Privacy Policy

ListCraft AI (“we,” “us,” or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and protect your information when you use https://listcraft.shop (the “Service”).

Information We Collect

We only collect the absolute minimum data necessary to provide the Service:

• Account information (email and authentication data, handled by Clerk)
• Payment information (processed securely by Stripe — we never see your card details)
• Temporary processing data: The product photo and short description you upload are processed in real-time to generate your Etsy listing.

We do not store your uploaded photos or product descriptions. They are automatically and permanently deleted immediately after the listing is generated.

We do NOT use your uploaded images, prompts, or any user data to train our AI models.

Legal Basis for Processing (GDPR Art. 6)

We process your personal data based on:

• Performance of a contract (to provide the Service)
• Legitimate interests (to improve the Service and prevent abuse)
• Legal obligations (tax and accounting)

How We Use Your Information

• To generate your Etsy-optimized listing using a third-party AI provider
• To process your subscription payment via Stripe
• To manage your account and send important service updates

Data Sharing and International Transfers

We do not sell your personal data.

We share information only when strictly necessary with:

• A third-party AI provider — for listing generation (a current sub-processor list is available on request)
• Stripe — for payment processing
• Clerk — for authentication

All transfers outside the EU/EEA are protected by Standard Contractual Clauses (SCCs) and additional safeguards, including the EU–US Data Privacy Framework where applicable.

Data Retention

Uploaded photos and descriptions are deleted immediately after processing.

We only retain account and billing data as long as your account is active or as required by law.

Your Rights (GDPR)

You have the right to access, rectify, erase, restrict, or object to the processing of your personal data, and to data portability.

To exercise these rights, email support@listcraft.shop.

You may also lodge a complaint with the State Data Protection Inspectorate of Lithuania (VDAI): https://vdai.lrv.lt

Cookies & Tracking

We use only the cookies and similar technologies that are strictly necessary to provide the Service: authentication (Clerk), payment security (Stripe), and basic routing (Vercel). We do not use any analytics, advertising, or marketing cookies. No data is sold or shared with third parties for advertising purposes.

Children's Data

The Service is not directed at children under the age of 16, and we do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

Changes to This Policy

We may update this Privacy Policy. We will notify you of material changes by updating the “Last updated” date.

Controller & Contact

The data controller for this Service is the operator of ListCraft AI, a sole proprietorship (individuali veikla) registered in the Republic of Lithuania. Full identification details are available on our Imprint page and on written request to support@listcraft.shop.