Your contact at ListingFlow
Operator: Lutith Luxenfla, Pakistan. Email: teamlisitngflow@gmail.com. WhatsApp: +92 344 4090224.
1. Who controls your data
Lutith Luxenfla, based in Pakistan, operates ListingFlow and controls account, workspace, and support information. Contact teamlisitngflow@gmail.com for privacy requests. Connected platforms independently control information processed under their own terms. You can also use the contact form. We verify identity before fulfilling requests involving private data.
2. Data we collect
- Account information: email, password hash and salt, verification status, role, session, security records, and the stable provider identifier if you link Google sign-in.
- Workspace information: projects, research, listing content, settings, files, asset metadata, production jobs, plan-usage counters, and audit history.
- Connected-service information: encrypted OAuth tokens, shop or Drive identifiers, connection scopes, and results needed to perform requested actions.
- Billing information: customer, subscription, transaction, and status identifiers supplied by the payment provider. ListingFlow does not store full card details.
- Support and technical information: messages, device/browser data, timestamps, security events, and operational errors.
3. Why we process it
We process data to create and secure accounts; provide the workspace and requested integrations; administer grants and subscriptions; deliver support; prevent abuse; meet legal obligations; and understand service reliability. Depending on your location, the legal basis may be contract, legitimate interests, consent, or legal obligation. We do not sell personal information or use customer artwork to make unrelated public products.
4. Service providers and disclosures
Our infrastructure uses Cloudflare for hosting and workspace storage, Resend for transactional email where configured, Etsy and Google for authorized integrations, and Paddle for billing where enabled. We disclose only what is needed for the requested software, security, payment, legal compliance, or a business transfer with appropriate safeguards.
5. International transfers
ListingFlow and its providers may process information outside your country. Where required, we will use recognized transfer mechanisms and provider terms. Provider locations and transfer safeguards will be documented as production deployment is finalized. You can request current details through our support email.
6. Retention
We keep account and workspace data while the account is active and for a limited period needed for recovery, support, security, tax, dispute, or legal obligations. Deletion requests first stop subscription renewals and verify unfinished billing. A seven-day recovery window starts after verification; administrators review removal after that window. If billing cannot be verified, data remains on hold for support review. Recovering an account does not restart renewals. Deleting ListingFlow data does not delete your Etsy listings or Google Drive files. Some transaction, fraud-prevention, or legal records may be retained longer where required. Backups age out on their operational schedule.
7. Your choices and rights
You can review account status, download a workspace export, disconnect Etsy or Drive, cancel paid renewal, and request account deletion. Depending on applicable law, you may also request access, correction, erasure, restriction, portability, objection, or withdrawal of consent, and complain to a data-protection authority. We will verify requests before acting.
8. Security
ListingFlow uses password hashing, verified email, server-side sessions, access checks, encrypted integration secrets, tenant-scoped records, rate limits, and audit events. No service can promise absolute security. Notify us promptly through the contact form if you believe your account or data is at risk.
Google connections and workspace connectors
Google sign-in requests identity and email scopes only. Linking requires a signed-in ListingFlow account and your current password. Drive authorization is separate and uses the drive.file scope for files created or opened through ListingFlow. We do not request access to your entire Drive for sign-in. We do not sell Google user data, use it for advertising, or use it to train generalized models. Our use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including Limited Use requirements where applicable.
When you authorize a compatible client, that client may receive the workspace information returned by the tools you enable. Treat access credentials as passwords and revoke them when no longer needed. Connector access does not grant permission to publish listings or expose stored integration secrets.
9. Children and changes
ListingFlow is for adults and is not directed to children under 18. We may update this policy as the product, providers, or law changes. Material changes will be communicated through the service or account email where appropriate.