Last updated: 10 September 2026
Depending on the features you use, Peggy may process account identifiers, profile and workspace information, product photos, listing details, user-provided personalisation such as a preferred name, hobbies, interests and followed teams or clubs, marketplace account identifiers, OAuth authorisation metadata, inventory information, order and shipping information, support communications, security logs and service usage information.
When you connect eBay or another supported marketplace, Peggy may receive information made available under the permissions you approve. Peggy does not ask you to provide your marketplace password.
Peggy's beta chat sends the text needed to answer your message, together with limited user-provided personalisation where relevant, to the configured AI provider. Peggy currently uses the OpenAI API for these beta responses. Requests are configured with provider-side response storage disabled where the API supports that control. Peggy does not currently write a long-term copy of beta chat transcripts into Peggy's application database.
If you enable live-interest lookups, Peggy may use public web search to check current information connected to interests or teams you chose to save. You can edit or remove those saved personalisation details and turn the optional morning/live-interest features off. Peggy should not silently infer sensitive personal traits for this purpose.
Provider-side security, abuse-prevention, retention, subprocessor and international-transfer arrangements remain subject to the relevant provider terms and Peggy's production privacy review. The beta setting described above is not a promise that no provider-side processing or legally required retention can occur.
eBay data is used only for eBay-related features you choose to use and only within the permissions and terms applicable to Peggy's eBay integration. Access starts read-only where possible. Peggy does not use eBay Content to train AI or machine-learning models, and Peggy does not use eBay Content as an unauthorised pricing or valuation engine. Any future use beyond these limits will require a valid legal and contractual basis and, where required, eBay permission.
OAuth access and refresh tokens are stored server-side in protected secret storage and are not returned to the browser. Peggy may refresh an expired access token server-side where an authorised refresh token is available. You can disconnect marketplace access, and marketplace providers may also allow you to revoke access from their own account settings.
Where UK GDPR applies, the appropriate legal basis depends on the processing purpose. Peggy expects requested core service processing to rely primarily on contract, security and reliability processing may rely on legitimate interests, optional features may use consent where required, and some processing may be necessary to comply with legal obligations. These bases and the documented balancing/consent requirements remain subject to final production legal review.
We may use service providers for AI responses, hosting, authentication, infrastructure, support and marketplace connectivity. They receive only the information needed for the relevant service and should be subject to appropriate contractual and technical safeguards. Information may also be disclosed where required by law or necessary to protect users, Peggy or others.
We keep personal data only as long as needed for the purpose for which it was collected, including account operation, security, dispute handling and legal obligations. Beta chat is not currently stored as a persistent Peggy application transcript. OAuth credentials are removed or invalidated when a connection is revoked or no longer required, subject to technical, contractual and legal retention requirements.
Depending on applicable law, you may have rights to access, correct, delete, restrict or object to processing, request portability, and withdraw consent where consent is the legal basis. You may also complain to the UK Information Commissioner's Office.
Peggy uses technical and organisational safeguards including access controls, encrypted transport, restricted database access, audit logging and server-side secret storage. No online service can guarantee absolute security.
Where providers process personal data outside the UK, appropriate transfer safeguards must be used where required by data-protection law. Peggy's provider and subprocessor transfer review must be completed before public production launch.
Peggy is not intended for children to connect marketplace seller accounts independently where the marketplace or applicable law requires an adult account holder.
We may update this policy as Peggy develops. The current version and update date will be published on this page.
Privacy questions and rights requests can be submitted through Peggy's support/contact channel. A dedicated privacy contact address and controller details will be published before public production launch.