Privacy Policy

Last Updated: February 10, 2026

1. Introduction

AstraNex Ventures LLC ("Company," "we," "us," or "our") operates Listaza.app ("Service," "App," or "Platform"). We are committed to protecting your privacy and handling your personal information with care and transparency.

This Privacy Policy explains:

  • What information we collect
  • How we use your information
  • How we protect your information
  • Your rights regarding your information
  • How to contact us with privacy concerns

Business Address: AstraNex Ventures LLC Wesley Chapel, FL, USA

Privacy Contact: legal@listaza.app

By using Listaza.app, you agree to the collection and use of information in accordance with this Privacy Policy.

2. Information We Collect

2.1 Information You Provide Directly

Account Information:

  • Email address (required for magic link authentication)
  • Account preferences and settings
  • Subscription plan and payment information (processed by third-party payment providers)

Content You Create:

  • Item photographs you upload
  • Item descriptions or names you enter
  • Generated listings (titles, descriptions, pricing data)
  • CSV export data

Communications:

  • Messages you send to our support team
  • Feedback and survey responses
  • Marketing communication preferences

2.2 Information We Collect Automatically

Usage Data:

  • Pages visited and features used
  • Time spent on the Service
  • Listing generation frequency and patterns
  • Click and interaction data
  • Error logs and diagnostic information

Device and Technical Information:

  • IP address
  • Browser type and version
  • Device type and operating system
  • Screen resolution
  • Referring website
  • Time zone and language preferences

Cookies and Similar Technologies:

  • Session cookies for authentication
  • LocalStorage for app functionality and PWA features
  • Analytics cookies (Google Analytics, if enabled)
  • Service Worker cache for offline functionality

2.3 Information from Third-Party Sources

AI Processing:

  • Image analysis data from OpenAI API
  • AI-generated content metadata

Market Data:

  • Aggregated pricing information from active eBay listings (non-personal)
  • Cached market research data stored in our database

3. How We Use Your Information

3.1 To Provide and Improve the Service

  • Authenticate your account via magic link
  • Generate AI-powered listing content
  • Provide pricing suggestions based on market research
  • Process and optimize uploaded images
  • Enable PWA functionality and offline access
  • Export data in CSV format
  • Deliver customer support

3.2 To Communicate with You

  • Send transactional emails (account verification, password resets, service updates)
  • Send marketing emails about new features, tips, and promotions (with your consent)
  • Respond to your inquiries and support requests
  • Notify you of important changes to the Service or policies

Email Marketing Opt-In/Opt-Out:

  • Transactional Emails: Required for account functionality; cannot be opted out
  • Marketing Emails: Optional; you can opt-in during signup or in account settings
  • Unsubscribe: Click "unsubscribe" in any marketing email or update preferences in your account
  • We will honor opt-out requests within 10 business days

3.3 To Analyze and Improve

  • Analyze usage patterns to improve AI accuracy
  • Study listing generation trends to enhance features
  • Monitor service performance and fix bugs
  • Develop new features based on user behavior
  • Conduct internal research and development (up to 3 years of anonymized data retention)

3.4 For Legal and Security Purposes

  • Comply with legal obligations
  • Enforce our Terms and Conditions
  • Protect against fraud and abuse
  • Respond to legal requests from authorities
  • Protect our rights, property, and safety

4. Data Retention and Deletion

4.1 How Long We Keep Your Data

Email Addresses:

  • Retained while your account is active
  • Deleted within 30 days of account deletion request (unless required by law)

Uploaded Images:

  • Stored for up to 30 days for re-download functionality
  • Automatically deleted after 30 days
  • Immediately deleted upon account deletion request

Generated Listings:

  • Stored for up to 3 years for analytical purposes and service improvement
  • Deleted upon account deletion request
  • Anonymized data may be retained for research purposes

Usage and Analytics Data:

  • Retained for up to 3 years for service improvement
  • Anonymized and aggregated data may be retained indefinitely

Payment Information:

  • We do not store complete payment details
  • Payment processors retain data per their policies
  • Transaction records retained for up to 7 years for tax and legal compliance

4.2 How to Request Data Deletion

You may request deletion of your data at any time by:

  1. Contacting legal@listaza.app with the subject line "Data Deletion Request"
  2. Requesting account deletion through your account settings
  3. Exercising your rights under GDPR or CCPA (see Section 8)

We will process deletion requests within 30 days, except where we are legally required to retain certain information.

5. How We Share Your Information

5.1 We DO Share Information With:

Service Providers:

  • OpenAI: For AI-powered content generation (images and text are processed via their API)
  • Supabase: For authentication and secure data storage with row-level protection
  • Supabase (pricing cache): Market research data is cached in our Supabase database
  • Payment Processors: For subscription billing (we do not see your full payment details)
  • Google Analytics: For usage analytics and service improvement (if enabled)

Legal Requirements:

  • Law enforcement or government agencies when required by law
  • Legal proceedings, court orders, or subpoenas
  • Protection of our rights, property, or safety

Business Transfers:

  • In connection with a merger, acquisition, or sale of assets
  • Successor entities will be bound by this Privacy Policy

5.2 We DO NOT:

  • Sell your personal information to third parties
  • Share your email with third-party marketing companies
  • Use third-party email marketing tools (we manage our own campaigns)
  • Rent or lease your data
  • Share your data for purposes unrelated to the Service

6. Data Security

6.1 Security Measures

We implement industry-standard security measures to protect your information:

Technical Safeguards:

  • Encryption in transit (HTTPS/TLS)
  • Secure authentication via magic link (no passwords stored)
  • Supabase row-level security for database access
  • Regular security updates and patches
  • Secure API key management

Access Controls:

  • Limited employee access to personal data
  • Role-based access controls
  • Regular security training

Monitoring:

  • Automated threat detection
  • Regular security audits
  • Incident response procedures

6.2 Your Responsibility

You are responsible for:

  • Keeping your email account secure
  • Not sharing magic link access
  • Notifying us of any suspected unauthorized access
  • Using strong passwords for your email provider

6.3 No Guarantee

While we implement strong security measures, no internet transmission or electronic storage is 100% secure. We cannot guarantee absolute security of your information.

7. Third-Party Services and Links

7.1 Third-Party Privacy Policies

Our Service integrates with third-party services that have their own privacy policies:

We are not responsible for the privacy practices of these third parties.

7.2 eBay and Facebook Marketplace

Listaza is NOT affiliated with eBay or Facebook. When you use generated listings on these platforms:

  • You are subject to their privacy policies
  • Any data you publish becomes subject to their terms
  • We are not responsible for how these platforms handle your information

8. Your Privacy Rights

8.1 Rights for All Users

Regardless of your location, you have the right to:

  • Access: Request a copy of the personal information we hold about you
  • Correction: Request correction of inaccurate or incomplete information
  • Deletion: Request deletion of your personal information (with certain exceptions)
  • Data Portability: Request your data in a machine-readable format
  • Objection: Object to certain processing of your personal information
  • Withdrawal of Consent: Withdraw consent for marketing emails or optional data processing

8.2 GDPR Rights (European Economic Area)

If you are located in the EEA, you have additional rights under the General Data Protection Regulation (GDPR):

Legal Basis for Processing:

  • Contract Performance: To provide the Service you requested
  • Legitimate Interest: To improve our Service, prevent fraud, and ensure security
  • Consent: For marketing communications (where applicable)
  • Legal Obligation: To comply with laws and regulations

Additional Rights:

  • Right to lodge a complaint with your local data protection authority
  • Right to restriction of processing
  • Right to object to automated decision-making

Data Transfers:

  • Your data may be transferred to and processed in the United States
  • We rely on standard contractual clauses and other legal mechanisms for transfers

8.3 CCPA Rights (California Residents)

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA):

Right to Know:

  • Categories of personal information collected
  • Sources of personal information
  • Business purpose for collecting information
  • Categories of third parties we share information with

Right to Delete:

  • Request deletion of personal information (with certain exceptions)

Right to Opt-Out:

  • We do not sell personal information, so opt-out does not apply

Right to Non-Discrimination:

  • We will not discriminate against you for exercising your privacy rights

Authorized Agent:

  • You may designate an authorized agent to make requests on your behalf

Verification:

  • We may require verification of your identity before processing requests

8.4 How to Exercise Your Rights

To exercise any of your privacy rights:

  1. Email: legal@listaza.app with subject line "Privacy Rights Request"
  2. Include:
    • Your full name and email address associated with your account
    • Specific right(s) you wish to exercise
    • Any supporting documentation (if using authorized agent)

Response Time:

  • We will respond within 30 days (45 days for complex requests)
  • We may request additional information to verify your identity

9. Children's Privacy

Listaza does not have a minimum age requirement, as our Service only generates listing content and does not facilitate actual sales transactions.

Parental Consent:

  • Users under 18 should obtain parental or guardian permission before using the Service
  • We do not knowingly collect personal information from children under 13 without parental consent

If You Are a Parent/Guardian:

  • If you believe your child has provided information without your consent, contact legal@listaza.app
  • We will delete the information upon verification

10. International Data Transfers

Data Processing Location: Our servers and service providers are primarily located in the United States. By using Listaza, you consent to the transfer of your information to the United States.

Protections for International Transfers:

  • Standard contractual clauses
  • Adequate security measures
  • Compliance with applicable data protection laws

Your Rights Remain: Even if your data is processed in the United States, you retain all privacy rights described in Section 8.

11. Cookies and Tracking Technologies

11.1 Types of Cookies We Use

Essential Cookies:

  • Authentication and session management
  • Security and fraud prevention
  • PWA functionality
  • Cannot be disabled

Analytics Cookies:

  • Google Analytics (if enabled)
  • Usage patterns and feature performance
  • Can be disabled via browser settings

LocalStorage:

  • App preferences and settings
  • PWA offline functionality
  • Cached data for performance

11.2 Managing Cookies

Browser Controls:

  • Most browsers allow you to refuse or delete cookies
  • Disabling essential cookies may impair Service functionality

Analytics Opt-Out:

Do Not Track:

  • We do not currently respond to "Do Not Track" browser signals

12. California "Shine the Light" Law

California residents may request information about our disclosure of personal information to third parties for direct marketing purposes.

We do not disclose personal information to third parties for their direct marketing purposes.

If this changes, California residents may request information once per calendar year by contacting legal@listaza.app.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect:

  • Changes in our practices
  • Changes in applicable laws
  • New features or services
  • Feedback from users

Notice of Changes:

  • Updated "Last Updated" date at the top of this policy
  • Email notification for material changes (to users who have not opted out)
  • In-app notification for significant changes
  • 30 days' notice for changes that materially reduce your rights

Your Continued Use: Continued use of the Service after changes constitutes acceptance of the updated Privacy Policy. If you do not agree, you should discontinue use and request account deletion.

14. Data Breach Notification

In the event of a data breach that affects your personal information:

Our Response:

  • Immediate investigation and containment
  • Assessment of scope and impact
  • Notification to affected users via email
  • Notification to relevant authorities (as required by law)

Your Actions:

  • Follow recommended security steps in our notification
  • Monitor your accounts for suspicious activity
  • Change passwords if advised

Timeline:

  • We will notify you without undue delay and within legally required timeframes (typically 72 hours for GDPR, varies by jurisdiction)

15. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices:

Email: legal@listaza.app Subject Line: "Privacy Inquiry"

For Specific Requests:

  • Data Access Request
  • Data Deletion Request
  • GDPR/CCPA Rights Request
  • Privacy Complaint
  • Data Breach Report

Response Time: We will respond to privacy inquiries within 10 business days and formal rights requests within 30 days (or as required by law).

16. Supervisory Authority

EU/EEA Users: You have the right to lodge a complaint with your local data protection authority if you believe we have violated your privacy rights under GDPR.

California Users: You may contact the California Attorney General's office regarding CCPA complaints:

17. Accessibility

We are committed to making this Privacy Policy accessible to all users. If you have difficulty accessing this policy or need it in an alternative format, please contact legal@listaza.app.

BY USING LISTAZA.APP, YOU ACKNOWLEDGE THAT YOU HAVE READ AND UNDERSTOOD THIS PRIVACY POLICY AND AGREE TO THE COLLECTION, USE, AND DISCLOSURE OF YOUR INFORMATION AS DESCRIBED HEREIN.

Appendix: Summary of Key Points

What We Collect:

  • Email address, uploaded images, generated listings, usage data

How We Use It:

  • Provide the Service, AI generation, pricing suggestions, service improvement

How Long We Keep It:

  • Images: 30 days
  • Listings: Up to 3 years (deletable on request)
  • Email: Until account deletion

Who We Share With:

  • OpenAI, Supabase, payment processors, analytics
  • We do NOT sell your data

Your Rights:

  • Access, correct, delete, export your data
  • Opt-out of marketing emails
  • GDPR and CCPA rights apply

How to Contact Us: legal@listaza.app

Last Updated: February 10, 2026