Privacy Policy
What ListedRight, Inc. collects, how we use it, who we share it with, and what choices you have.
01Who we are and how to contact us
Controller. ListedRight, Inc., a Delaware corporation.
Privacy contact. Get in contact using the form at the bottom of this page.
If you have any question about this Policy or want to exercise a privacy right, get in contact using the form at the bottom of this page.
02The information we collect
We collect three categories of information.
Information you give us. When you create an account, subscribe to a plan, or contact us, we collect your name, email address, password (stored hashed, never in plaintext), business name (optional), and any messages you send. When you upload photos for enhancement, we receive the photo files and any captions or instructions you attach to them.
Information we collect automatically. When you use the Service we collect device and usage information such as your IP address, browser type, operating system, referring URL, pages viewed, actions taken, timestamps, and approximate geographic location derived from your IP. We collect this through cookies and similar technologies — see our Cookie Policy.
Information from third parties. When you pay for a subscription, our payment processor Stripe collects your payment card information directly and provides us with a transaction confirmation, the last four digits of your card, card brand, and billing zip code. We never see or store your full card number.
We do not knowingly collect information from anyone under 18. The Service is not directed to children. If you believe a child has provided us with personal information, get in contact using the form at the bottom of this page and we will delete it.
03How we use your information
We use your information to:
- Provide, operate, and maintain the Service, including processing your photos and delivering enhanced output.
- Authenticate you, secure your account, and prevent fraud and abuse.
- Process payments and manage your subscription.
- Communicate with you about your account, transactions, support inquiries, security alerts, and material changes to our policies.
- Send marketing and product communications (you can unsubscribe at any time using the link in any marketing email).
- Improve the Service, including diagnosing problems, analyzing usage patterns, and developing new features.
- Comply with legal obligations and enforce our Terms of Service.
We do not train our AI models on your uploaded photos. Your photos are sent to third-party AI providers only for the limited purpose of generating your output, and we contractually require those providers not to retain or train on your content (see Section 5).
04The legal basis for processing
We process your information because (i) it is necessary to perform the contract we have with you when you use the Service, (ii) it is necessary to comply with a legal obligation, (iii) we have a legitimate business interest such as keeping the Service secure and improving it, or (iv) you have given us consent (for example, opting in to marketing).
05Who we share information with
We share information with the following categories of recipients, and only as described below.
Service providers (subprocessors). Third parties that operate parts of the Service under our instructions. They are bound by contract to use information only to provide their service to us and to protect it. Our current subprocessors include:
- Amazon Web Services (AWS) — cloud hosting, database, and object storage for uploaded and enhanced photos. Region: United States.
- Stripe, Inc. — payment processing and subscription management.
- OpenAI, L.L.C., Anthropic, PBC, and Google LLC — foundation-model APIs used to process photo metadata and instructions and to generate enhanced output. We use these providers’ enterprise or API terms, which prohibit training on input and output by default.
A current list of subprocessors is maintained at listedright.ai/subprocessors and we update it when we add a new one.
Professional advisors. Our lawyers, accountants, auditors, insurers, and similar advisors when reasonably necessary.
Legal and safety. Government authorities, courts, or other third parties when we believe in good faith that disclosure is required by law, necessary to enforce our Terms, or necessary to protect the rights, property, or safety of ListedRight, our users, or the public.
Business transfers. A buyer or successor in connection with a merger, acquisition, financing, reorganization, or sale of assets. We will notify you before your information becomes subject to a different privacy policy.
We do not sell your personal information. We do not share it for cross-context behavioral advertising.
06How long we keep information
We keep different categories of information for different periods.
- Uploaded photos and enhanced output: retained for 30 days from upload, then automatically deleted from our systems.
- Account information: retained for as long as your account is active. We delete account information within 90 days of account closure, except where we are required to retain it longer.
- Billing and tax records: retained for at least seven years to comply with US tax and accounting law.
- Logs and usage data: retained for up to 24 months, in aggregated or pseudonymized form where practical.
- Backups: encrypted backups may persist for up to 90 days after deletion from production systems.
07How we protect information
We use administrative, technical, and physical safeguards designed to protect your information. These include TLS encryption for data in transit, AES-256 encryption for data at rest, role-based access controls, audit logging, and least-privilege access for our staff. See the Security & Compliance page for more detail.
No system is perfectly secure. You are responsible for keeping your account credentials confidential and for notifying us immediately if you believe your account has been compromised — get in contact using the form at the bottom of this page.
08Your privacy rights
Depending on where you live, you may have the following rights with respect to your personal information:
- Right to know / access. Request a copy of the personal information we hold about you.
- Right to correct. Ask us to fix inaccurate information.
- Right to delete. Ask us to delete your personal information.
- Right to portability. Receive your information in a portable format.
- Right to opt out of "sales" and "sharing." We do not sell or share for cross-context advertising; this right is effectively built in.
- Right to non-discrimination. We will not deny service, charge different prices, or provide a lower quality of service because you exercised a privacy right.
To exercise any of these rights, get in contact using the form at the bottom of this page from the email address on your account, or use the in-product privacy tools at Settings → Privacy. We will verify your identity and respond within 45 days.
Specific notice for California residents
This Privacy Policy serves as our notice at collection under the California Consumer Privacy Act, as amended by the CPRA. In the past twelve months we have collected the categories of personal information described in Section 2 (identifiers, customer records, commercial information, internet activity, geolocation, audio/visual information in the form of photos, and inferences). We do not knowingly collect or sell the personal information of consumers under 16.
Specific notice for residents of Colorado, Connecticut, Virginia, Utah, Texas, Oregon, Montana, and other states with comprehensive privacy laws
You have the same core rights described above. To exercise them, follow the same instructions: get in contact using the form at the bottom of this page.
09Cookies and tracking
See our separate Cookie Policy for details on what cookies we use and how to manage them.
We respond to "Global Privacy Control" (GPC) signals from your browser as a valid opt-out request where applicable law requires it.
10DMCA and copyright
If you believe content on the Service infringes your copyright, please send a notice that complies with 17 U.S.C. § 512(c)(3) to our designated agent.
We register our designated agent with the US Copyright Office at copyright.gov/dmca-directory/. Counter-notices follow the procedure set out in Section 8 of the Terms of Service.
11International users
The Service is provided from and intended for users in the United States. If you access the Service from outside the United States, you understand that your information will be transferred to, stored, and processed in the United States, which may have different data-protection laws than your country. By using the Service, you consent to that transfer.
12Changes to this Policy
We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or by a prominent notice in the Service before the change takes effect. The "Last updated" date at the top of this page shows when the Policy was last revised. Your continued use of the Service after the effective date means you accept the updated Policy.
Questions or a privacy request?
Access, correction, deletion, portability, "do not sell or share," GPC questions, or anything else covered by this Policy — one form, one queue. We acknowledge within one business day and respond within 45 days.
Privacy Policy
What ListedRight, Inc. collects, how we use it, who we share it with, and what choices you have.
On this page· 12
- 01Who we are and how to contact us
- 02The information we collect
- 03How we use your information
- 04The legal basis for processing
- 05Who we share information with
- 06How long we keep information
- 07How we protect information
- 08Your privacy rights
- 09Cookies and tracking
- 10DMCA and copyright
- 11International users
- 12Changes to this Policy
01Who we are and how to contact us
Controller. ListedRight, Inc., a Delaware corporation.
Privacy contact. Get in contact using the form at the bottom of this page.
If you have any question about this Policy or want to exercise a privacy right, get in contact using the form at the bottom of this page.
02The information we collect
We collect three categories of information.
Information you give us. When you create an account, subscribe to a plan, or contact us, we collect your name, email address, password (stored hashed, never in plaintext), business name (optional), and any messages you send. When you upload photos for enhancement, we receive the photo files and any captions or instructions you attach to them.
Information we collect automatically. When you use the Service we collect device and usage information such as your IP address, browser type, operating system, referring URL, pages viewed, actions taken, timestamps, and approximate geographic location derived from your IP. We collect this through cookies and similar technologies — see our Cookie Policy.
Information from third parties. When you pay for a subscription, our payment processor Stripe collects your payment card information directly and provides us with a transaction confirmation, the last four digits of your card, card brand, and billing zip code. We never see or store your full card number.
We do not knowingly collect information from anyone under 18. The Service is not directed to children. If you believe a child has provided us with personal information, get in contact using the form at the bottom of this page and we will delete it.
03How we use your information
We use your information to:
- Provide, operate, and maintain the Service, including processing your photos and delivering enhanced output.
- Authenticate you, secure your account, and prevent fraud and abuse.
- Process payments and manage your subscription.
- Communicate with you about your account, transactions, support inquiries, security alerts, and material changes to our policies.
- Send marketing and product communications (you can unsubscribe at any time using the link in any marketing email).
- Improve the Service, including diagnosing problems, analyzing usage patterns, and developing new features.
- Comply with legal obligations and enforce our Terms of Service.
We do not train our AI models on your uploaded photos. Your photos are sent to third-party AI providers only for the limited purpose of generating your output, and we contractually require those providers not to retain or train on your content (see Section 5).
04The legal basis for processing
We process your information because (i) it is necessary to perform the contract we have with you when you use the Service, (ii) it is necessary to comply with a legal obligation, (iii) we have a legitimate business interest such as keeping the Service secure and improving it, or (iv) you have given us consent (for example, opting in to marketing).
05Who we share information with
We share information with the following categories of recipients, and only as described below.
Service providers (subprocessors). Third parties that operate parts of the Service under our instructions. They are bound by contract to use information only to provide their service to us and to protect it. Our current subprocessors include:
- Amazon Web Services (AWS) — cloud hosting, database, and object storage for uploaded and enhanced photos. Region: United States.
- Stripe, Inc. — payment processing and subscription management.
- OpenAI, L.L.C., Anthropic, PBC, and Google LLC — foundation-model APIs used to process photo metadata and instructions and to generate enhanced output. We use these providers’ enterprise or API terms, which prohibit training on input and output by default.
A current list of subprocessors is maintained at listedright.ai/subprocessors and we update it when we add a new one.
Professional advisors. Our lawyers, accountants, auditors, insurers, and similar advisors when reasonably necessary.
Legal and safety. Government authorities, courts, or other third parties when we believe in good faith that disclosure is required by law, necessary to enforce our Terms, or necessary to protect the rights, property, or safety of ListedRight, our users, or the public.
Business transfers. A buyer or successor in connection with a merger, acquisition, financing, reorganization, or sale of assets. We will notify you before your information becomes subject to a different privacy policy.
We do not sell your personal information. We do not share it for cross-context behavioral advertising.
06How long we keep information
We keep different categories of information for different periods.
- Uploaded photos and enhanced output: retained for 30 days from upload, then automatically deleted from our systems.
- Account information: retained for as long as your account is active. We delete account information within 90 days of account closure, except where we are required to retain it longer.
- Billing and tax records: retained for at least seven years to comply with US tax and accounting law.
- Logs and usage data: retained for up to 24 months, in aggregated or pseudonymized form where practical.
- Backups: encrypted backups may persist for up to 90 days after deletion from production systems.
07How we protect information
We use administrative, technical, and physical safeguards designed to protect your information. These include TLS encryption for data in transit, AES-256 encryption for data at rest, role-based access controls, audit logging, and least-privilege access for our staff. See the Security & Compliance page for more detail.
No system is perfectly secure. You are responsible for keeping your account credentials confidential and for notifying us immediately if you believe your account has been compromised — get in contact using the form at the bottom of this page.
08Your privacy rights
Depending on where you live, you may have the following rights with respect to your personal information:
- Right to know / access. Request a copy of the personal information we hold about you.
- Right to correct. Ask us to fix inaccurate information.
- Right to delete. Ask us to delete your personal information.
- Right to portability. Receive your information in a portable format.
- Right to opt out of "sales" and "sharing." We do not sell or share for cross-context advertising; this right is effectively built in.
- Right to non-discrimination. We will not deny service, charge different prices, or provide a lower quality of service because you exercised a privacy right.
To exercise any of these rights, get in contact using the form at the bottom of this page from the email address on your account, or use the in-product privacy tools at Settings → Privacy. We will verify your identity and respond within 45 days.
Specific notice for California residents
This Privacy Policy serves as our notice at collection under the California Consumer Privacy Act, as amended by the CPRA. In the past twelve months we have collected the categories of personal information described in Section 2 (identifiers, customer records, commercial information, internet activity, geolocation, audio/visual information in the form of photos, and inferences). We do not knowingly collect or sell the personal information of consumers under 16.
Specific notice for residents of Colorado, Connecticut, Virginia, Utah, Texas, Oregon, Montana, and other states with comprehensive privacy laws
You have the same core rights described above. To exercise them, follow the same instructions: get in contact using the form at the bottom of this page.
09Cookies and tracking
See our separate Cookie Policy for details on what cookies we use and how to manage them.
We respond to "Global Privacy Control" (GPC) signals from your browser as a valid opt-out request where applicable law requires it.
10DMCA and copyright
If you believe content on the Service infringes your copyright, please send a notice that complies with 17 U.S.C. § 512(c)(3) to our designated agent.
We register our designated agent with the US Copyright Office at copyright.gov/dmca-directory/. Counter-notices follow the procedure set out in Section 8 of the Terms of Service.
11International users
The Service is provided from and intended for users in the United States. If you access the Service from outside the United States, you understand that your information will be transferred to, stored, and processed in the United States, which may have different data-protection laws than your country. By using the Service, you consent to that transfer.
12Changes to this Policy
We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or by a prominent notice in the Service before the change takes effect. The "Last updated" date at the top of this page shows when the Policy was last revised. Your continued use of the Service after the effective date means you accept the updated Policy.
Questions or a privacy request?
Access, correction, deletion, portability, "do not sell or share," GPC questions, or anything else covered by this Policy — one form, one queue. We acknowledge within one business day and respond within 45 days.