Privacy

• Your account. Email address, and a password hash or a Google sign-in identifier. We never see your Google password.
• Photos you upload. The garment photos you put into the studio or the enhancer, and the enhanced versions we generate from them.
• Listings we generate. Title, description, category, brand, size, colour, material, condition and hashtags, plus any edits you make.
• Usage counters. How many listings and enhancements you have used in the current billing period, and your credit balance. This is what enforces your plan’s limits.
• Product analytics. Pages viewed, buttons and elements clicked, and session recordings — a replay of your visit showing navigation and interaction. All text you type into form fields is masked in these recordings and is not visible to us there.
• Payment records. Your plan, billing period, and Stripe customer and subscription identifiers. We never receive or store your card number. Card details go straight to Stripe.

• To provide the service — performance of our contract with you. This covers your account, your photos, your listings and your usage counters. Without them the product cannot work.
• To take payment — performance of our contract, and our legal obligation to keep accounting records.
• To improve the product — analytics and session recordings, on the basis of your consent where consent is required, and otherwise our legitimate interest in understanding which parts of the product people struggle with. You can opt out at any time (see below).

We use a small number of providers. They act on our instructions and may not use your data for their own purposes.

• OpenAI — your photos are sent to OpenAI to generate the listing text and the enhanced image. OpenAI does not use data submitted through its API to train its models.
• Supabase — database, file storage and authentication.
• Vercel — hosting and traffic analytics.
• Stripe — payments and subscriptions.
• PostHog — product analytics and session recordings, on EU infrastructure.

Some of these are based in the United States. Where data reaches them, the transfer relies on the European Commission’s standard contractual clauses or an adequacy decision.

Photos, listings and account data are kept until you delete them or close your account, whichever comes first. Analytics data is retained for up to 12 months, and session recordings for up to 30 days. Payment and invoice records are kept for as long as accounting law requires, which in Lithuania is 10 years.

Deleting your account removes your photos, listings and analytics profile. Anonymous aggregate counts that cannot be traced back to you may remain.

We set cookies to keep you signed in and to remember your language — these are essential and cannot be turned off without breaking the site. Analytics cookies identify your browser across visits so that a returning user is not counted twice.

To opt out of analytics, turn on “Do Not Track” or the global privacy control in your browser, or email us and we will exclude your account.

Under the GDPR you can ask us for a copy of your data, correct it, delete it, get it in a portable format, or object to us processing it. Email the address at the top of this page and we will respond within one month.

If you think we have handled your data badly, you can complain to the Lithuanian State Data Protection Inspectorate (Valstybinė duomenų apsaugos inspekcija, vdai.lrv.lt), or to the supervisory authority where you live.

ListQuick is not intended for anyone under 16, and we do not knowingly collect their data.

If we change how we handle your data in a way that affects you, we will update the date at the top of this page and, for significant changes, tell you by email.