Security
Honest about how access works
Only claims that match the running app. Connects to your eBay seller account via official OAuth.
Your NextOwner login
Email and a hashed password on NextOwner. The founder workspace can also sit behind a site password during beta.
eBay OAuth
You sign in on eBay. NextOwner never asks you to type your eBay password into our forms.
Tokens stay on the server
Access and refresh tokens are stored server-side and encrypted with the server token key. They are not exposed to the browser or marketing pages.
API credentials
eBay and OpenAI keys live in server environment variables. They are not shipped to the public website.
Account isolation
Listings, photos and orders are keyed to a business id. Marketing pages do not load your inventory.
What we do not claim
This is not a SOC 2 report or a penetration-test badge. It is a description of the current implementation.