Privacy policy

[legal name of the business] of [registered or business address] runs ListingForge and is the controller of your personal data under UK data protection law. Contact us at hello@listingforge.com.

• Your account: email address, password (stored only as a secure hash by our login provider), name, store name and eBay store address.
• What you create: listing drafts, the HTML we generate for you, and the logos and photos you upload.
• Billing: your plan, subscription status and payment records. Card details go directly to Stripe, and we never see or store them.
• Usage: listings created and saved, HTML generations, previews and storage used, which we use to apply plan limits and improve the service.
• Enquiries: what you send through our contact form, including your name, email, eBay store and any logo.
• Security: records of important account and admin actions, and your IP address, which we use to limit abuse.

• To provide the service you signed up for, including your account, listings and subscription. Basis: our contract with you.
• To answer enquiries and prepare quotes. Basis: steps you ask us to take before a contract, and our legitimate interest in replying.
• To keep the service secure, prevent abuse and understand how it is used. Basis: our legitimate interests.
• To keep financial records. Basis: legal obligation.

We don't sell your data, and we don't use it for advertising.

eBay listings load images directly from our storage, so anything you upload is available to anyone who has its web address, and appears publicly once you use it in a listing. Please don't upload anything private.

We use these providers, each only for the purpose shown:

• Supabase: database and login.
• Cloudflare: image and logo storage.
• Stripe: payments and subscriptions.
• Vercel: website hosting.
• Resend: email notifications.

Some of these may process data outside the UK. Where they do, we rely on a UK adequacy decision or the appropriate safeguards, such as the UK International Data Transfer Addendum. [confirm the region and transfer terms for each provider once the accounts are set up]

• Your account and content: until you delete your account. Deleting it removes your profile, listings, images and stored files.
• Payment records: six years, as required for tax and accounting.
• Enquiries: [confirm a period, for example 24 months after the last contact]
• Security and activity records: [confirm a period, for example 12 months]
• Uploads you started but never finished: removed automatically by a daily clean-up.

You can ask to access, correct, delete, restrict or move your data, and you can object to how we use it. You can edit your details and delete your account yourself under Account settings, or email us for anything else. We'll reply within one month.

If you're unhappy with how we've handled your data, please tell us first. You can also complain to the Information Commissioner's Office at ico.org.uk.

We only use the cookies needed to keep you logged in. See our cookie policy.

If we change this policy in a way that matters, we'll update the date above and tell account holders by email.