We collect only the data strictly necessary to run LISTÖ. We never sell your data to third parties.
1. Data We Collect
Data you provide
- Email address and password (account creation)
- Photos of your clothing items (for listing creation)
- Listing information (title, description, price, size, measurements)
- Shipping details (optional)
Data collected automatically
- Device identifier, operating system, app version
- Connection and usage logs (for security and service improvement)
- Approximate location (if permitted, for listing geolocation)
2. How We Use Your Data
- Service operation: creating and publishing listings, AI photo analysis, AR measurements
- Communication: notifications about your listings, important updates
- Security: fraud detection, account protection
- Improvement: anonymised usage analysis to improve the experience
3. Data Retention
- Account data: retained while your account is active + 30 days after deletion
- Photos and listings: deleted immediately upon request
- Technical logs: 90 days maximum
- Payment data: not stored (processed via Stripe)
4. Third-Party Sharing
We share your data with resale platforms (Vinted, Vestiaire Collective, Leboncoin) only when publishing a listing, with your explicit consent. We use Stripe for payments and Firebase (Google) for infrastructure.
5. Your Rights (GDPR)
- Access: obtain a copy of your data
- Rectification: correct inaccurate data
- Erasure: request deletion of your data
- Portability: receive your data in a structured format
- Objection: object to processing for legitimate reasons
To exercise your rights: [email protected]
6. Security
All communications are encrypted with TLS 1.3. Data is stored on secure servers (AWS, EU region). Passwords are hashed with bcrypt. Data access is restricted to authorised personnel.