Privacy Policy
Your privacy matters to us. This policy explains how we handle your data.
Last updated: April 24, 2026
1. Information We Collect
We collect information you provide directly to us, as well as information generated through your use of our services.
Account Information
- Name and email address
- Password (encrypted)
- Profile preferences and settings
- Subscription and billing information
Device Information
- Device type, model, and operating system
- Unique device identifiers
- IP address and general location (city/region)
- App version and crash reports
Content You Provide
- Photos uploaded for editing and listing creation
- Listing content (titles, descriptions, tags)
- Etsy shop connection data via OAuth
- Customer support communications
2. How We Use Your Information
We use the information we collect to provide, maintain, and improve our services:
- Listing Generation: Process your photos and generate AI-powered titles, descriptions, and tags
- Photo Editing: Provide background removal, image enhancement, and editing features
- SEO Optimization: Analyze trends and provide keyword recommendations
- Policy Compliance:Check listings against Etsy's policies before publication
- Analytics: Provide insights into your listing performance and shop metrics
- Account Management: Process payments, manage subscriptions, and send service communications
- Product Improvement: Analyze usage patterns to improve features and user experience
3. Third-Party Services
We work with trusted third-party services to provide our features:
| Service | Purpose |
|---|---|
| OpenAI / Anthropic | AI-powered listing generation and content analysis |
| RevenueCat | Subscription management and payment processing |
| Etsy API | Shop connection, listing sync, and analytics |
| Supabase | Secure data storage and authentication |
| Vercel Analytics | Anonymous usage analytics and performance monitoring |
Each third-party service operates under their own privacy policies. We only share the minimum data necessary for each service to function.
4. Photo Handling
We take special care with your product photos:
- Photos are uploaded securely using encrypted connections (TLS/SSL)
- Processing occurs on secure servers for editing and AI analysis
- Session photos are automatically deleted within 24 hours unless explicitly saved to your account
- Saved photos are stored securely and can be deleted at any time from your account settings
- Photos are never shared with third parties except as necessary for AI processing
- We do not use your photos for AI training without explicit consent
5. Data Retention
We retain your data for as long as your account is active or as needed to provide services:
- Account data: Retained until account deletion
- Listing history: Retained for 2 years after creation
- Analytics data: Aggregated and anonymized after 1 year
- Support tickets: Retained for 3 years
- Billing records: Retained for 7 years as required by law
6. Your Rights
Depending on your location, you may have the following rights regarding your personal data:
GDPR Rights (EU/EEA residents)
- Access: Request a copy of your personal data
- Rectification: Correct inaccurate or incomplete data
- Erasure:Request deletion of your data ("right to be forgotten")
- Portability: Receive your data in a machine-readable format
- Restriction: Limit how we process your data
- Objection: Object to processing based on legitimate interests
CCPA Rights (California residents)
- Right to know what personal information is collected
- Right to delete personal information
- Right to opt-out of the sale of personal information
- Right to non-discrimination for exercising your rights
To exercise any of these rights, please contact us at privacy@listsmarter.app. We will respond within 30 days.
8. Children's Privacy
ListSmarter is not intended for users under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware that we have collected data from a child under 13, we will take steps to delete that information promptly. If you believe we have collected information from a child under 13, please contact us immediately.
9. Security
We implement industry-standard security measures to protect your data:
- All data transmitted using TLS/SSL encryption (HTTPS)
- Passwords hashed using bcrypt
- Regular security audits and penetration testing
- Access controls and authentication for internal systems
- Automated threat detection and monitoring
While we strive to protect your data, no method of transmission or storage is 100% secure. Please use strong passwords and protect your account credentials.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. For significant changes, we will also send an email notification to registered users. We encourage you to review this policy periodically.
11. Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact us: