Privacy Policy

Last updated: 30 August 2026

Information you provide

When you create and use a MyCost account, MyCost may store information such as your name, email address, account and login information, inventory and stock records, purchase costs and sales information, marketplace details, supplier information, notes, feedback and other business records you choose to enter.

This information is used to create and operate your account and provide the MyCost service. The main lawful basis for this processing is performance of a contract, because this information is needed to provide the service you request.

Marketplace information

If you choose to import information from a marketplace or connect a supported marketplace account, MyCost processes the information necessary to provide the feature you requested. MyCost does not sell marketplace information or use connected marketplace information for advertising.

Connected eBay accounts

Connecting an eBay account is optional. If you choose to connect eBay, you are redirected to eBay to sign in and grant permission. MyCost never asks for or stores your eBay password.

MyCost may receive and store information including your eBay public user identifier and username, OAuth authorisation tokens, listing identifiers and listing information, listing-performance information such as impressions, views and conversion metrics, order and sale information, and eBay fee information.

This information is used only where required to provide MyCost's eBay-connected features, including linking and importing listings, detecting sales, updating inventory, analysing listing performance, providing seller actions and calculating sales and profit information.

OAuth tokens are stored server-side and encrypted at rest. They are used only to make authorised eBay API requests on behalf of the MyCost account that connected eBay. The lawful basis for this processing is primarily performance of a contract, because the processing is necessary to provide the eBay-connected features you choose to use.

Connected Etsy accounts

Connecting an Etsy account is optional. If Etsy Connect is available to your account and you choose to connect it, you are redirected to Etsy to sign in and grant permission through Etsy OAuth. MyCost never asks for or stores your Etsy password.

MyCost may receive and store information including your Etsy user and shop identifiers, shop name, encrypted OAuth authorisation tokens, listing identifiers and listing information, order and receipt information, and posted Etsy payment and fee information where available through the Etsy Open API.

This information is used only where required to provide the Etsy-connected features you choose to use, including linking or importing listings, detecting and recording sales, updating inventory, calculating marketplace fees and profit information, and running user-enabled cross-channel Sold Guard actions.

Etsy OAuth tokens are stored server-side and encrypted at rest. They are used only to make authorised Etsy API requests on behalf of the MyCost account that connected Etsy. The lawful basis for this processing is primarily performance of a contract, because the processing is necessary to provide the Etsy-connected features you choose to use.

Spreadsheet imports

If you choose to use Smart Spreadsheet Import, MyCost processes the CSV, TSV or XLSX file you upload so it can identify columns, preview rows, detect duplicates and create the inventory or sales records you approve. A temporary copy of the source spreadsheet may be stored securely while you review or resume the migration. It is automatically cleared when the migration completes, when you discard it, or after a limited temporary period.

Prepared import rows and migration metadata may remain in your MyCost account so large imports can resume safely and so MyCost can identify which records were created by a migration for the protected undo feature. Spreadsheet contents are not sent to connected marketplaces merely because you upload a file.

Creator Partner applications

If you apply to become a MyCost Creator Partner, MyCost processes the application details you submit, such as your name, email address, creator or channel name, public profile URL, main platform, approximate audience size and information you choose to provide about your content. Limited technical information may also be used to prevent repeated or abusive submissions.

This information is used to review the application, contact you about the outcome and, if approved, create and administer your Creator Partner relationship. The lawful bases are MyCost's legitimate interests in reviewing genuine partnership applications and, once a partnership is approved, performance of a contract in operating the Creator Partner Programme.

Creator Partner referrals and affiliate tracking

If you visit MyCost through a Creator Partner referral link, MyCost may store a first-party referral cookie for up to 30 days. The cookie contains the partner referral code so that, if you create a new MyCost account, MyCost can attribute that signup to the appropriate Creator Partner and apply any advertised referral benefit such as a Power trial.

MyCost records referral programme information such as aggregate link clicks, attributed signups, whether a referred workspace later became a paying subscriber, and commission amounts generated from eligible subscription payments. Creator dashboards show aggregate and privacy-friendly conversion activity only; creators are not given another reseller's email address, inventory, sales records or other private workspace information.

Referral and commission data is processed to operate the Creator Partner Programme, prevent abuse, calculate partner payments and maintain financial records. Depending on the information involved, the lawful basis is performance of a contract with the Creator Partner and MyCost's legitimate interests in operating and protecting its referral programme.

Security and service protection

MyCost may process limited technical, server-log or account information where necessary to maintain security, prevent abuse, troubleshoot problems and protect the service and its users. Where this processing is not necessary to provide the service itself, MyCost relies on its legitimate interests in operating and protecting a secure and reliable service.

Sharing of information

MyCost does not sell personal information. Information may be processed by service providers used to operate MyCost, such as hosting, infrastructure and email-delivery providers. Information may also be exchanged with a service you explicitly choose to connect, such as eBay or Etsy, where this is necessary to provide the requested integration. Information may also be disclosed where required by law or where reasonably necessary to protect MyCost, its users or the security of the service.

International processing

Some service providers or connected services may process information outside the United Kingdom. Where UK data-protection law requires safeguards for an international transfer, MyCost will rely on an applicable lawful transfer mechanism or other protection recognised under UK data-protection law.

How long information is kept

Account information and reseller records are generally kept while your MyCost account remains active so the service can provide your stored inventory, sales and business records. Records you delete are removed from normal use, subject to limited backup, security or legal retention where applicable.

If you request deletion of your account, personal information associated with the account will be deleted or anonymised where reasonably possible, except where information needs to be retained temporarily for security, backup, dispute-resolution or legal purposes. Information is not kept for longer than reasonably necessary for the purpose for which it was collected.

Disconnecting eBay or Etsy removes the stored OAuth connection for that marketplace and MyCost will no longer use that connection to access the account. Inventory or sales records you chose to keep in MyCost may remain until you delete those records or request deletion of your MyCost account.

Your data-protection rights

Depending on the circumstances and the lawful basis being used, UK data-protection law may give you rights including the right to:

• ask for a copy of personal information held about you;
• ask for inaccurate information to be corrected;
• ask for personal information to be deleted;
• ask for processing of your information to be restricted;
• object to certain uses of your personal information; and
• request transfer of certain information in a portable format where applicable.

Some rights do not apply in every situation.

You have the right to object to processing based on legitimate interests.

If processing is ever based on your consent, you can withdraw that consent at any time. Withdrawal does not affect processing that was lawful before consent was withdrawn.

Providing your information

You are not legally required to create a MyCost account. However, information such as an email address and the information needed to operate your account is required if you want to use account-based MyCost features. Connecting a marketplace such as eBay or Etsy is optional.

Automated decision-making

MyCost provides calculations, reseller insights, alerts and suggested actions, including MyCost Brain recommendations, to help users manage their business. User-enabled operational features such as Sold Guard may perform a marketplace listing action when defined conditions are met. MyCost does not currently use personal information to make solely automated decisions that produce legal or similarly significant effects about users.

Contacting MyCost about your information

The data controller for MyCost is Lee West, trading as MyCost.

Email: hello@mycost.uk
Website: mycost.uk

You can use this email or MyCost's in-app feedback facilities to ask about your information, exercise a data-protection right or request account assistance.

Complaints

If you have a concern about how MyCost has handled your personal information, please contact MyCost first so the issue can be investigated. You also have the right to complain to the Information Commissioner's Office (ICO), the UK's independent data-protection regulator.

Security

MyCost uses measures including HTTPS, server-side authentication, workspace isolation and encrypted storage for connected marketplace OAuth tokens, including eBay and Etsy. No internet service can guarantee absolute security, but access to information is limited to what is reasonably necessary to operate and protect the service.

Changes to this policy

This privacy policy may be updated as MyCost develops or its features change. Where there is a material change to how personal information is used, the updated information will be made available to users. The date at the top of this policy will be updated when changes are made.