Privacy Policy

Last updated: 20 June 2026

This Privacy Policy explains how Listing Lab ("we", "us", "our") collects, uses, and protects your information when you use https://listinglab.store and our services (the "Service"). Listing Lab is operated by Sahil Timbole, a sole proprietor based in Pune, Maharashtra, India.

We are committed to data minimisation: we collect only what is necessary to run the Service. We do not sell your personal data, and we do not use advertising or third-party tracking cookies.

1. Information we collect

Information you provide

Email address — to create your account and sign you in via a one-time login link.
Product details you enter (product name, materials, style, audience, notes) in order to generate listings. See "AI processing" below for how this is handled.

Information collected automatically

Session cookie — a strictly-necessary cookie that keeps you logged in.
Usage counts — how many listings you have generated, and your plan/credit balance, to enforce free-trial and paid limits.
IP address — used transiently for security, rate-limiting, and abuse prevention (for example, limiting sign-ups per network).

Information we do not store

We do not retain the product details you enter or the listings we generate for you. They are processed to produce your output and are not saved to our records afterwards.
We do not collect or store payment card details. Payments are handled entirely by our payment provider (see below).

2. How we use your information

To provide and operate the Service (generate listings, manage your account and plan).
To send you account and login emails.
To enforce usage limits and prevent fraud and abuse.
To comply with legal obligations.

3. Legal bases (for EU/UK users under GDPR/UK GDPR)

Performance of a contract — to provide the Service you sign up for.
Legitimate interests — security, abuse prevention, and improving reliability.
Legal obligation — where we must retain or disclose information by law.

4. AI processing of your inputs

To generate listings, the product details you enter are transmitted to our third-party AI provider, Anthropic, which processes them to produce your listing text and returns it to you. We do not retain those inputs or outputs after your request is served. Please avoid entering sensitive personal information into product fields, as they are intended for product information only.

5. Service providers (sub-processors)

We share limited data with the following providers solely to operate the Service:

Provider	Purpose	Data involved
Vercel	Website & application hosting	Technical/connection data
Upstash	Database (accounts, usage counts, sessions)	Email, usage counts, session ID
Resend	Sending login & account emails	Email address
Anthropic	AI generation of listings	The product details you submit
Lemon Squeezy	Payments & billing (Merchant of Record)	Email, billing & payment data (held by them, not us)

6. Payments

Purchases are processed by Lemon Squeezy, which acts as the Merchant of Record for your transaction. Your payment information is provided directly to and handled by Lemon Squeezy under their own privacy policy. We receive confirmation of your purchase and your email, but never your card details.

7. International data transfers

Our providers may process data on servers located outside your country, including in the United States. Where required, such transfers rely on appropriate safeguards (such as Standard Contractual Clauses) offered by those providers.

8. Data retention

Login tokens: deleted after use or within 15 minutes.
Sessions: up to 30 days.
Account email and usage/plan data: retained while your account is active and until you request deletion.

9. Your rights

Depending on where you live (including under the EU/UK GDPR, California's CCPA/CPRA, and India's Digital Personal Data Protection Act, 2023), you may have the right to access, correct, delete, or export your personal data, to object to or restrict certain processing, and to withdraw consent. To exercise any of these, email us at sahilt626@gmail.com. We will respond within the timeframe required by applicable law. You also have the right to lodge a complaint with your local data protection authority.

10. Cookies

We use only strictly-necessary cookies: one to keep you signed in, and one to remember that you dismissed our cookie notice. We do not use analytics, advertising, or third-party tracking cookies.

11. Children

The Service is not intended for anyone under 18, and we do not knowingly collect data from children. If you believe a child has provided us data, contact us and we will delete it.

12. Security

We use reasonable technical and organisational measures (including encryption in transit, restricted access, rate-limiting, and minimal data collection) to protect your information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

13. Changes to this policy

We may update this Policy from time to time. We will post the updated version here with a new "Last updated" date, and where appropriate notify you by email.

14. Contact

Questions about this Policy or your data: Sahil Timbole, Pune, Maharashtra, India — sahilt626@gmail.com.