1. What we collect
We collect the minimum needed to run the service: an email address for your account and billing receipts; the Poshmark username and password you supply when creating an API key; and the sales data we sync on your behalf — orders, earnings, and listings.
We also record operational metadata about your API usage: timestamps, endpoints called, and response codes. This is what your usage dashboard and billing are computed from.
2. How we use it
Your data is used to authenticate your requests, to sync and serve your sales history, to meter your balance, and to contact you about your account. We do not use your sales data to train models, build market reports, or benchmark you against other sellers.
3. Poshmark credentials
Your Poshmark password is encrypted with AES-256-GCM before storage, with random IVs and authentication tags. It is never written to logs, never included in error reports, and never displayed in plaintext to you or to our staff.
It is used for exactly one purpose: signing in to read your orders and listings. Full detail lives on the Security page.
4. Sharing and disclosure
We do not sell, rent, or trade your personal information. We share data only with the processors needed to operate: our cloud host, our payment processor, and our transactional email provider. Each is bound by contract to comparable protections.
5. Retention and deletion
We keep your data while your account is open. Revoking a key destroys the credential tied to it immediately. Closing your account purges your synced history within 24 hours; billing records are retained as long as tax law requires.
6. Cookies and analytics
We use a session cookie to keep you signed in and privacy-respecting, aggregate analytics to understand traffic. No advertising trackers, no cross-site profiling.
7. Your rights
You may request a copy of your data, correction of it, or its deletion at any time. Where GDPR or CCPA applies, we honour those rights regardless of where you live.
8. Changes to this policy
If we make a material change we will email account holders at least 14 days before it takes effect, and the version number at the top of this page will increment.
9. Contact
Questions or requests: privacy@poshmarkapi.com. We answer within two business days.