Privacy Policy
Effective July 6, 2026
1. What we collect
| eBay identity | Your eBay username and the OAuth tokens you grant us. Tokens are stored encrypted at rest and are only used to act on your explicit requests. |
| Your content | The photos you upload or capture and the listing drafts built from them. |
| Usage | Counts of what you do in the app (listings drafted, published), used for your plan's quota and to improve the product. |
| Billing | Handled entirely by Stripe. We store your Stripe customer id and subscription status. We never see or store card numbers. |
| Technical | Standard server logs (IP address, request timing) kept briefly for security and debugging, and basic product analytics. |
2. What we do not do
- We do not sell or rent your data to anyone.
- We do not run ads or share data with ad networks.
- We do not use your photos or listings to train AI models.
- We do not touch your eBay account except when you press a button that says so.
3. AI processing
To draft a listing, your photos and notes are sent to AI model providers (Anthropic models, routed through OpenRouter, or a provider you configure with your own key). These requests are processed under API terms that do not permit training on your data. Pricing lookups query market-data sources with your item's title or barcode, never your identity.
4. Who else touches data
Only the services needed to run the product: eBay (publishing your listings), Stripe (payments), AI model providers (drafting), our analytics (product usage), and our hosting provider in the EU. Each receives only what its job requires.
5. Retention and deletion
- Photos and drafts: kept until you delete them in the app, then removed immediately.
- eBay tokens: deleted when you disconnect or when your account is deleted. You can also revoke them on eBay's side at any time, which makes them useless instantly.
- Account deletion: email us and we delete your account, content, and tokens. Billing records are retained as required for tax and accounting law.
6. Security
Everything runs over HTTPS. eBay tokens are encrypted at rest. Access to production systems is limited to the operator. No system is perfect; if a breach affects your data we will tell you promptly and plainly.
7. Your rights
Wherever you live, we honor the useful set: ask for a copy of your data, correct it, delete it, or export your listings. One email does it.
8. Age
ListLess is for sellers 18 and older (eBay requires the same).
9. Changes
If this policy changes materially we will post the update here with a new effective date, and note it in the app.