Privacy Policy

Last updated: 27 September 2026

This policy explains what Listrova collects, why, and your rights under the GDPR and similar laws.

What we collect

• Account data: name, email, optional company and billing details.
• Store connection data: your Shopify shop domain and an encrypted access token (AES-256-GCM). Tokens never reach the browser.
• Product data you import and the listings we generate, including the original source (kept so relists and reverts are accurate).
• Usage data: credits, AI usage and error logs used to run and improve the Service.

What we do not collect

We do not read your Shopify orders or customer data. We only request product, inventory, file, publication and navigation permissions.

Processors

• Supabase (database, authentication, file storage), EU region.
• Anthropic (AI generation of listing text from your product data).
• Inngest (background job orchestration), Railway (hosting), Resend (email), Whop (payments).

Retention and deletion

Data is kept while your workspace exists. Exports expire after 7 days. When you uninstall the app or ask us to delete your data, we remove your store connection and associated data, including through Shopify’s mandatory privacy webhooks.

Your rights

You can access, correct, export or delete your data. Email zubairtan5@gmail.com and we will respond within 30 days.