We store your login, plan state, targeting, seller lists, entries, wins and the account identifiers the agent reports.
Third-party service keys are stored encrypted and delivered only to your own authenticated agent. They are never shown in logs or the public API.
Whatnot account tokens stay on your PC in the agent's token store unless you choose to sync credentials through the Portal.