Privacy Notice

Njdeh Petrossian, trading as Listly AI, is the data controller for the personal data described in this notice. That means we decide how and why your data is processed. If you have questions or want to exercise your rights, contact us through the app or at the email address shown on your invoices.

• Account data — your name (if you provide one), email address, and login credentials for your Listly AI account.
• Listing data — the photos, product details (brand, category, size, colour, condition, material, prices, notes) and generated listings you store in the app.
• Usage data — how many listings you generate, which plan you are on, and basic app interaction needed to run your subscription.
• Technical data — IP address, device and browser information, collected as part of securing and operating the service.
• Support data — messages you send us when you ask for help.

Payment card details are collected and processed by Paddle, our Merchant of Record, and are not stored by us. Paddle provides us with your order reference, plan and billing status so we can activate your subscription.

• To provide the service — creating your account, generating and storing your listings, enforcing your plan’s limits. Legal basis: performance of our contract with you.
• To bill subscriptions — activating paid plans and keeping your subscription status accurate, together with Paddle. Legal basis: performance of contract; billing records may also be kept to comply with legal obligations.
• To secure and improve the service — preventing fraud and abuse, diagnosing problems, understanding how features are used. Legal basis: our legitimate interests in running a safe, reliable service.
• To communicate with you — support replies and essential service messages (receipts, plan changes, security notices). Legal basis: performance of contract and, for optional updates, your consent, which you can withdraw at any time.

We only share personal data with parties that help us run Listly AI:

• Service providers — our hosting, database and authentication provider (Supabase), our AI provider (which processes your submitted photos and details solely to generate your listings), and support tooling. They process data only on our instructions.
• Paddle.com — as Merchant of Record, Paddle handles the sale of subscriptions, payments, tax compliance and invoicing, and is a recipient of the data needed for those purposes.
• Professional advisers — lawyers and accountants, where needed.
• Authorities — where we are legally required to disclose data.

We never sell your personal data.

We are based in Belgium, but some of our providers process data outside the EEA. Where that happens, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses or an adequacy decision, so your data keeps GDPR-level protection.

We keep your data only as long as needed. Account and listing data are kept while your account is active and are deleted or anonymised shortly after you delete your account. Billing records are kept for the period required by tax and accounting law (generally seven years in Belgium). Security and fraud-prevention logs are kept for a limited, proportionate period.

Under the GDPR you have the right to:

• access the personal data we hold about you;
• have inaccurate data rectified;
• have your data erased;
• restrict or object to processing;
• receive your data in a portable format;
• withdraw consent where processing is based on consent;
• lodge a complaint with a supervisory authority — in Belgium, the Data Protection Authority (Gegevensbeschermingsautoriteit / Autorité de protection des données).

You can export or delete most of your data yourself from the Settings page in the app. For anything else, contact us and we will respond within one month.

We apply appropriate technical and organisational measures to protect your data, including encryption in transit and at rest, row-level access controls so you can only reach your own data, and limited internal access on a need-to-know basis.

Listly AI uses only essential cookies and equivalent storage: a session cookie that keeps you signed in, and local storage needed for the app to function. We do not use analytics or advertising cookies. You can clear these at any time through your browser settings, though signing out will end your session.

We may update this notice as the service evolves. The date at the top always shows the current version, and significant changes will be announced in the app.