Legal

Privacy Policy.

Last updated: February 2026

Your product photos are yours

We use them only to generate your listing copy. We do not sell them, we do not train third-party models on them, and you can request deletion at any time.

1. What we collect

  • Account data: name, email address, hashed password.
  • Product content: images you upload (JPEG/PNG/WEBP), titles, categories, keywords and any specs you enter.
  • Generated output: AI-generated titles, descriptions, bullet points, meta tags and variant copy stored against your account.
  • Billing data: Razorpay payment reference IDs, amount, currency, invoice numbers. We do NOT store your card, UPI or bank details on our servers — that stays with Razorpay.
  • Technical data: IP address, browser type, timestamps, basic logs needed to keep the service secure and running.

2. How we use it

  • To generate listing copy from the photos and specs you upload.
  • To keep your account, credits and past listings available in your dashboard.
  • To process payments and issue invoices.
  • To send transactional emails (payment confirmations, password reset links).
  • To detect abuse, prevent fraud and keep the service secure.

3. How your images and specs are handled

  • Uploaded images and specs are stored in our MongoDB database, associated with your account.
  • They are sent to our AI model provider (see next section) only to produce the listing you requested.
  • They are not shared with any advertiser, marketplace, or third party for training or marketing.
  • You can delete individual listings from the dashboard or ask us to delete your entire account.

4. Third-party processors

We use a small number of trusted vendors to run the service. Each receives only the data needed to do its job:

  • Anthropic (via Emergent): receives your uploaded image and specs to generate the listing text. Anthropic states it does not use API traffic to train its models by default.
  • Razorpay: processes payments. Receives your name, email, and payment amount. Payment method details (card / UPI / netbanking) are handled entirely by Razorpay.
  • Hosting & database: our servers and MongoDB store account, listing and billing data.

5. Cookies

listcraft uses a single HTTP-only authentication cookie to keep you signed in. We do not use tracking or advertising cookies. Clearing your browser cookies will sign you out.

6. Data retention

  • Account, listing and billing data are retained as long as your account is active.
  • Invoices are retained for at least 8 years to comply with Indian tax law.
  • Password reset tokens expire within a short time window and are single-use.
  • On account deletion, listings and images are removed within 7 business days. Billing records are retained per the point above.

7. Your rights

You can, at any time, ask us to:

  • Access a copy of the personal data we hold about you.
  • Correct information that is wrong or out of date.
  • Delete your account and associated listings.
  • Restrict or object to specific processing.

Email support@listcraft.app from your registered email address and we'll respond within 7 business days.

8. Security

Passwords are stored using bcrypt. Traffic between your browser and our servers is encrypted via HTTPS. Payment secrets never touch our servers. No system is perfectly secure, but we work to keep listcraft safe and to notify affected users promptly in the unlikely event of a breach.

9. Children

listcraft is not intended for use by anyone under 18. We do not knowingly collect data from minors. If you believe a minor has created an account, email us and we will delete it.

10. Changes to this policy

We may update this Privacy Policy occasionally. Material changes will be announced in-app or via email. Continued use of the service after an update constitutes acceptance of the revised policy.

11. Contact

Ari Enterprises · support@listcraft.app