Privacy Policy

ListOptimise ("we," "our," or "us") operates the website at listoptimise.online — an AI-powered tool that helps Etsy and Shopify sellers generate product titles, descriptions, tags, alt text, social content, and listing audits.

This Privacy Policy explains what personal information we collect, how we use it, and what your rights are. If you have questions, contact us at hello@listoptimise.online.

Account Information

When you create an account, we collect:

• Full name — entered during sign-up
• Email address — used to identify your account and for transactional communications (e.g., password reset)
• Password — hashed and stored securely by Supabase; we never see your plaintext password

Content You Submit

When you use our generation tools, you submit content to receive AI-generated output. This includes:

• Product names, categories, and descriptions (used in the Listing Generator, Alt Text Generator, and Bulk Generator)
• Existing listing text you paste for auditing (used in the Listing Checker)
• Customer reviews you paste for analysis (used in the Reviews Analyzer)
• Shop and content preferences (used in the Social & Shop Content tool)
• A product type you want keywords for (used in Keyword Research)
• A snapshot of your shop — name, listing titles, tags, price range, shipping terms (used in the Shop Audit)
• Your shop name and the search queries you want to track (used in the AI Visibility Checker)

We store both your inputs and the AI-generated outputs in your account history so you can access them later.

Assistant Conversations

If you use the on-site assistant, the messages you type are sent to our AI provider to generate a reply. Assistant conversations are not saved to your account and are not stored in our database — they exist only for the duration of the page session.

Usage Data

We track how many AI generations you have used in the current billing month, and how many times you have used the daily-limited analysis tools today, to enforce plan limits (Free plan: 10 generations/month). We do not track your browsing behavior, pages visited, or time on site, and we do not use analytics or advertising trackers.

IP Address

When you send a message to the on-site assistant, we read your IP address from the request in order to rate-limit that endpoint and prevent abuse. It is held only in server memory for a short rolling window (currently a few minutes), is never written to our database, is not linked to your account, and is not used to profile or track you.

Session Data

We use authentication cookies (set by Supabase) to keep you signed in across visits. These are strictly functional — they contain only your encrypted session token and no tracking information.

We do not use your data for advertising, sell it to third parties, or use it to train AI models that we own.

We send data to the following external services to operate the product. Each service receives only what is necessary for its function.

All data is stored in Supabase's hosted PostgreSQL database, which is encrypted at rest and in transit (TLS/SSL). Our application is hosted on Vercel.

We enforce Row Level Security (RLS) on all database tables, meaning your account data is isolated — only you can read or modify your own listings, checks, and analyses.

API keys for Groq, Anthropic, and Supabase are stored as server-side environment variables and are never exposed to your browser.

Retention: Your data is stored for as long as your account exists. When you delete a listing from your history, it is permanently removed. If you request full account deletion, all records associated with your account are deleted via cascading database constraints.

We use one type of cookie only: a session cookie set by Supabase's authentication library to keep you signed in. This cookie:

• Contains only an encrypted session token
• Is required for the app to function (it is not optional)
• Is not used for tracking or advertising
• Is deleted when you sign out

We also store one preference in your browser's localStorage: whether you last chose Standard or Faster generation mode, so the dashboard remembers your choice between visits. It contains no personal information, never leaves your browser, and you can clear it at any time through your browser settings.

We use no other localStorage, sessionStorage, or persistent browser storage, and no advertising, analytics, or tracking cookies of any kind.

Regardless of where you live, you have the following rights regarding your data:

• Access: View all your generated content on the History page and your account details on the Settings page.
• Delete: Delete individual listings, listing checks, and review analyses from your history page at any time. Deletion is immediate and permanent.
• Account deletion: Email us at hello@listoptimise.online and we will delete your account and all associated data within 7 business days.
• Data portability: Copy your generated content from the History page at any time.
• Correction: To update your name or email address, contact us at the email above.

If you are in the European Economic Area (EEA) or the UK, you have additional rights under GDPR/UK GDPR, including the right to lodge a complaint with your local supervisory authority.

If you are in California, you have rights under the CCPA. We do not sell personal information.

ListOptimise is not intended for children under the age of 13. We do not knowingly collect personal information from anyone under 13. If you believe a child under 13 has provided us with personal information, please contact us at hello@listoptimise.online and we will delete it promptly.

We may update this Privacy Policy from time to time. If we make a material change, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically. Continued use of the service after a change constitutes acceptance of the updated policy.