Privacy policy

This policy explains what ListSooner (“we,” “us”), operated by a sole proprietor based in Iowa, collects when you use our website and editor, how we use it, and the choices you have. We don’t sell your personal information or your photos.

What we collect

• Account details: your email address, and your name and profile photo if you sign in with Google. Passwords are handled by our authentication provider; we never see them in plain text.
• Photos and edits: the photos you upload, the edits and instructions you choose, and the results. Your browser re-saves each photo before upload, which strips embedded camera and location (GPS) data.
• Billing: your plan, purchases, and subscription status. Card details go directly to Stripe; we never receive or store your full card number.
• Teams and branding: team names, members’ emails and roles, invitations, saved looks, and logos you upload.
• Usage and device data: edit counts and history needed to bill fairly, pages viewed and features used, browser and device type, approximate location from your IP address, and server logs used to keep the service secure and working.

How we use it

• to make your edits, save them for you, and run your account and team;
• to charge for plans and packs, count your edits, and refund failed ones;
• to send service email such as receipts and team invitations;
• to understand which features are used and fix problems;
• to prevent fraud and abuse, and to meet legal and tax obligations.

We may show edited images you create, and the photos they came from, as examples of our work on our website, social media, ads, and sales materials, as our Terms of service (section 3) describe. When we do, we leave out your name, the property’s address, and anything else that identifies you or the property, unless you agree. You can opt out any time by emailing hello@listsooner.com. We don’t sell or rent any of your data.

AI processing

To edit a photo, we send it with your chosen instructions to AI image models (currently from Google and OpenAI) through Lovable’s AI gateway. They process it only to return the result to us. We don’t use your photos to train our own models.

Who we share it with

We share data only with service providers that help us run ListSooner, under their own privacy terms:

• Lovable and Supabase: hosting, database, sign-in, and file storage;
• Google and OpenAI, through Lovable’s AI gateway: photo editing and suggestions;
• Stripe: payments and subscriptions;
• PostHog: product analytics;
• Resend: service email;
• Google (Tag Manager, Analytics, and Ads): measuring visits and which ads lead to an account or a purchase;
• Meta (Facebook and Instagram): the same measurement, in the browser and from our server when a payment succeeds;
• X: the same measurement for ads on X.

Members of a team you belong to can see that team’s photos and settings. We may also share information if the law requires it, to protect people’s rights and safety, or as part of a sale or transfer of the business, in which case this policy continues to apply to your data.

How long we keep it

• Uploaded originals: deleted once processed; leftovers are removed within two days.
• Finished edits: 30 days, then deleted automatically.
• Account and team data: until you delete your account.
• Billing and edit-usage records: as long as needed for accounting, tax, and dispute purposes.

Cookies, advertising, and analytics

We use your browser’s storage to keep you signed in and remember settings. We also use analytics and advertising tags — Google Tag Manager, Google Analytics, Google Ads, the Meta pixel, and the X pixel — to measure page views and which campaigns lead to an account or a payment. Those tags can set cookies and similar identifiers (including ad click IDs).

If you arrive from an ad or a campaign link, we store the campaign parameters (such as utm_source) and click identifiers in first-party storage for 30 days, and save them on your account when you sign up. That lets us understand cost per signup even when a browser blocks a pixel. We don’t sell this information. You can block cookies and tracking in your browser. A cookie banner is not shown yet; until it is, these tags run as described here. Blocking cookies does not stop the editor from working, but the editor does need sign-in storage.

Security

Photos are kept in private storage that only your account (and your team, for team work) can access, data is encrypted in transit, and access is limited to what each part of the service needs. No system is perfectly secure, so please use a strong password and tell us right away if you think your account has been misused.

Your choices and rights

You can ask to see, correct, export, or delete your personal information, or to close your account, by emailing hello@listsooner.com. We will confirm your identity and respond within 30 days. Depending on where you live, you may have further rights under state privacy laws; we honor these requests for everyone, and we won’t treat you differently for making one.

Children

ListSooner is for business use by adults. We don’t knowingly collect information from anyone under 18.

Where data is processed

We and our providers process data in the United States and other countries where they operate. By using ListSooner, you understand your information may be transferred there.

Changes

We may update this policy. If a change is material, we will tell you by email or in the app before it takes effect.

Contact

Privacy questions or requests: hello@listsooner.com.