Privacy & Data Handling Policy

Last updated: August 2026 · Applies to IntelliPresta's PrestaShop modules — including IntelliPresta Marketplace Pro and eBay Marketplace Pro — and to the IntelliPresta authorisation service at intellipresta.com

IntelliPresta develops PrestaShop modules that merchants install in their own stores. Several of them — IntelliPresta Marketplace Pro (for Amazon) and eBay Marketplace Pro — connect a merchant's PrestaShop store to online marketplaces such as Amazon and eBay. This policy describes what data is collected, how it is used, where it is stored, how it is protected, with whom it is shared, how long it is kept, and how it is deleted. Where a section is specific to marketplace integrations, that is stated.

1. The architecture, in one paragraph

Our modules run inside the merchant's own PrestaShop installation, on hosting the merchant controls. Marketplace data — listings, prices, stock, orders, and the buyer details needed to fulfil them — travels directly between the merchant's server and the marketplace's official API, and is stored only in the merchant's own database. IntelliPresta operates one small hosted component: an authorisation service that completes the secure connection handshake. It keeps no database and stores no data. Each merchant is the data controller for the data in their shop; IntelliPresta is not a processor of marketplace or buyer data in normal operation.

2. What data is collected, and why

2.1 In the merchant's shop (by a marketplace module)

Data	Source	Purpose
Product and listing data (titles, descriptions, attributes, prices, stock)	The merchant's own catalogue; listing status from the marketplace API	Creating and synchronising marketplace listings
Order data (order id, items, amounts, taxes, delivery speed, fulfilment channel)	Marketplace API	Creating the corresponding PrestaShop order; accounting
Buyer contact and delivery data (name, delivery address, marketplace-relay e-mail, phone where provided)	Marketplace API, under the authorisations the merchant's seller account grants	Solely to fulfil the order: address labels, carrier hand-over, invoices, and order-related communication permitted by the marketplace
Marketplace fees and settlement figures	Marketplace API reports	Margin and accounting visibility for the merchant
API credentials for the merchant's seller account (refresh token; optionally client credentials in advanced configurations)	Issued by the marketplace when the merchant approves the connection	Authenticating the shop's API calls

2.2 On IntelliPresta's authorisation service

The IntelliPresta authorisation service — intellipresta.com/spapi/ for Amazon and intellipresta.com/ebay/ for eBay — processes, transiently and per request:

the one-time authorisation code the marketplace issues when a merchant approves the connection, exchanged immediately for the merchant's credentials and passed to the merchant's shop; and
the merchant shop's refresh token, presented by the shop to obtain short-lived access tokens during operation.

The service is stateless: it has no database, stores no tokens, no personal data, and no order or product data. Values exist in memory only for the duration of each request and are transmitted exclusively over TLS-encrypted connections. It sets no cookies and runs no analytics.

2.3 Support correspondence

If a merchant contacts support@intellipresta.com, we hold that correspondence (name, e-mail address, and whatever the merchant includes) to answer and to keep a support history.

3. How data is used

Data handled by the module is used only for the purposes in the table above — operating the merchant's marketplace business. Specifically, buyer personal data obtained from the marketplace is used only for order fulfilment and permitted order-related communication. It is not used for marketing, profiling, enrichment, or any purpose unrelated to the order, and it is never aggregated across merchants — the architecture makes that impossible, since each shop holds only its own data.

4. Where data is stored

Merchant and buyer data: in the merchant's own PrestaShop database, on the merchant's hosting, in the location the merchant chose.
IntelliPresta's authorisation service: nothing stored (see 2.2).
Support correspondence: in IntelliPresta's e-mail system.

5. How data is protected

All connections between the merchant's shop, the authorisation service and the marketplace's API use TLS (HTTPS) encryption in transit.
Buyer personal data requested from the marketplace uses the marketplace's restricted-data mechanisms: access tokens are scoped to the specific order and data element, obtained per operation, and never stored.
The module stores credentials in the shop's configuration, never in source code, and its administration screens never redisplay stored secrets.
The authorisation service holds its own credentials in server-side configuration files outside the web root's readable scope, with access restricted to IntelliPresta administrators.
Within PrestaShop, access to order and customer data is governed by PrestaShop's own employee-permission system, under the merchant's control.

6. With whom data is shared

IntelliPresta shares no marketplace or buyer data with anyone — it does not hold any. From the merchant's shop, data flows only to: (a) the marketplace's own API, as required to operate the integration; and (b) parties the merchant themselves engages (for example their carrier, for delivery). IntelliPresta uses a hosting provider for intellipresta.com; because the authorisation service is stateless, no personal data is stored with that provider. No data is sold, rented, or disclosed for advertising purposes — by design there is nothing to sell.

7. How long data is kept

In the merchant's shop: retention is under the merchant's control, subject to their legal obligations (e.g. tax law for order records). The module adds no retention of its own beyond the shop's.
Authorisation service: per-request only; nothing is retained.
Support correspondence: kept while relevant to an open licence or obligation, then deleted.

8. How data is deleted

Disconnecting: the merchant can revoke the marketplace authorisation at any time from their seller account, or with the module's Disconnect button, which clears the stored credential.
Uninstalling: uninstalling the module removes the module's database tables — staged orders, listing data, logs and settings — from the merchant's shop. Orders already created in PrestaShop remain part of the shop's normal order history, under the merchant's own retention rules.
Buyer deletion requests: merchants are responsible for honouring data-deletion obligations for their own shops; PrestaShop's customer-erasure tooling covers records the module created.
Marketplace account-deletion notifications: IntelliPresta operates a notification endpoint at https://intellipresta.com/ebay/deletion.php, registered for eBay's Marketplace Account Deletion/Closure programme. It completes eBay's challenge-code verification and acknowledges every deletion notification it receives. Because the service holds no eBay user data of any kind, there is nothing to erase centrally; where a merchant's own shop holds records for that buyer, the merchant erases them as the controller, using PrestaShop's customer-erasure tooling.
Support correspondence: deleted on request to support@intellipresta.com.

9. Your rights

For data in a merchant's shop, the merchant is the controller — buyers should direct requests (access, correction, deletion) to the shop they bought from, or to the marketplace they used. For the little that IntelliPresta itself holds (support correspondence), you can request access, correction or deletion at any time via the address below.

10. Changes to this policy

Material changes will be published on this page with an updated date above.

11. Contact

Questions about this policy or data handling: support@intellipresta.com.