LLISTR

Privacy Policy

Effective October 13, 2026 · Version 2026-10-13

1. Who we are and what this covers

This Privacy Policy explains how LISTR ("LISTR," "we," "us") collects, uses, shares, and protects information in connection with the LISTR website, web application, and related services (the "Service"). It is part of our Terms of Service. Capitalized terms not defined here have the meanings given in the Terms.

LISTR is a tool for sellers. Where we process information about your buyers or storefront visitors, we do so on your behalf (see Section 10).

2. Information we collect

Information you give us

• Account information: username, email address, and password (stored only as a one-way hash), plus your account settings.
• Photos you upload: product photos you upload from your computer or phone, including any information in them (such as image metadata or anything visible in the picture).
• Product and listing data: product names, descriptions, specifications, condition, categories, tags, SKUs, prices, your cost for items, quantities, and listing content you create or edit.
• Credentials you choose to provide: for example an AI provider API key, if you enter one.
• Communications: messages you send us, such as support requests and legal notices.
• Acceptance records: the version of these policies you accepted, when, and the IP address you accepted from.

Information from platforms you connect

• Connection data: access tokens and account or store identifiers for platforms such as eBay and Shopify.
• Listings and inventory: listing, offer, product, variant, and inventory identifiers, quantities, and listing status.
• Sales: order and line-item identifiers, which item sold, quantity, sale price, currency, and date. Order notifications from these platforms can contain buyer details; we use them only to process the sale and do not store your buyers' names, addresses, or payment information in our sales records.

Information collected automatically

• Activity in the Service: records of photos uploaded, products identified, items saved, listings published, sales synchronized, and the amount of AI processing your account uses.
• Technical data: IP address, browser and device type, and request logs created by our servers.
• Cookies and local storage: we use a cookie that keeps you signed in and your browser's local storage to remember interface preferences. These are necessary for the Service to work. We do not use advertising or cross-site tracking cookies.

3. How we use information

• To provide the Service: identify products from photos, generate listing content, publish and manage listings on platforms you direct, sync inventory when items sell, and keep your product library.
• To operate and support the Service: authenticate you, troubleshoot, answer requests, and send service messages such as email verification and account notices.
• Analytics and improvement: understand how the Service is used, for example uploads, sell-through, prices, categories, and platforms, and develop and improve features. Authorized LISTR personnel may view your uploaded photos, product data, listings, and sales records for these purposes and the ones above.
• Billing: measure usage, including AI usage per account, and charge fees where applicable.
• Safety, security, and legal compliance: prevent fraud and abuse, enforce our Terms, protect our rights and the rights of others, and comply with law and legal process.
• Aggregated and de-identified data: create statistics that do not identify you, which we may use and share for any lawful purpose. We will not attempt to re-identify de-identified data except to test our de-identification.

We do not use your information to train generative AI models of our own. We do not make decisions with legal or similarly significant effects about you based solely on automated processing.

4. AI processing

To identify products and write listing content, we send your product photos and related product information to our AI provider, Anthropic, which processes it on our behalf to return results to us. AI results can be wrong; see Section 4 of our Terms.

5. How we share information

We share information only as follows:

• Service providers who process it for us under contract, including our hosting provider (DigitalOcean), our AI provider (Anthropic), and our email delivery provider (Resend).
• Platforms you direct us to use: when you publish or update a listing or sync inventory, we send the relevant listing content, photos, prices, and quantities to that platform (for example eBay or Shopify), whose own privacy policy then applies.
• Reference lookups: when you use trading-card features, we send card names or search terms (not your personal information) to public card databases such as the Pokémon TCG API and Scryfall.
• Legal and safety: when we believe in good faith it is necessary to comply with law, legal process, or a government request; to enforce our Terms; or to protect the rights, property, or safety of LISTR, our users, or others.
• Business transfers: in connection with a merger, acquisition, financing, reorganization, sale of assets, or transfer of the Service to the company that operates it, subject to this Policy.
• With your consent or at your direction.

We do not sell personal information, and we do not share it for cross-context behavioral advertising.

6. How long we keep information

We keep information for as long as your account is active and as needed to provide the Service. Uploaded photos are retained, including a reduced-size copy kept for support and analytics. After your account is closed, we delete or de-identify your information within a reasonable period, except where we need to keep it to comply with legal obligations, resolve disputes, enforce our agreements, or for security and fraud prevention, and except for copies in backups, which are overwritten in the ordinary course. Sales and billing records may be kept as long as needed for tax and accounting purposes. Aggregated or de-identified data may be kept indefinitely.

7. Security

We use reasonable administrative, technical, and physical safeguards designed to protect information, such as password hashing, encrypted connections, and restricting administrative access. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your password confidential. If we learn of a security breach affecting your personal information, we will notify you as required by law.

8. Your choices and rights

• Account information: you can update your email and password in Account Settings.
• Connected platforms: you can disconnect eBay or Shopify at any time in the app, and revoke our access from those platforms' own settings.
• Access, correction, deletion, and copies: email jtconsulting581@gmail.com to request access to, correction of, a copy of, or deletion of your personal information. We will verify your request, for example by confirming it from the email address on your account, and respond within the time required by law. Deleting your information may require closing your account.
• Emails: service and account emails are part of the Service and cannot be opted out of while you have an account.
• No discrimination: we will not discriminate against you for exercising your privacy rights.

9. California privacy rights

If you are a California resident, the California Consumer Privacy Act, as amended ("CCPA"), may give you the following rights, subject to exceptions: to know what personal information we collect, use, and disclose; to access and receive a copy of it; to correct inaccurate personal information; to delete it; to opt out of its "sale" or "sharing" (we do neither); and to limit the use of sensitive personal information (we use it only as permitted by law, for example account login credentials to provide the Service). You may use an authorized agent to make a request; we may require proof of the agent's authority and verify your identity directly. To make a request, email jtconsulting581@gmail.com.

In the past 12 months we have collected the following categories of personal information, from the sources and for the business purposes described in Sections 2 and 3, and disclosed them for business purposes to the categories of recipients described in Section 5:

Shine the Light: California Civil Code Section 1798.83 lets California residents ask about disclosures of personal information to third parties for their direct marketing purposes. We do not make such disclosures.

Do Not Track: because we do not track you across third-party websites, the Service does not change its behavior in response to Do Not Track signals.

10. Information about your buyers and visitors

If you use features that process information about your buyers or storefront visitors, such as order details from your stores or the storefront contact-form feature (which collects the name, email address, phone number, and message a visitor submits), we process that information on your behalf as your service provider, only to provide the Service to you. You are responsible for providing any notices and obtaining any consents your buyers and visitors are owed. Requests from them about their information should be directed to you; we will assist you as required by law.

11. Users outside the United States

The Service is operated from the United States and your information is stored and processed there and wherever our service providers operate. Those countries may have data protection laws that differ from yours. By using the Service, you understand that your information will be transferred to and processed in the United States.

12. Children

The Service is not intended for anyone under 18, and we do not knowingly collect personal information from children. If you believe a child has given us personal information, contact us and we will delete it.

13. Changes to this Policy

We may update this Policy from time to time. We will post the updated Policy with a new effective date and, for material changes, notify you, for example by email or by asking you to accept the update when you next sign in.

14. Contact

Questions or requests about this Policy or your information: jtconsulting581@gmail.com.