Privacy Policy
Last updated: June 12, 2026
Listing Packs Inc. ("Company," "we," "us," or "our") is committed to protecting the privacy of our users. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Listing Packs AI platform and related services (the "Service"). Please read this policy carefully. By using the Service, you consent to the practices described herein.
1. Information We Collect
1.1 Information You Provide Directly
| Data Type | Examples | Purpose |
|---|---|---|
| Account Information | Full name, email address, password (hashed) | Account creation, authentication, communication |
| Profile Information | Brokerage name, phone number, location | Personalization, branding in generated outputs |
| Payment Information | Transaction IDs, payment amounts, timestamps | Credit purchases, billing records |
| Uploaded Content | Property photos, logos, brand assets | AI image generation input |
| Listing Data | Addresses, prices, features, agent details | Marketing copy rendered in generated images |
| Support Communications | Email content, attachments, feedback | Customer support, product improvement |
1.2 Information Collected Automatically
| Data Type | Examples | Purpose |
|---|---|---|
| Device Information | Browser type, OS, screen resolution | Service optimization, debugging |
| Usage Data | Pages visited, features used, generation history | Analytics, product improvement |
| Log Data | IP address, access timestamps, request headers | Security monitoring, abuse prevention |
| Cookies | Session tokens, authentication state | Login persistence, session management |
1.3 Information from Third Parties
- PayPal: Transaction confirmation, payment status, payer email (no credit card numbers).
- OpenAI: Generation status, content moderation flags (no personal data returned).
2. How We Use Your Information
- Service Delivery: Process your inputs through AI to generate marketing materials.
- Account Management: Authenticate users, manage credits, maintain account security.
- Payment Processing: Process transactions, issue receipts, manage billing disputes.
- Communication: Send transactional emails (receipts, password resets), service updates, and optional marketing communications.
- Product Improvement: Analyze aggregate usage patterns to improve features, performance, and user experience.
- Security: Detect and prevent fraud, abuse, and unauthorized access.
- Legal Compliance: Meet regulatory requirements, respond to legal processes.
3. Legal Basis for Processing (GDPR)
If you are located in the European Economic Area (EEA) or United Kingdom, we process your data under the following legal bases:
- Contract Performance: Processing necessary to deliver the Service you requested.
- Legitimate Interests: Security, fraud prevention, product improvement, and business operations.
- Consent: Marketing communications (you may withdraw consent at any time).
- Legal Obligation: Tax records, regulatory compliance.
4. Data Storage and Infrastructure
4.1 Storage Locations
- Database: Cloudflare D1 (distributed globally across Cloudflare's network).
- File Storage: Cloudflare R2 (generated images, uploaded assets).
- Application Logic: Cloudflare Workers (serverless, edge-distributed).
4.2 Security Measures
- All data in transit is encrypted using TLS 1.3.
- Passwords are hashed using industry-standard algorithms (never stored in plaintext).
- API authentication via JWT tokens with expiration.
- Uploaded images stored with unique, non-guessable keys accessible only via authenticated API calls.
- Regular security reviews and dependency updates.
- Access to production systems limited to authorized personnel only.
5. AI Processing and Third-Party Data Sharing
5.1 OpenAI
- Your uploaded photos and text prompts are sent to OpenAI's API (api.openai.com) for image generation.
- OpenAI processes this data in accordance with their API Data Usage Policies.
- As of the date of this policy, OpenAI does not use API inputs/outputs to train their models.
- We recommend not including sensitive personal information (Social Security numbers, financial account numbers) in generation inputs.
5.2 PayPal
- Payment data is transmitted directly to PayPal for processing.
- We receive transaction confirmations but do not store full payment card details.
- PayPal's privacy practices are governed by the PayPal Privacy Statement.
5.3 Cloudflare
- Cloudflare provides our hosting infrastructure and may process request metadata (IP addresses, headers) for CDN and security purposes.
- Governed by Cloudflare's Privacy Policy.
5.4 We Do NOT
- Sell your personal information to third parties.
- Share your uploaded content or generated images with other users.
- Use your content for advertising or profiling purposes.
- Provide data to data brokers or marketing aggregators.
6. Cookies and Tracking Technologies
| Cookie Type | Purpose | Duration |
|---|---|---|
| Session Cookie | Authentication, login state | Until logout or browser close |
| JWT Token (localStorage) | API authentication | 7 days (auto-refresh) |
We do NOT use:
- Third-party tracking cookies (Google Analytics, Facebook Pixel, etc.)
- Advertising cookies or retargeting pixels
- Cross-site tracking technologies
7. Data Retention
| Data Type | Retention Period |
|---|---|
| Account Information | Duration of active account + 30 days after deletion request |
| Generated Images | Until user deletes or account closure |
| Uploaded Photos/Logos | Processed immediately, stored for re-generation |
| Payment Records | 7 years (tax/legal compliance) |
| Server Logs | 30 days (rolling) |
| Support Communications | 2 years after resolution |
8. Your Rights
Depending on your location, you may have the following rights:
8.1 All Users
- Access: Request a copy of personal data we hold about you.
- Correction: Update or correct inaccurate personal data.
- Deletion: Request deletion of your account and associated data.
- Data Export: Download your generation history and account data.
- Opt-Out: Unsubscribe from marketing emails at any time.
8.2 California Residents (CCPA/CPRA)
- Right to know what personal information is collected and how it is used.
- Right to delete personal information.
- Right to opt-out of the sale of personal information (we do not sell data).
- Right to non-discrimination for exercising your privacy rights.
8.3 EEA/UK Residents (GDPR)
- Right to access, rectification, erasure, and data portability.
- Right to restrict or object to processing.
- Right to withdraw consent at any time.
- Right to lodge a complaint with a supervisory authority.
To exercise any of these rights, contact us at privacy@listingpacks.com. We will respond within 30 days.
9. International Data Transfers
Your data may be processed in locations outside your country of residence, including the United States. Cloudflare's global network may route requests through data centers worldwide. By using the Service, you consent to the transfer of your information to facilities outside your jurisdiction. We ensure appropriate safeguards are in place in compliance with applicable data protection laws.
10. Children's Privacy
The Service is not intended for individuals under 18 years of age. We do not knowingly collect personal information from minors. If we discover that we have inadvertently collected data from a person under 18, we will promptly delete that information. If you believe a minor has provided us with personal data, please contact us immediately.
11. Data Breach Notification
In the event of a data breach that compromises your personal information, we will:
- Notify affected users via email within 72 hours of discovery.
- Report the breach to relevant supervisory authorities as required by law.
- Provide details of the breach, its impact, and steps taken to mitigate harm.
- Recommend protective actions users should take.
12. Third-Party Links
The Service may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties. We encourage you to review their privacy policies before providing any personal information.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. Material changes will be communicated via:
- Email notification to your registered address.
- Prominent notice on the Service.
- Updated "Last updated" date on this page.
Continued use of the Service after changes become effective constitutes acceptance of the revised policy.
14. Contact Information
For privacy-related questions, requests, or complaints:
- Privacy Team: privacy@listingpacks.com
- General Support: support@listingpacks.com
- Legal Inquiries: legal@listingpacks.com
We aim to resolve all privacy inquiries within 30 calendar days.