Overview
This Policy applies to personal information we handle when you visit our website or use AListEngine.
In most cases, we act as the controller for account, billing, support, and website data. When you upload photos, listing details, marketplace credentials, or customer data on behalf of your business, we generally act as a processor for that customer data.
When we process customer data on your behalf, you are responsible for providing any required notices, obtaining any required consents, and ensuring the data can lawfully be processed through AListEngine.
If your organization needs a privacy review, a DPA, or transfer terms such as Standard Contractual Clauses, email info@alistengine.com.
Information We Collect
Account and contact information: name, email address, company name, role, and password hash.
Billing information: subscription and transaction details from our payment processor, such as card brand, billing address, and the last four digits of a card. We do not store full card numbers.
Content you upload: product photos, titles, descriptions, categories, pricing, SKU or inventory data, other listing information, and any customer or order data included in listings you import or generate.
Marketplace and integration data: the OAuth tokens, account identifiers, connection status, scopes, and related authorization metadata needed to maintain connections you authorize, including eBay account connections. We do not ask for or store your eBay password.
Usage and device data: IP address, browser and device information, pages and features used, timestamps, and diagnostic logs.
Support communications: messages, attachments, and feedback you send us.
How We Use Information
- Provide, maintain, and improve AListEngine.
- Generate listing content from photos and other inputs you provide.
- Publish, update, and sync listings with marketplaces and tools you connect, including eBay when you authorize the integration.
- Process payments, manage subscriptions, and send invoices.
- Authenticate you, secure accounts, prevent fraud or abuse, investigate issues, and debug the service.
- Respond to support requests and send service-related notices.
- Send product updates or promotions with your consent or as permitted by law. You can opt out of marketing communications.
- Comply with legal obligations and enforce our Terms of Service.
Where GDPR or UK GDPR applies, we process personal data under these legal bases: performance of a contract to provide AListEngine, legitimate interests to secure, improve, and market the service, consent where required for certain cookies or marketing, and legal obligations.
AI Processing
To generate listing text and other outputs, we may process your data using our own systems and third-party AI providers that are required by contract to protect it.
To generate and improve your listing outputs, we may use the photos, listing details, prompts, edits, and feedback you provide within AListEngine. We may also use aggregated or de-identified usage data to improve product quality and safety more broadly. If we use identifiable customer content for broader model training, we will provide a clear notice or choice where required.
Retention & Security
We keep personal information for as long as needed to provide the service, maintain security, prevent fraud, meet legal obligations, resolve disputes, and keep required business records.
You may request deletion of your account data at any time by contacting us. You may also disconnect marketplace integrations, including eBay, through the product or marketplace authorization settings where available; disconnecting stops our future access through that authorization.
If eBay sends us a marketplace account deletion or closure notification for a connected account, we use it to delete or de-identify affected eBay integration data where required, subject to records we must keep for legal, security, fraud-prevention, or business purposes. Backups and logs are deleted on a rolling schedule.
We use reasonable administrative, technical, and physical safeguards, including encryption in transit and access controls. No system is completely secure, and you are responsible for protecting your account credentials and promptly telling us if you suspect unauthorized access.
Your Rights
Depending on where you live, you may have rights to access, correct, delete, export, or restrict certain personal information, or to object to some processing activities.
You may also be able to withdraw consent for specific processing, such as marketing emails or non-essential cookies.
If you are in the EEA, UK, California, or a similar jurisdiction, you may have additional rights under GDPR, UK GDPR, CPRA, or similar privacy laws. We will not discriminate against you for exercising your rights.
To make a privacy request, email info@alistengine.com. We may need to verify your identity before completing your request.
International Transfers
We may process information in the United States and other countries. Where required, we use appropriate safeguards for cross-border transfers, including Standard Contractual Clauses.
Children
AListEngine is not directed to children, and we do not knowingly collect personal information from anyone under 18. If you believe a child provided personal information, contact us and we will take appropriate steps to remove it.
Changes
We may update this Privacy Policy from time to time. If we make material changes, we will post the updated policy here and may also notify you by email or in the product. Your continued use of AListEngine after the effective date means you accept the updated policy.
Contact
Questions about this Privacy Policy or our privacy practices can be sent to info@alistengine.com.
We do not include a Data Processing Addendum by default during onboarding. If your organization needs a DPA or Standard Contractual Clauses, contact us at the same address.