Platform review · Etsy

Etsy developer review pack

Public evidence for Etsy developer access: read-only shop/listing sync for social drafts. No buyer/order data in Phase 1. No secrets on this page.

No secrets on this page

Test passwords, access tokens, and private credentials are shared only through the provider’s secure submission channel never published here.

Public use-case statement

BrandMilo allows Etsy sellers to connect their own shops and import active listing information for the purpose of generating and managing social-content drafts. The initial release requests read-only access to shop and listing data and does not import buyer or transaction data.

Availability

Etsy integration status is currently Private Beta (config-driven). Availability depends on Etsy developer access, API terms, rate limits, account eligibility, and continued authorization.

Scopes / permissions

Scope	Purpose
listings_r	Read active listings needed to build content drafts.
shops_r	Identify the authorized shop and basic shop metadata.

OAuth / authorization steps

User clicks Connect Etsy.
App generates state + PKCE and redirects to Etsy authorization.
User approves minimum scopes on Etsy.
Callback validates state, exchanges code with verifier, encrypts tokens, identifies shop.
User can run listing sync and disconnect later.

Reviewer steps

Confirm public website, Privacy, and Terms.
Sign in with securely provided test credentials (not listed here).
Connect Etsy via OAuth with PKCE.
Run active listing sync and confirm listings appear without duplicates on resync.
Confirm no buyer/order data is requested.
Disconnect and review Data Deletion instructions.

Demo video script

Demo video placeholder

Embed or link the recorded demo here after capture. Script outline:

Homepage + legal links
Connect Etsy OAuth (state + PKCE)
Shop identity shown
Sync active listings
Show listing detail used for drafts
Disconnect + deletion page

Evidence checklist

ReadyAccurate app description
ReadyOfficial website
ReadyPrivacy Policy
ReadyTerms
PlannedExact HTTPS redirect URI
PlannedOAuth state and PKCE
ReadyMinimum read scopes
ReadyNo scraping
PlannedRate-limit handling
PlannedToken encryption
PlannedDisconnect and deletion
PlannedCommercial-access application where required

Data notes

Shop and listing metadata only in Phase 1
No Etsy passwords collected
No order/buyer/transaction import in Phase 1
Tokens encrypted; revoked/disabled on disconnect

Reviewer access notes

Test credentials are shared only through the Etsy developer portal / secure reviewer channel.
Never publish Etsy passwords or tokens on this page.

Support during review: developers@brandmilo.com

Limitations & disclosures

Phase 1 does not edit Etsy listings.
Local callbacks use localhost until domains attach (ECO-08.04).