Privacy Policy

1. Who we are

This Privacy Policy describes how Ribble LLC ("we", "us") collects, uses, and shares information when you use ListingSmith (the "Service"). Contact: Hello@listingsmith.ai.

2. Information we collect

• Account information. Your email address and a hashed password, managed by our authentication provider.
• Content you provide. Project data such as keyword files, product names and details, listing text, and images you upload (including reference photos).
• Generated content. The listings, image briefs, images, and A+ Content the Service creates for you, stored with your projects.
• Usage and billing records. Per-action usage logs (which feature was used, token/image counts, timestamps) and credit transactions (amounts, balances). Payments are processed by Stripe — we receive subscription status and a customer reference, never your full card number.
• Website and product page addresses. If you use brand kit intake or product import, the website or Amazon listing URLs you provide, and the publicly available content retrieved from them.
• Diagnostics. Application errors are logged automatically (error message, page URL, browser user-agent). If you submit a bug report, it additionally includes the description you write and a snapshot of your recent browser console output for this app, your current page, and screen size — the report dialog lists exactly what is attached before you send it.
• How you found us. If you arrive from a link that carries campaign tags (for example a link under one of our videos) or from another website, we keep the tag values, the referring site's domain, and the first page you visited, in your browser for 30 days and with your account when you sign up. After subscribing you may also answer an optional one-tap question about where you heard of the Service. We use this only to understand which channels bring people here.
• Product usage. We record which days you use the app (one entry per day, not page by page) and a few product moments, such as downloading an export, opening the editor or seeing the upgrade offer, so we can tell whether the product is working for people who sign up. This stays with your account and is never sold or shared.

The Service stores authentication tokens in your browser to keep you signed in. Our pages also use Vercel Web Analytics, which is cookieless, and two services that set cookies in your browser: Google Analytics, so we can see how people move through the site and which Google ads bring them here, and the Meta Pixel (Facebook and Instagram), so we can measure our advertising there and show our ads to people who have visited this site. Both receive the pages you visit, the identifiers they place in your browser, and a few funnel events (account created, first page generated, checkout started, purchase made, with the amount). Our server also sends those funnel events to Meta directly (Meta's Conversions API), together with your email address hashed before it is sent, your IP address, your browser's user agent string, and the Meta click and browser identifiers (fbclid, _fbp, _fbc) when they are present, so our ad measurement keeps working when the browser-side pixel is blocked. When you arrive from a Google or Meta ad, the ad's click identifier (gclid, fbclid) is stored with your signup record. Neither service receives your project content, keywords, or images. See section 7 for how to opt out.

3. How we use information

• To provide the Service: storing your projects, generating content, tracking credits, and processing payments;
• To operate AI features: your inputs (product information, keywords, reference photos) are sent to the AI providers listed below to generate your content;
• To fix problems: diagnostics and bug reports are used to identify and resolve defects;
• To communicate with you about your account, billing, and Service changes;
• To protect the Service: enforcing usage limits, preventing fraud and abuse.

We do not sell your personal information.

4. Service providers we share data with

• Supabase — database, file storage, and authentication (data hosted in the United States, us-west region);
• Vercel — application hosting, serverless functions, and cookieless web analytics;
• Google (Analytics) — receives page views and the funnel events described in section 2 to report site traffic and to measure our Google Ads campaigns;
• Meta Platforms (Meta Pixel and Conversions API) — receives page views and the funnel events described in section 2, from your browser and from our server (hashed email address, IP address, browser user agent, click identifiers), to measure our Facebook and Instagram ads and to build advertising audiences of site visitors;
• Anthropic (Claude) — processes your text inputs (product details, keywords, listing context) to generate listing and A+ text content;
• Google (Gemini) — processes your image prompts and reference photos to generate product images;
• OpenAI (GPT Image) — processes your image prompts, reference photos, and product details to generate seamless A+ Content strips;
• Firecrawl — retrieves content from the website and product page URLs you provide for brand kit intake and product import;
• Stripe — payment processing for subscriptions and credit packs.

These providers process data on our behalf to deliver the Service. Per their API terms, Anthropic, Google, and OpenAI do not use API-submitted content to train their models.

We may also disclose information if required by law, or in connection with a merger, acquisition, or sale of assets (with notice to you).

5. Data retention

• Account and project data are retained while your account is active.
• If you delete a project or your account, associated content is deleted from our production systems within a reasonable period; residual copies may persist in backups for a limited time.
• Usage, credit, and billing records may be retained longer where needed for accounting, tax, and audit purposes.
• Diagnostic logs are retained for up to 12 months, then deleted.

6. Security

Your data is protected with industry-standard measures: encrypted connections (TLS), encryption at rest via our hosting providers, row-level access controls so users can only read their own account data, and server-side enforcement of all billing and access decisions. Images you upload or generate are stored at long, randomized addresses: they are not listed anywhere public, and only someone with the exact link can view one, the same way link sharing works in most document tools. No system is perfectly secure; notify us immediately at Hello@listingsmith.ai if you suspect a problem.

7. Your rights and choices

• You can access and edit your project content in the app, and export your work at any time (DOCX/ZIP).
• You can request a copy of your personal data, correction, or deletion of your account and data by emailing Hello@listingsmith.ai.
• You can opt out of Google Analytics and the Meta Pixel by blocking them with your browser's tracking protection or an ad blocker (the Service works the same either way). Google offers a browser add-on for this at tools.google.com/dlpage/gaoptout, and you can control how Meta uses its data in your Facebook or Instagram ad preferences (facebook.com/adpreferences). We honor the Global Privacy Control browser signal: when your browser sends it, neither is loaded and our server sends nothing about you to Meta. We also do not load them, or send server-side events, for visitors in the EEA, the UK or Switzerland.
• Depending on where you live (e.g., EEA/UK under GDPR, California under CCPA/CPRA), you may have additional statutory rights, including the right to lodge a complaint with a supervisory authority. We honor verified requests as required by applicable law.

8. Children

The Service is a business tool, is not directed at children, and may not be used by anyone under 18. We do not knowingly collect information from children.

9. Changes to this policy

We may update this Privacy Policy from time to time. For material changes we will give notice (for example by email or an in-app notice) before the changes take effect. The "Effective date" above always reflects the current version.

10. Contact

Privacy questions or requests: Hello@listingsmith.ai, or by mail: Ribble LLC, 40 Freedom Ct, Greer, SC 29650, USA.