away.
Your choices and rights
You can see and edit your inventory and settings in your dashboard at any time. You can ask us for a copy of your data, or to correct or delete it, by emailing frank@instantcitysolutions.com. Depending on where you live you may have further rights under laws such as the GDPR or CCPA; we honor those requests too.
Children
Productero is for sellers aged 18 and over and is not directed at children. We do not knowingly collect information from children under 13.
Changes and contact
If we change this policy we will update the date above, and email you if the change is significant. Questions or requests: frank@instantcitysolutions.com.