Privacy Policy

This policy explains what data Listimize (“we”) collects when you use the Listimize app, and how we use, store and share it. Under Turkish Personal Data Protection Law No. 6698 (KVKK), the data controller is Listimize.

1. Data we collect

• Account details: your email address, name (if provided) and, if you sign in with Google, your Google profile name.
• Etsy connection: the access keys Etsy issues (OAuth tokens) and your shop ID. We never see your Etsy password.
• Etsy shop data (only within the scope you authorize — reading your shop, listings and orders; writing listings): listing titles, tags, descriptions, images, prices, view/favorite counts and order summaries.
• Buyer information: for Customer Insights, the buyer name, country and order amount in your orders are read from Etsy in real time and shown only to you; we do not store this information in our database.
• In-app data: your searches, saved keywords, profit calculations, product drafts, generated images, tracked competitor shops, connected Etsy shops and usage records.
• Support: bug reports and contact form messages.
• Technical: session cookies and preferences stored in your browser (such as theme and language). On your first visit we show a notice that we use cookies; by continuing to use the site, you agree to the use of the analytics and marketing cookies described below.
• Analytics: Google Analytics 4 measures how you use the site anonymously (page path, campaign source, in-product steps; no email, name or search text is sent).
• Our own measurement (first-party analytics): we also measure how the site and app are used on our own servers: the page path visited, only the domain of the site that referred you, campaign parameters (utm), device type (mobile/desktop/tablet) and country. Country is determined from your request's IP address at the time of the request; we do not store your IP address, only a two-letter country code. The visitor ID is an irreversible hash of a browser cookie; if you are signed in, the event is linked to your account. This data is not shared with third parties.
• Marketing / ad measurement: Meta Pixel (Facebook/Instagram) is loaded and Google's advertising signals are enabled. The purpose is to measure how many sign-ups and subscriptions our ads lead to and to show ads to relevant people. For this, events such as page visits, sign-ups, plan selections, checkout starts and subscriptions are sent to Meta, along with browser information, IP address, Meta cookie IDs and, if you're logged in, irreversible digests (SHA-256 hashes) of your email address and user ID (including via the Meta Conversions API). Your payment details and Etsy data are not sent.
• Controlling cookies: you can delete or block cookies in your browser settings; if you'd like analytics and marketing cookies turned off for you, contact us via support.
• Marketing emails (optional): if you explicitly opt in at sign-up or in Settings, we send emails about product updates and offers. Your consent is recorded with the time it was given, its source and the version (and language) of the text you agreed to; you can withdraw it anytime via the link in every email or in Settings → Communication Preferences. Service emails (verification, password reset, billing, security) are independent of this consent.
• Abuse prevention: to prevent free AI allowances from being claimed repeatedly with multiple accounts, at sign-up and confirmation we store irreversible digests (hashes) of your email address, IP address and a random device ID we write to your browser (the lz_did cookie). We don't store the raw IP address or device ID; these digests are used only for matching checks and are never processed for advertising or tracking.

2. How we use data

• To provide the service: shop analysis, SEO scores, recommendations, AI content generation and, with your approval, updating/publishing listings on Etsy.
• To manage your account, allowances and plan, and to respond to support requests.
• For security, abuse prevention and debugging.

We do not sell data obtained from Etsy, share it with advertising or marketing platforms, or use it to train AI models. We process Etsy data only to provide the service to you, on your behalf (as a service provider).

3. Who we share data with

To run the service, we share data only with the following infrastructure providers, and only as much as necessary:

• Supabase — database, authentication and file storage.
• Vercel — app hosting.
• OpenRouter (and the AI model providers accessed through it) — text generation; the relevant listing text or your question is sent with the request.
• Replicate — images, mockups and image enhancement; the relevant image/description is sent with the request.
• Google — if you choose to sign in with Google; Google Analytics and Google ad measurement.
• Meta Platforms — ad measurement via Meta Pixel and the Conversions API.
• Cloudflare Turnstile — bot protection on login, sign-up and password reset (browser signals are processed by Cloudflare for verification).
• Email provider — for support and service notifications.

Unless legally required, we don't share your data with any other third parties.

4. Retention and freshness

• Etsy data is mostly fetched fresh from Etsy when needed; listing content is never shown older than 6 hours, and other Etsy content never older than 24 hours.
• We don't keep Etsy data longer than reasonably necessary for the service. Only daily view counts are stored for trend charts.
• When you remove the Etsy connection, your access keys are deleted. When you delete your account, data linked to it is deleted; only the abuse-prevention digests (hashes) are kept so free allowances can't be claimed again by deleting and reopening an account.

5. Security

Data travels over encrypted connections (HTTPS); access keys and user data are kept in access-restricted database tables. If we detect a data breach, we notify affected sellers and Etsy within 24 hours at the latest.

6. Your controls and rights

• You can remove the Etsy connection at any time from the app or from your Etsy account settings.
• No changes are made on Etsy without your explicit approval.
• Under Article 11 of KVKK, you have the right to access, correct and delete your data, to object to its processing and to request a copy of it. For all requests, including account deletion, email [email protected].

7. Changes

When we update this policy, we change its date and announce significant changes by email or in-app notification.

8. Contact

For privacy questions: [email protected]