What we hold, and what we hand to whom
Connecting a marketplace means giving software access to your storefront. Wanting that written down before you do it is reasonable, so here is what the access covers and where the data goes.
PrivacyNonchaloir (Repose)
1911
John Singer Sargent
Getting into the account
Authentication runs on Clerk. Worldwatch never stores your password.
- Two-factor authentication
- Available on every account, with backup codes you can regenerate. Passkeys are supported as an alternative to a password.
- Session control
- Active sessions are listed in your security settings and can be revoked individually, which is what you want after a laptop leaves the building.
- Re-verification
- Changing a password or removing a factor asks you to prove identity again, even inside an active session.
- Permissions
- From the Pro plan up, users hold roles rather than one shared login, so staff access does not have to include cost prices.
What a channel connection can reach
Each integration asks for the narrowest access that lets it do the job, and the scope is visible before you approve it.
- Shopify
- Six permissions: read and write on products, orders and inventory. Customer records and payment data are not requested and are not read.
- eBay
- Authorisation happens on eBay's own consent screen. Worldwatch receives a token, never your eBay credentials.
- WooCommerce
- A REST API key you generate in your own admin and can delete at any moment, which cuts access immediately.
- Feed marketplaces
- Wristler and Bezel read a hosted feed using an access token that is hashed on arrival. The plaintext is shown once and is not recoverable, including by us.
- Disconnecting
- Revoking a connection stops the access at once. You choose whether your listings on that platform are set back to draft or deleted.
Who else is involved
The services Worldwatch depends on to run. The formal terms are in the privacy policy.
- Clerk
- Authentication, sessions and multi-factor enrolment.
- Stripe
- Subscription payments. Card details are entered on Stripe's own checkout and are never seen by Worldwatch.
- Vercel
- Application hosting and delivery, plus aggregate page performance measurement.
- Sentry
- Error and performance monitoring, so a failure is diagnosed rather than guessed at.
- imgix
- Image storage and delivery for watch photographs.
- Mapbox
- Address lookup when you type an address into a form.
- Google Cloud Translation
- Translating listing copy when you ask for it.
- Pipedrive
- Sales enquiries, including anything sent through the contact form on this site.
Who your data belongs to, and how you get it back
- It stays yours
- Inventory, contacts, orders and photographs belong to your business. Worldwatch does not sell them and does not surface one dealer's cost prices to another.
- Getting it out
- The accountant export produces your full ledger as CSV or Excel, with acquisition, sale, VAT treatment and margin per line, at any time and without asking us.
- What we cannot claim
- Worldwatch does not currently hold a SOC 2 or ISO 27001 certification. If your procurement process requires one, tell us and we will be straight about the timeline.
Put your stock to work
Import what you already hold, connect a channel, and see what moves. The free plan needs no card, and selling on the Worldwatch marketplace costs no commission.
Questions first? Ask us and we will walk through it with your own stock.