Privacy Policy

Effective Date: January 25, 2025
Last Updated: January 25, 2025

ListTune Inc. (”Company,” “we,” “us,” or “our”) operates the ListTune platform and related services (collectively, the “Service”). This Privacy Policy informs you of our policies regarding the collection, use, and disclosure of personal data when you use our Service and the choices you have associated with that data.

1. Information We Collect

1.1 Information You Provide to Us

We collect information you provide directly to us, including:

• Account Information: Name, email address, password, and account settings
• Profile Information: Company name, business address, phone number, and business type
• Payment Information: Credit card details, billing address, and transaction history (processed securely through Stripe)
• eBay Integration Data: eBay account credentials, OAuth tokens, and seller information
• Communications: Support tickets, feedback, and correspondence with us
• User Content: Any content you submit through the Service

1.2 Information We Collect from eBay

When you connect your eBay account, we collect:

• Listing Data: Item titles, descriptions, prices, categories, and existing item specifics
• Product Information: SKUs, UPCs, brands, and product identifiers
• Seller Metrics: Performance data and account status
• Category Requirements: eBay’s required and recommended item specifics for categories

1.3 Information We Collect Automatically

When you use our Service, we automatically collect:

• Device Information: IP address, browser type, operating system, device identifiers
• Usage Data: Pages visited, features used, timestamps, referring sites
• Performance Data: API calls, processing times, error logs
• Location Information: Approximate location based on IP address

1.4 Information from Third Parties

We may receive information about you from:

• Authentication Providers: Auth0 and Google for login services
• Payment Processors: Stripe for payment verification
• Analytics Services: Google Analytics for usage insights
• Marketing Partners: For lead generation and referrals

2. How We Use Your Information

2.1 Service Provision and Improvement

We use your information to:

• Provide, maintain, and improve our AI-powered listing optimization services
• Process and enrich your eBay listings with accurate item specifics
• Cache your listing data for up to 30 days to support revert and audit operations
• Improve Service quality using aggregated, anonymized telemetry only — latency, error rates, category distributions, and feature-usage counts
• Develop new features and functionalities
• Monitor and analyze usage patterns and trends
• Personalize your experience based on your preferences

We do not use your listing content, descriptions, photos, or sales data to train our own machine-learning models or any third-party models. AI calls go to OpenAI (see Section 4) under their no-training enterprise privacy terms.

2.2 Account Management and Support

We use your information to:

• Create and manage your account
• Process payments and manage subscriptions
• Provide customer support and respond to inquiries
• Send service-related notifications and updates
• Enforce our Terms of Service and policies

2.3 Communications and Marketing

With your consent, we may use your information to:

• Send promotional emails about new features and services
• Share tips, best practices, and educational content
• Invite you to webinars, events, or surveys
• Provide personalized recommendations

2.4 Legal and Security Purposes

We use your information to:

• Comply with legal obligations and respond to legal requests
• Protect against fraud, abuse, and unauthorized access
• Investigate and address security incidents
• Enforce our agreements and protect our rights
• Protect the safety of our users and the public

3. Legal Basis for Processing (GDPR)

If you are in the European Economic Area (EEA), we process your personal data based on:

• Contract Performance: To provide services you’ve requested
• Legitimate Interests: To improve our services, ensure security, and conduct business operations
• Legal Obligations: To comply with applicable laws and regulations
• Consent: For marketing communications and certain data processing activities
• Vital Interests: To protect your vital interests or those of another person

4. Information Sharing and Disclosure

4.1 Service Providers

We share information with trusted service providers who assist us in operating our business:

• Cloud Infrastructure: Amazon Web Services (AWS) for hosting
• Payment Processing: Stripe for secure payment handling
• Authentication: Auth0 for identity management
• Analytics: Google Analytics for usage insights
• Customer Support: Helpdesk and communication tools
• AI Services: OpenAI for natural language processing

4.2 eBay Integration

We share data with eBay through their official APIs to:
• Read your listing information
• Update item specifics and optimize listings
• Verify account status and permissions
• Ensure compliance with eBay policies

4.3 Business Transfers

In the event of a merger, acquisition, bankruptcy, or sale of assets, your information may be transferred to the successor entity. We will notify you of such changes and any choices you may have.

4.4 Legal Disclosure

We may disclose your information when required to:

• Comply with legal obligations, subpoenas, or court orders
• Respond to government or regulatory requests
• Protect our rights, property, or safety
• Prevent fraud or illegal activities
• Enforce our Terms of Service

4.5 Aggregated and Anonymized Data

We may share aggregated or anonymized information that cannot identify you for research, marketing, or other business purposes.

5. Data Security

5.1 Security Measures

We implement comprehensive security measures to protect your information:

• Encryption: TLS/SSL encryption for data in transit and AES-256 encryption for data at rest
• Access Controls: Role-based access controls and multi-factor authentication
• Infrastructure Security: Firewalls, intrusion detection, and DDoS protection
• Regular Audits: Security assessments and vulnerability testing
• Employee Training: Regular security awareness training
• Incident Response: Established procedures for security incidents

5.2 Data Breach Response

In the event of a data breach that may compromise your personal information:
• We will notify affected users within 72 hours of discovery
• We will provide details about the breach and potential impact
• We will offer guidance on protective measures you can take
• We will cooperate with relevant authorities as required

6. Data Retention

6.1 Retention Periods

We retain your information for different periods based on the type of data:

• Account Information: For the duration of your account plus 30 days after closure
• Transaction Records: 7 years for tax and accounting purposes
• eBay Listing Data: Processed in real-time and not stored beyond necessary cache periods
• Usage Analytics: 2 years in identifiable form, then anonymized
• Marketing Data: Until you opt-out or 3 years of inactivity
• Legal Records: As required by applicable laws or legal proceedings

6.2 Deletion Procedures

When retention periods expire or upon request, we securely delete or anonymize your data using industry-standard methods. Some information may be retained in backup systems for up to 90 days.

7. Your Rights and Choices

7.1 Access and Portability

You have the right to:

• Request access to your personal information
• Receive a copy of your data in a structured, machine-readable format
• Transfer your data to another service provider

7.2 Correction and Deletion

You have the right to:

• Correct inaccurate or incomplete information
• Request deletion of your personal information
• Restrict processing of your data in certain circumstances

7.3 Consent and Objection

You have the right to:

• Withdraw consent for processing based on consent
• Object to processing based on legitimate interests
• Opt-out of marketing communications at any time
• Object to automated decision-making and profiling

7.4 How to Exercise Your Rights

To exercise any of these rights, please contact us at support@listtune.com. We will respond to your request within 30 days. We may need to verify your identity before processing your request.

8. Cookies and Tracking Technologies

8.1 Types of Cookies We Use

We use the following types of cookies:

• Essential Cookies: Required for authentication and core functionality
• Performance Cookies: Help us understand how you use our Service
• Functionality Cookies: Remember your preferences and settings
• Analytics Cookies: Collect usage data for service improvement
• Marketing Cookies: Used for targeted advertising (with consent)

8.2 Managing Cookies

You can control cookies through your browser settings. Note that disabling certain cookies may limit your ability to use some features of our Service. For more information, see our Cookie Policy.

9. International Data Transfers

9.1 Cross-Border Transfers

Your information may be transferred to and processed in countries other than your country of residence, including the United States. These countries may have different data protection laws than your country.

9.2 Transfer Safeguards

We ensure appropriate safeguards for international transfers through:
• Standard contractual clauses approved by regulatory authorities
• Data processing agreements with our service providers
• Compliance with applicable data transfer frameworks
• Technical and organizational security measures

10. California Privacy Rights (CCPA)

10.1 Rights for California Residents

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to Know: Request information about data collection and sharing practices
• Right to Delete: Request deletion of your personal information
• Right to Opt-Out: Opt-out of the sale of personal information (we do not sell data)
• Right to Non-Discrimination: Not be discriminated against for exercising privacy rights

10.2 Categories of Information

We collect the following categories of personal information:

• Identifiers (name, email, IP address)
• Commercial information (transaction history, subscription details)
• Internet activity (usage data, interactions)
• Professional information (business details)
• Inferences (preferences, characteristics)

10.3 Do Not Sell My Personal Information

We do not sell, rent, or trade your personal information to third parties. We do not share personal information for cross-context behavioral advertising.

11. Children’s Privacy

Our Service is not directed to individuals under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal information from a child under 16, we will take steps to delete such information. If you believe we have collected information from a child under 16, please contact us immediately.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. When we make material changes:
• We will update the “Last Updated” date at the top
• We will notify you via email or prominent notice within the Service
• We will provide 30 days notice before changes take effect
• Your continued use after changes indicates acceptance

13. Contact Information

13.1 Data Controller

ListTune Inc. is the data controller responsible for your personal information. Our contact information:

13.2 EU/UK Representative

For individuals in the European Union or United Kingdom, please contact our privacy team:

13.3 Data Protection Officer

You may contact our Data Protection Officer at: support@listtune.com