Privacy Policy

1. Who we are

The controller of the LISTAI service (listai.style) and its associated browser extension is SERHII TYTARENKO, a sole trader (entrepreneur individuel) registered in France, SIREN 102 719 770, address: 129 Allée Mériel, 83700 Saint-Raphaël, France; trading as LIS Solutions. Data enquiries: contact@listai.style.

2. What data we process, and why

• Account: your email address — for signing in (a one-time code; the service has no passwords) and for contacting you about the service.
• Profile: name, professional name, country, language, currency, profile photograph — to set your workspace up for you.
• Working data: the products you save (data and images from store pages, your notes), the looks you compose and your client records. All of it is the content of your own private workspace.

3. Legal bases for processing

We process data on the bases set out in the GDPR (Article 6):

• Performance of a contract — account, profile and working data: the service cannot be provided without processing them.
• Legitimate interests — technical logs, error reports and keeping the service secure.
• Consent — where it is separately required; it can be withdrawn at any time.
• Legal obligation — where retention or disclosure is required by law.

4. Your clients' data and photographs

If you add information or photographs about your clients to LISTAI, they are used solely to provide the service to you: they do not enter analytics or error reports, they are not passed to third parties for their own purposes, and they are not used to train models. You confirm that you have a lawful basis for uploading such data, and you remain responsible for your relationship with your clients.

5. The browser extension

The extension performs no background or bulk collection: it extracts the data of one specific product page only after your explicit action ("Capture") and sends the data you selected to your LISTAI account. Individual textual product fields may then be processed by our sub-processors (section 8), including OpenAI for normalisation. The extension does not track your browsing history, does not read cookies, passwords or the contents of other tabs, and does not scan pages in the background. Your session token is stored locally in the browser and is sent only to LISTAI servers.

6. User-generated content

Certain material — page screenshots, for instance — is created by you, through your explicit action and using your own device's system tools. LISTAI performs no automated capture of website content; we store such material on your behalf, in your private workspace, for your professional use.

7. Where data is stored

Primary data storage is in the European Union: the database, authentication and files are with Supabase (Ireland region); the application is hosted by Vercel. Certain sub-processors (section 8) may process data outside the EEA — in those cases the transfer relies on the mechanisms provided for by the GDPR (Standard Contractual Clauses and/or the EU–U.S. Data Privacy Framework).

8. Sub-processors

• Supabase — database, authentication, file storage (EU, Ireland).
• Vercel — hosting for the web application.
• ZeptoMail (Zoho) — delivery of sign-in code emails.
• Sentry — error reports; configured to exclude photographs, images and product content from events.
• OpenAI — normalisation of textual product data at capture (title, composition, category). Photographs — neither yours nor your clients' — are ever sent to OpenAI.

9. Technical logs and cookies

We keep technical logs of the service (including request identifiers) to diagnose failures. The site uses strictly necessary cookies only — to maintain your sign-in session. There are no advertising or third-party analytics cookies.

10. Retention and deletion

Account and workspace data is kept for as long as your account is active. On request to contact@listai.style we will delete the account and all associated data, including files in storage, within 30 days, and confirm the deletion. Technical logs and error reports are kept for no more than 90 days; sign-in code emails are not retained after delivery.

11. Your rights

Under the GDPR you have the right to request access to your data, its rectification, erasure, restriction of processing and portability, and to object to processing. Write to contact@listai.style. You also have the right to lodge a complaint with a supervisory authority — in France, the CNIL.

12. Age

The service is not intended for people under 16.

13. Changes

We may update this policy; we will announce material changes on the site or by email. The date of the current version is shown at the top.