Privacy Policy
Last updated 2026-07-11
Plain-language policy. A fuller legal document is being prepared with counsel — what we collect and how we handle it is accurately described below.
What we collect
- Your email address — only if you create an account (used for magic-link sign-in and account emails).
- The product descriptions you submit — processed to generate your listing; saved to your history only if you have an account.
- Usage counts — to enforce fair-use limits. Anonymous visitors are counted by a salted, non-reversible hash of their IP address — we never store the raw IP.
- Product analytics — via PostHog (EU cloud): pages viewed and product events, used to improve the product.
We never see or store your payment card details — payment runs entirely inside PayPal.
Where your data lives
Application data is stored with Supabase in Frankfurt, Germany (EU). The app is hosted on Railway in Amsterdam, Netherlands (EU). Analytics run on PostHog's EU cloud. Sign-in emails are sent via Resend from an EU region (Ireland).
Who processes it
| Provider | Purpose | What they receive |
|---|---|---|
| Anthropic (Claude API, US) | Generates your title, tags, and description | The product text you type. Under Anthropic's commercial API terms, API inputs are not used to train their models by default. |
| PayPal | Subscription billing | Your PayPal account interaction — we receive only subscription status events, never card numbers. |
| Supabase (EU) | Database | Account email, saved history, usage counts. |
| Resend (EU sending region) | Sign-in and account emails | Your email address. |
| PostHog (EU) | Product analytics | Product usage events. |
| Railway (EU) | Hosting | Requests in transit and normal server logs. |
How long we keep it
Account data and saved history: for the life of your account. Anonymous usage hashes: rolling short-term windows used only for rate limiting. Billing event logs: kept as an audit trail for billing questions. Delete your account at any time — see below — and we remove your account record and generation history.
Your rights
You can request access to, correction of, or deletion of your personal data. The fastest path for deletion is the data-deletion form — we confirm by email before completing it. For anything else: hello@listingloom.app. If you're in the EU/EEA or UK, these rights come from the GDPR; we respond within the statutory timeframes.
Cookies
See the Cookie Notice for the small set of cookies and local storage we use.