BPX eBay Integration Privacy Policy
Effective date: September 16, 2026
Scope
This policy applies only to the current owner-operated BPX eBay integration. The integration connects one BPX-controlled eBay seller account. It is not a public multi-user account service and does not describe any future consumer BPX platform.
BreakpointX is the product brand. BPX is the application name. No separate legal entity is identified by this policy.
Information processed
When the seller authorizes BPX, the integration processes OAuth authorization information, including access and refresh tokens, so BPX can act within the permissions granted through eBay.
BPX also processes:
- Seller-account configuration and readiness information, including marketplace, privileges, business-policy references, and inventory-location references.
- Listing and inventory information, including card and copy identifiers, title, description, condition, card attributes, price, currency, quantity, images, category, SKU, offer, and listing identifiers.
- Order and transaction information needed to reconcile a sale, including order and line identifiers, listing identity, payment or cancellation state, amount, currency, and relevant timestamps.
- Limited technical request information necessary to operate the OAuth callback and integration infrastructure.
eBay order responses may contain buyer information. The current BPX integration is designed not to retain buyer usernames, names, email addresses, phone numbers, or shipping addresses in its normalized Sale/Order records.
How information is used
BPX uses this information to:
- Connect and verify the owner-operated eBay seller account.
- Check seller-account readiness.
- Prepare and manage eBay listings following explicit owner action.
- Reconcile listing and transaction status.
- Maintain operational history, security, and required eBay compliance handling.
Service providers
BPX uses eBay to provide marketplace authorization, account, listing, inventory, and order services. BPX uses Cloudflare infrastructure to receive the OAuth callback and may use local BPX-controlled storage for integration records.
These providers may process technical request information under their own terms and privacy practices.
Credentials and security
Authorization credentials are restricted to the eBay integration. BPX uses HTTPS for its OAuth callback, limits callback information to a short-lived handoff, and avoids placing token values in normal application output.
No security method can guarantee absolute protection.
Retention
Short-lived OAuth callback artifacts are removed after redemption or expiration.
BPX currently retains listing correlations and normalized transaction-history records without a fixed automatic deletion period. They may remain available for integration operation, transaction history, security, and applicable compliance requirements.
No shorter fixed retention period is promised by this policy.
Account deletion
BPX maintains a separate channel for eBay marketplace account-deletion notifications. Current normalized BPX transaction records are designed not to retain buyer contact or shipping information.
Handling currently requires review of any BPX information associated with a valid notice. Applicable information must be deleted or otherwise handled according to eBay's requirements and any specific lawful retention obligation. This policy does not claim that end-to-end deletion is fully automated.
Analytics and tracking
BPX does not intend to add advertising trackers or analytics to its OAuth callback or privacy-policy routes. Infrastructure providers may independently process ordinary technical request information.
Contact
Privacy questions or applicable data requests may be sent to:
Policy updates
This policy may be updated if the integration's data practices change. The effective date will be changed when an updated policy is actually published.