Privacy Policy

This Privacy Policy explains how ListerRank (“ListerRank,” “we,” “us,” or “our”) collects, uses, shares, and protects personal data when you use the ListerRank website at listerrank.com, our free marketplace tools, our paid subscription features, and the ListerRank app for Shopify (together, the “Service”).

Data controller: Smartwatcherz 88 Kft., Nyári Pál u. 15, 2724 Újlengyel, Hungary, trading as ListerRank. Contact: support@listerrank.com. We publish this detail because some jurisdictions require a controller's identity and address; it does not affect the commitments below.

1. Who this policy covers

• Visitors who use our free public tools without an account.
• Account holders who sign up with email or Google.
• Shopify merchants who install the ListerRank app into a Shopify store.

If you are a customer of a merchant who uses ListerRank, we do not process your personal data: the ListerRank Shopify app does not request access to Shopify protected customer data (orders, customers, or checkouts).

2. Data we collect

2.1 Account data

Email address, password hash (never the password itself), display name, optional avatar, and account settings. If you sign in with Google OAuth, Google shares your name, email address, and profile picture with us based on your consent.

2.2 Shopify store data (OAuth)

When you install the ListerRank app, Shopify authorises us under Shopify Managed Installation with the scopes shown on the install screen: read_products, write_products, read_inventory, and write_content. Using those scopes we store: your store domain, shop name, store locale and currency, access token (encrypted at rest), product and variant content (titles, descriptions, handles, tags, SEO fields, images and alt text, prices, inventory levels), and blog/article content we create for you. We do not read orders, customers, checkouts, payment details, or any Shopify protected customer data.

2.3 Public marketplace data

When you run an audit or a competitor/keyword tool, we fetch publicly available pages and public JSON endpoints of the store or listing URL you submit (Shopify, Etsy, Amazon, eBay, TikTok Shop). We never ask for or use marketplace passwords.

2.4 Usage and technical data

Pages viewed, tools used, feature interactions, credit consumption, timestamps, browser and device type, approximate location derived from IP, and IP address (used for security, abuse prevention, and rate limiting). We also log errors to keep the Service reliable.

2.5 Support and contact data

If you email us or use the contact form, we store your name, email address, subject, message, and our replies so we can help you and keep a record of the request.

2.6 Payment data

All subscriptions and credit packs are billed through the Shopify Billing API and appear on your Shopify invoice. We receive plan, status, and charge ID from Shopify. We never see, receive, or store card numbers or any other payment credentials.

3. Why we use your data and our legal bases (GDPR / UK GDPR)

4. AI-generated content

ListerRank uses third-party AI models (currently Google Gemini models, accessed through the Lovable AI Gateway) to analyse listings and generate titles, descriptions, meta tags, alt text, keywords, blog articles, and product images.

• The content and prompts you submit are sent to these providers only to produce your result.
• We do not sell your data and we do not permit your store or listing content to be used to train general-purpose AI models.
• AI output can be inaccurate. You are responsible for reviewing generated content before publishing it to your store or marketplace listings.
• We store generated output (and generated images in our storage) so you can review, re-use, roll back, or publish it. Deleting the item in the app deletes the stored output.

No automated decision-making with legal or similarly significant effects (Art. 22 GDPR) takes place: AI output is a suggestion, and publishing is always your action.

5. Cookies and analytics

We use:

• Strictly necessary cookies / local storage — authentication sessions, CSRF and security tokens, Shopify embedded session tokens, and your active store selection. These cannot be switched off without breaking the Service.
• Security — Cloudflare Turnstile for bot protection on free tools.
• Analytics — aggregated, privacy-respecting usage measurement to see which tools are used and where flows break. Where consent is legally required for non-essential analytics, we ask for it and you can decline without losing access.

You can block or delete cookies in your browser settings; strictly necessary cookies are required to stay signed in.

6. Sharing your data

We do not sell personal information and we do not share it for cross-context behavioural advertising. We use the following processors/sub-processors:

• Supabase — database, authentication, and file storage.
• Cloudflare — hosting/edge delivery, CDN, and bot protection.
• Shopify — app installation, store data access, and all subscription and credit-pack billing.
• Google (Gemini via the Lovable AI Gateway) — AI text and image generation.
• Mailgun (via Lovable Emails) — transactional email delivery.

We may also disclose data where required by law, to enforce our Terms of Service, or in connection with a merger or acquisition (you will be notified).

7. International transfers

Our providers may process data in the United States and other countries outside the EEA/UK. Where that happens we rely on the European Commission's Standard Contractual Clauses (and the UK Addendum/IDTA) together with the providers' supplementary safeguards.

8. Retention

• Account data — while your account is active, then deleted within 30 days of a deletion request.
• Shopify store data and access tokens — deleted within 48 hours of app uninstall, and always within the 30-day window required by Shopify's shop/redact webhook.
• Generated content and images — until you delete them or your account is deleted.
• Anonymous free-tool usage logs — anonymised or deleted after 90 days.
• Support and contact messages — up to 24 months.
• Billing and invoice records — up to 7 years where tax law requires it.

9. Your rights

Under the GDPR and UK GDPR you have the right to access, rectify, erase, restrict, and port your data, to object to processing based on legitimate interests, and to withdraw consent at any time. Under the CCPA/CPRA, California residents have the right to know what personal information we collect and why, to request deletion or correction, to opt out of “sale” or “sharing” (we do neither), and not to be discriminated against for exercising these rights.

How to exercise them: email support@listerrank.com or use the contact form. We verify requests through the email address on the account (or the Shopify store owner email) and respond within 30 days.

9.1 Account and data deletion

You can delete your account from Settings, or ask us to do it. Deleting removes your profile, stores, audits, generated content, and generated images. Uninstalling the Shopify app also triggers deletion of that store's data. We honour Shopify's mandatory customers/data_request, customers/redact, and shop/redact webhooks automatically.

10. Security

We use HTTPS everywhere, encrypted storage of access tokens, row-level security in our database, HMAC verification of all Shopify webhooks, scoped API access, rate limiting, and bot protection. No online service can guarantee absolute security; if a breach affects your data we will notify you and the relevant supervisory authority as required by law.

11. Children

ListerRank is a business tool and is not directed at children under 16. We do not knowingly collect their personal data; if we learn we have, we delete it.

12. Complaints

If you are in the EEA or UK you may lodge a complaint with your local data protection authority (in the UK, the Information Commissioner's Office). We would appreciate the chance to resolve it first.

13. Changes to this policy

We may update this policy. Material changes will be announced by email or an in-app notice, and the “Last updated” date above will change.

14. Contact

All privacy questions, data requests, and app support: support@listerrank.com
Smartwatcherz 88 Kft., Nyári Pál u. 15, 2724 Újlengyel, Hungary
Contact form: listerrank.com/contact