Privacy Policy

1. Data Controller

The data controller for your personal data is:
GenieX Software OÜ
Harju maakond, Tallinn, Kesklinna linnaosa,
Tornimäe tn 5, 10145
Email: support@listsgenie.com

2. What Data We Collect

We collect the following categories of personal data:

Account Data

• Name
• Email address
• Password (hashed)
• Subscription plan

Billing Data

• Payment method
• Billing address (processed via Stripe or similar)

Platform Usage Data

• API usage
• Plan limits
• Feature access

Generated Content

• Titles, descriptions, and tags generated via AI

Device and Log Data

• IP address
• Browser type
• Time zone
• Usage logs

3. Legal Basis for Processing (GDPR)

We process your data based on:

• Contractual necessity: To deliver services under your subscription
• Legitimate interest: To improve the service, detect abuse, maintain security
• Consent: For optional cookies or marketing emails
• Legal obligations: In case of fraud investigations or tax compliance

4. Use of Information

We use your data to:

• Operate the ListsGenie platform
• Process payments and manage your subscription
• Improve AI performance through anonymized metrics
• Respond to your support requests
• Comply with legal requirements

5. Data Sharing and Third Parties

We do not sell your personal information.

We may share your data with third-party services necessary for operating the platform, including but not limited to:

5A. Etsy API Content and AI Processing (Compliance)

We integrate only via the official Etsy API. Etsy-related content that you access through the Service (e.g., listing titles, descriptions, tags, images, receipts metadata) is processed solely to provide features to your connected account and is not collected or retained for independent analytics, machine learning, or AI model training.

• No model training: We do not use Etsy API content to train, fine-tune, or improve any AI/ML models, whether our own or those of third parties.
• No cross-user aggregation: We do not create datasets that aggregate Etsy API content across users for analysis or benchmarking.
• Third-party AI processing only for inference: When we use AI providers (e.g., OpenAI) to generate suggestions, Etsy content is transmitted only as needed to return an output. We instruct providers that your Etsy content must not be used for training. Our implementation relies on provider API programs that do not use API data for training.
• No scraping: We do not use scraping or other unauthorized collection methods; only Etsy’s official API and permitted OAuth flows are used.
• Limited retention: Etsy OAuth tokens are stored to operate the integration. Etsy listing metadata may be cached for a short period to improve user experience. AI-generated suggestions may be stored in your account for your convenience; suggestions are our output and do not enable model training on Etsy inputs.
• Disconnect and deletion: If you disconnect your Etsy account or request deletion, we will delete Etsy OAuth tokens and any cached Etsy API content associated with your account, subject to legal retention requirements.

6. International Transfers

Your data may be transferred to and processed in countries outside the EU, including the United States. In such cases, we ensure appropriate safeguards under the GDPR (e.g., Standard Contractual Clauses).

7. Data Retention

We retain personal data:

• As long as your account is active
• Up to 6 months after account termination (for compliance)
• Billing and transactional data may be retained longer for legal accounting purposes

8. Your Rights (EU & US Residents)

You have the right to:

• Access, correct, or delete your data
• Withdraw consent at any time
• Object to processing (where applicable)
• File a complaint with a data protection authority

For California residents, you have the right to:

• Know what personal data we collect
• Request deletion of your data
• Opt-out of sale (we do not sell data)

To make a request, contact: privacy@listsgenie.com

9. Security

We use industry-standard security practices including:

• HTTPS encryption
• Encryption at rest and in transit
• Access control
• Regular audits

10. Cookies

We use cookies for:

• Session management
• Performance metrics
• Remembering your preferences

You may opt out via browser settings or cookie banner.

11. Children's Privacy

We do not knowingly collect data from children under 13 (or 16 in the EU). If you believe your child has provided us with personal data, contact us for removal.

12. Changes to This Policy

We may update this policy. If significant changes are made, we will notify you via email or on the website.

13. Contact Information

For any privacy-related questions or to exercise your rights, please contact:

Email: privacy@listsgenie.com
Support: support@listsgenie.com

14. Chrome Extension Privacy

Data Collection via Chrome Extension

The ListsGenie Chrome Extension collects and processes the following data:

Extension-Specific Data

• Product Images: Images you upload while creating Etsy listings (processed temporarily, not stored)
• Generated Content: AI-generated titles, descriptions, and tags created from your images
• Active Tab Information: Only when you interact with the extension on etsy.com
• Extension Settings: Your preferences and configuration within the extension
• Usage Analytics: Extension feature usage, clicks, and performance metrics (anonymized)

Permissions We Request

• activeTab: To interact with your current Etsy listing page
• storage: To save your extension preferences locally
• Host permission for etsy.com: To enable functionality on Etsy seller pages only

What We DON'T Access

• Your browsing history
• Personal files on your computer
• Other websites you visit
• Your Etsy account credentials
• Payment information through the extension

Local vs. Server Processing

• Image analysis is sent to OpenAI API for processing (images are not permanently stored)
• Generated content is temporarily cached for your session
• Extension preferences are stored locally in your browser
• No personal data is collected without your active interaction

Extension Data Retention

• Uploaded images: Deleted immediately after processing
• Generated content: Cached for 24 hours for your convenience
• Usage metrics: Aggregated and anonymized after 30 days
• Local storage: Persists until you uninstall the extension or clear browser data

Third-Party Services (Extension)

• OpenAI: For AI-powered content generation
• Google Analytics: For anonymized usage statistics

Opting Out

You can disable data collection by:

• Uninstalling the extension
• Using the extension in incognito mode (with permission)

Extension Updates

We may update the extension to improve features or fix bugs. Updates are delivered through Chrome Web Store's automatic update mechanism. Significant permission changes will be notified.