Effective date: June 22, 2026
This Privacy Policy covers the eBay Listing AI website and the user accounts associated with it. The eBay Listing AI Chrome extension has its own separate privacy policy, available on its Chrome Web Store listing — installing and using the extension itself is governed by that policy.
Welcome to eBay Listing AI.
This Privacy Policy ("Policy") explains how we collect, use and safeguard information when you visit the eBay Listing AI website and when you create or use an eBay Listing AI account (hereinafter referred to as the "Website" or "Service").
By using the Service, you agree to the collection and use of information in accordance with this Policy. Unless otherwise defined here, the terms used in this Policy have the same meanings as in our Terms and Conditions.
SERVICE means the eBay Listing AI website and account system.
PERSONAL DATA means data about a living individual who can be identified from those data (or from those and other information either in our possession or likely to come into our possession).
USAGE DATA is data collected automatically, generated by the use of the Service or from Service infrastructure itself (for example, the duration of a page visit).
COOKIES are small files stored on your device (computer or mobile device).
DATA CONTROLLER means a natural or legal person who determines the purposes for which and the manner in which any personal data are, or are to be, processed. For the purpose of this Policy, we are the Data Controller of your data.
DATA PROCESSORS (OR SERVICE PROVIDERS) means any natural or legal person who processes the data on behalf of the Data Controller.
THE USER is the individual using our Service.
When you create an account, we collect and store:
• Your email address (used to confirm your account, to contact you about your account, and to reset your password)
• A hashed form of your password (we never store or see your password in plain text). If you sign in with Google, a random password is generated that you never use, because you authenticate through Google instead.
We do not ask for your phone number or postal address. We also do not ask you to type your real name — though if you choose to sign in with Google, we receive and store your name as described below.
You can create your account or sign in using "Sign in with Google". If you choose this option, Google sends us a signed token containing basic profile information from your Google Account, of which we collect and store:
• Your email address, and whether Google has verified it
• Your first and last name, as held by your Google Account
The token also identifies your Google Account to us so we can match it to your account on later sign-ins. We do not receive or store your Google password, and we request only this basic profile and email information — we do not request access to your Gmail, contacts, Drive, or any other Google service. We use this data solely to create and authenticate your account. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.
When you use features of the Service that are linked to your account, we record aggregate counters associated with your account (for example, the number of AI-assisted actions used in the current billing or beta cycle, and the start date of that cycle). We use this information to enforce usage limits and to operate the Service.
When you visit the Website, our servers automatically log basic information that your browser sends, including your IP address, browser type and version, the pages you visit, the time and date of your visit, the time spent on those pages, and referrer URLs. We also log IP addresses in connection with security-relevant events such as sign-up, login, email confirmation and password reset, so we can detect and prevent abuse.
We may derive your approximate country and city from your IP address. We use this information to understand where our users come from and to help comply with regional legal requirements.
The Website sets a small number of technical cookies:
Session Cookie (sessionid): Used to authenticate you and maintain your login session. Created by Django, our web framework. Essential for the Service to function.
CSRF Protection Cookie (csrftoken): Protects form submissions against Cross-Site Request Forgery attacks. Required for security.
Preference Cookies: May be used to remember your preferences and settings.
Google Sign-In Cookies (e.g. g_csrf_token, g_state): Set by Google's "Sign in with Google" feature on our sign-in page to secure the sign-in exchange and remember its state. These are present only if you use Google sign-in.
Our sign-in page loads Google's "Sign in with Google" script from Google's servers. When that page loads, Google may receive your IP address and basic request information and may set its own cookies, in accordance with Google's Privacy Policy. This happens only on pages that offer Google sign-in.
You can configure your browser to refuse cookies or to notify you when a cookie is being set. Note that some features of the Service will not function correctly without them.
If you contact us by email, we receive your email address and the contents of your message. We use this information only to respond to your enquiry.
We use the data we collect for the following purposes:
• To create and maintain your account
• To send you account-related emails (email confirmation, password reset, account notifications)
• To operate the Service and enforce usage limits
• To understand how the Website and Service are used (aggregate analytics)
• To detect, prevent and address technical issues, abuse and fraud
• To respond to enquiries you send us by email
• To comply with our legal obligations
Account Data: Retained until you request account deletion. If you ask us to delete your account, we will delete your account information, subject to any legal obligation to retain specific records.
Usage counters: Stored alongside your account and removed together with it.
Server logs: Retained only for as long as is reasonably necessary to operate and secure the Service (typically a short period), except where we are required to retain them longer for security or legal reasons.
Email correspondence: Retained for as long as necessary to resolve your enquiry and keep a reasonable record of customer contacts.
Your information may be transferred to and maintained on servers located in the United States or other jurisdictions where our hosting and service providers operate. Data-protection laws in those jurisdictions may differ from those in your country.
Your submission of information to the Service represents your agreement to such transfer.
We take reasonable steps to ensure that your data is treated securely and in accordance with this Policy.
We may disclose information we collect:
For Law Enforcement: If required to do so by law, or in response to valid requests by public authorities.
Business Transaction: If we are involved in a merger, acquisition, or asset sale, your information may be transferred.
Service Providers: To contractors and third-party service providers that support the operation of the Service (for example, hosting, email delivery and analytics providers), bound to process data only on our behalf and for these purposes.
Protection of Rights: Where we believe disclosure is necessary to protect the rights, property, or safety of our users, the public, or ourselves.
We do not sell or rent your personal information to third parties.
The security of your data is important to us. We store passwords only in hashed form, use HTTPS for transport, and apply standard framework protections (including CSRF protection and session security) to the Service. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.
If you are a resident of the European Union (EU) or the European Economic Area (EEA), you have certain data protection rights under the General Data Protection Regulation (GDPR).
In certain circumstances, you have the following rights:
• The right to access, update or delete information we have about you
• The right of rectification — to have inaccurate or incomplete information corrected
• The right to object to our processing of your Personal Data
• The right to restrict our processing of your personal information
• The right to data portability — to receive your Personal Data in a structured, machine-readable format
• The right to withdraw consent at any time, where we rely on your consent
To change the email address associated with your account, to delete your account, or to exercise any of the other rights above, please contact us at nicelistermain@gmail.com. We may ask you to verify your identity before responding.
You also have the right to lodge a complaint with your local Data Protection Authority.
CalOPPA is a California state law that requires commercial websites collecting personally identifiable information from California consumers to post a conspicuous privacy policy. In accordance with CalOPPA:
• Visitors can browse the public pages of the Website without creating an account
• Our Privacy Policy link includes the word "Privacy" and can easily be found from the Website footer
• Users will be notified of any privacy policy changes on this page
• Users can update their account details from their account page, or email us at nicelistermain@gmail.com to change or delete their personal information
We honor Do Not Track signals. When a Do Not Track browser mechanism is enabled, we do not use analytics or other non-essential tracking.
If you are a California resident, you are entitled under the California Consumer Privacy Act (CCPA) to learn what data we collect about you, to request deletion of your data, and to know that we do not sell it.
You may request from us:
• The categories of personal information we have collected about you
• The categories of sources from which we collect personal information
• The business or commercial purpose for collecting it
• The categories of third parties with whom we share it
• The specific pieces of personal information we have collected about you
We do not sell or rent your personal information for any purpose.
To exercise your California rights, please email us at nicelistermain@gmail.com.
We may employ third-party companies and individuals to facilitate our Service ("Service Providers"), provide the Service on our behalf, perform Service-related tasks, or assist us in analysing how the Service is used. These third parties have access to your Personal Data only to perform these tasks on our behalf and are obligated not to disclose or use it for any other purpose. Typical categories include:
• Hosting providers — to run our servers and store data
• Email delivery providers — to send account-related emails such as email-confirmation and password-reset messages
• Authentication providers — to offer "Sign in with Google" and verify your identity when you choose that option (Google LLC)
• Analytics providers — to help us understand aggregate Website usage
We use Simple Analytics (provided by Simple Analytics B.V., based in the Netherlands) as our website analytics provider. Simple Analytics is a privacy-first service that does not use cookies, does not collect or store your IP address, and does not create a profile of you or track you across other websites. It collects only aggregated, anonymous statistics — such as page views, referrer URLs, and the approximate country a visit originated from — which we use to understand overall Website usage. Because it stores no personal data, it does not identify individual visitors.
You can review how Simple Analytics handles data in its own privacy statement at simpleanalytics.com/privacy.
We do not use behavioral remarketing or advertising services. We do not serve ads and do not track you across third-party websites.
The Service contains links to third-party sites — in particular, the Chrome Web Store listing for the eBay Listing AI extension and the Google AI Studio page where you obtain a Gemini API key. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services. We encourage you to review the privacy policy of every site you visit.
The Service is not intended for use by children under the age of 18. We do not knowingly collect personally identifiable information from children under 18. If you become aware that a child has provided us with personal information, please contact us so we can remove it.
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated effective date. For material changes that affect your account, we will also notify you by email or through a prominent notice on the Service. You are advised to review this Policy periodically.
Have questions about this Privacy Policy?
Please contact us by email: nicelistermain@gmail.com