Privacy Policy

Effective Date: January 25, 2025
Last Updated: July 10, 2026

ListTune Inc. (”Company,” “we,” “us,” or “our”) operates the ListTune platform and related services (collectively, the “Service”). This Privacy Policy informs you of our policies regarding the collection, use, and disclosure of personal data when you use our Service and the choices you have associated with that data.

1. Information We Collect

1.1 Information You Provide to Us

We collect information you provide directly to us, including:

• Account Information: Name, email address, password, and account settings
• Profile Information: Company name, business address, phone number, and business type
• Payment Information: Stripe customer, subscription, invoice, and transaction identifiers and related billing records. Stripe handles card details; ListTune does not store the full card number
• eBay Integration Data: OAuth tokens, eBay account identifiers, and seller information needed for the connected workflow. We do not collect the seller's eBay password
• Communications: Support tickets, feedback, and correspondence with us
• User Content: Any content you submit through the Service

1.2 Information We Collect from eBay

When you connect your eBay account, we collect:

• Listing Data: Item titles, descriptions, prices, categories, and existing item specifics
• Product Information: SKUs, UPCs, brands, and product identifiers
• Seller Metrics: Performance data and account status
• Category Requirements: eBay’s required and recommended item specifics for categories

1.3 Information We Collect Automatically

When you use our Service, we automatically collect:

• Device Information: IP address, browser type, operating system, device identifiers
• Usage Data: Pages visited, features used, timestamps, referring sites
• Performance and Diagnostic Data: API calls, processing times, error logs, stack traces, route and URL context, browser and device data, referrers, user feedback, and replay or breadcrumb context used to diagnose product issues
• Location Information: Approximate location based on IP address

1.4 Information from Third Parties

We may receive information about you from:

• Authentication Providers: Better Auth and Google for login services
• Payment Processors: Stripe for payment verification
• Analytics Services: Google Analytics and Vercel Analytics for usage insights and aggregate site performance trends. Vercel Analytics is cookieless. Mixpanel and Amplitude are integrated in our code but not enabled in production, so no data goes to them today. We'd update this policy before turning either on
• Error Monitoring: Sentry for error monitoring, diagnostics, session replay, and user feedback
• Marketing Partners: For lead generation and referrals

2. How We Use Your Information

2.1 Service Provision and Improvement

We use your information to:

• Provide, maintain, and improve our AI-powered listing optimization services
• Read supported eBay listing fields and generate reviewable listing suggestions
• Store listing snapshots, staged drafts, generated suggestions, job state, and revision history as needed for syncing, review, publishing, recovery, and account audit features
• Improve Service quality using aggregated, anonymized telemetry only — latency, error rates, category distributions, and feature-usage counts
• Develop new features and functionalities
• Monitor and analyze usage patterns and trends
• Personalize your experience based on your preferences

We do not use your listing content, descriptions, photos, or sales data to train our own machine-learning models or any third-party models. AI calls go to OpenAI (see Section 4) under their no-training enterprise privacy terms.

2.2 Account Management and Support

We use your information to:

• Create and manage your account
• Process payments and manage subscriptions
• Provide customer support and respond to inquiries
• Send service-related notifications and updates
• Enforce our Terms of Service and policies

2.3 Communications and Marketing

With your consent, we may use your information to:

• Send promotional emails about new features and services
• Share tips, best practices, and educational content
• Invite you to webinars, events, or surveys
• Provide personalized recommendations

2.4 Legal and Security Purposes

We use your information to:

• Comply with legal obligations and respond to legal requests
• Protect against fraud, abuse, and unauthorized access
• Investigate and address security incidents
• Enforce our agreements and protect our rights
• Protect the safety of our users and the public

3. Legal Basis for Processing (GDPR)

If you are in the European Economic Area (EEA), we process your personal data based on:

• Contract Performance: To provide services you’ve requested
• Legitimate Interests: To improve our services, ensure security, and conduct business operations
• Legal Obligations: To comply with applicable laws and regulations
• Consent: For marketing communications and certain data processing activities
• Vital Interests: To protect your vital interests or those of another person

4. Information Sharing and Disclosure

4.1 Service Providers

We share information with trusted service providers who assist us in operating our business:

• Cloud Infrastructure: Vercel for hosting and Neon for our Postgres database
• Payment Processing: Stripe for secure payment handling
• Authentication: Better Auth and Google for identity management
• Analytics: Google Analytics and Vercel Analytics for usage insights, page views, referrers, device/browser information, route-level performance, and traffic patterns. Vercel Analytics is cookieless. Mixpanel and Amplitude exist in our code but are not enabled in production and receive no data today
• Error Monitoring and Diagnostics: Sentry for error reports, stack traces, route and URL context, browser and device information, user feedback, replay context, and user identifiers where available
• Customer Support: Helpdesk and communication tools
• AI Services: OpenAI for natural language processing

4.2 eBay Integration

We share data with eBay through their official APIs to:
• Read your listing information
• Update item specifics and optimize listings
• Verify account status and permissions
• Ensure compliance with eBay policies

4.3 Business Transfers

In the event of a merger, acquisition, bankruptcy, or sale of assets, your information may be transferred to the successor entity. We will notify you of such changes and any choices you may have.

4.4 Legal Disclosure

We may disclose your information when required to:

• Comply with legal obligations, subpoenas, or court orders
• Respond to government or regulatory requests
• Protect our rights, property, or safety
• Prevent fraud or illegal activities
• Enforce our Terms of Service

4.5 Aggregated and Anonymized Data

We may share aggregated or anonymized information that cannot identify you for research, marketing, or other business purposes.

5. Data Security

5.1 Security Measures

We use technical and operational safeguards appropriate to the service, including:

• Encrypted transport: HTTPS/TLS for network connections
• eBay authentication: Official OAuth authorization instead of collecting your eBay password
• Access controls: Authenticated, account-scoped access to product data and administrative functions
• Operational safeguards: Monitoring, request validation, and rate limiting for supported application routes
• Service providers: Infrastructure and data processors with their own security controls, as listed in our Data Processing Addendum

5.2 Data Breach Response

If a data breach affects personal information, we will investigate and provide notices when required by applicable law. A notice may include:
• The information and systems known to be affected
• The potential impact known at the time
• Protective measures that may be appropriate
• Contact or regulatory information required for the incident

6. Data Retention

6.1 Retention Periods

We retain your information for different periods based on the type of data:

• Account Information: While the account is active and afterward only as needed for deletion processing, security, fraud prevention, legal obligations, dispute handling, and backup lifecycle
• Transaction Records: As needed for billing, accounting, tax, chargeback, dispute, and other legal obligations
• eBay Listing Data: Stored while needed for connected-account sync, listing snapshots, staged drafts, generated suggestions, publishing jobs, history, recovery, and account features. Disconnecting eBay stops new access but does not by itself guarantee immediate deletion of existing product records
• Usage and Diagnostic Data: For the period needed to operate, secure, debug, measure, and improve the Service, subject to provider settings and legal obligations
• Marketing Data: Until you opt out or the data is no longer needed for the disclosed purpose, subject to suppression records needed to honor the opt-out
• Legal Records: As required by applicable laws or legal proceedings

6.2 Deletion Procedures

When the applicable retention purpose ends or a valid deletion request applies, we delete or anonymize data from active systems as the product supports. Deletion can be delayed or limited by legal obligations, fraud and security needs, disputes, suppression records, and backup lifecycles. Contact us if you need the scope and status of a deletion request confirmed.

7. Your Rights and Choices

7.1 Access and Portability

You have the right to:

• Request access to your personal information
• Receive a copy of your data in a structured, machine-readable format
• Transfer your data to another service provider

7.2 Correction and Deletion

You have the right to:

• Correct inaccurate or incomplete information
• Request deletion of your personal information
• Restrict processing of your data in certain circumstances

7.3 Consent and Objection

You have the right to:

• Withdraw consent for processing based on consent
• Object to processing based on legitimate interests
• Opt-out of marketing communications at any time
• Object to automated decision-making and profiling

7.4 How to Exercise Your Rights

To exercise any of these rights, please contact us at support@listtune.com. We will respond to your request within 30 days. We may need to verify your identity before processing your request.

8. Cookies and Tracking Technologies

8.1 Types of Cookies We Use

We use the following types of cookies:

• Essential Cookies: Required for sign-in, the eBay connection, and abuse prevention (better-auth.session_token, lt_persistent_session, anon_fp, and the short-lived eBay OAuth cookies)
• Functionality Cookies: Remember your preferences and settings
• Analytics Cookies: Google Analytics (_ga and _ga_*) plus our own first-party analytics cookies (lt_anonymous_id, lt_session_id, lt_first_touch)
• Advertising Cookies: None. We don't set advertising or retargeting cookies

8.2 Managing Cookies

You can control cookies through your browser settings. Note that disabling certain cookies may limit your ability to use some features of our Service. For more information, see our Cookie Policy.

9. International Data Transfers

9.1 Cross-Border Transfers

Your information may be transferred to and processed in countries other than your country of residence, including the United States. These countries may have different data protection laws than your country.

9.2 Transfer Safeguards

We ensure appropriate safeguards for international transfers through:
• Standard contractual clauses approved by regulatory authorities
• Data processing agreements with our service providers
• Compliance with applicable data transfer frameworks
• Technical and organizational security measures

10. California Privacy Rights (CCPA)

10.1 Rights for California Residents

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to Know: Request information about data collection and sharing practices
• Right to Delete: Request deletion of your personal information
• Right to Opt-Out: Opt-out of the sale of personal information (we do not sell data)
• Right to Non-Discrimination: Not be discriminated against for exercising privacy rights

10.2 Categories of Information

We collect the following categories of personal information:

• Identifiers (name, email, IP address)
• Commercial information (transaction history, subscription details)
• Internet activity (usage data, interactions)
• Professional information (business details)
• Inferences (preferences, characteristics)

10.3 Do Not Sell My Personal Information

We do not sell, rent, or trade your personal information to third parties. We do not share personal information for cross-context behavioral advertising.

11. Children’s Privacy

Our Service is not directed to individuals under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal information from a child under 16, we will take steps to delete such information. If you believe we have collected information from a child under 16, please contact us immediately.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. When we make material changes:
• We will update the “Last Updated” date at the top
• We will notify you via email or prominent notice within the Service
• We will provide 30 days notice before changes take effect
• Your continued use after changes indicates acceptance

13. Contact Information

13.1 Data Controller

ListTune Inc. is the data controller responsible for your personal information. Our contact information:

13.2 EU/UK Representative

For individuals in the European Union or United Kingdom, please contact our privacy team:

13.3 Data Protection Officer

You may contact our Data Protection Officer at: support@listtune.com