Replace the highlighted operator and contact fields, confirm provider transfer terms and account-record retention, and review this analytics description before public launch. These are drafts, not final legal advice.
Who runs Listvint
Listvint is operated by [legal name or registered business name], trading as Listvint. The data controller is the operator named here.
Controller contact address: [geographical business address or registered office, as required]. Privacy contact: [privacy contact email].
Information we use
- Account details: email address, account identifier, password credentials handled by Supabase Auth, and sign-in or email-confirmation status. If you use Google sign-in, Google provides the account details needed to create and authenticate your Listvint account; Listvint does not receive your Google password.
- Photos and listing details: the clothing photo you submit, plus any brand, item, size, condition or selling-region details you provide for an estimate or listing analysis.
- Plan and usage records: plan, subscription status and billing identifiers, plus the feature type, time and status of quota-consuming requests. We use these records to apply plan limits and prevent misuse.
- Usage analytics: daily totals for page views, fixed product action names, referring-site domains, country and broad browser/device categories. Lucid does not create visitor or session IDs, store individual visit histories, or receive photo files, listing text, account emails, passwords or payment details. The web request still passes through Cloudflare, which processes connection information to deliver the service.
- Email preferences: whether you selected product emails, and whether you later unsubscribed. Marketing emails are optional and are sent only after you choose them.
- Technical information: the website and authentication providers may process connection, device and security information needed to deliver and protect the service.
Why we use it
- To create and secure your account, sign you in, and provide the tools you request.
- To send your photos and listing details to the AI service that produces the requested edit, estimate or draft.
- To calculate usage limits, manage subscriptions, respond to support requests and prevent fraud or abuse.
- To understand overall page and feature usage through daily totals and improve Listvint. Analytics is on by default and can be turned off in Privacy settings.
- To send product updates and offers only if you opted in. You can withdraw that choice at any time using the unsubscribe link or by contacting us.
- To meet legal, accounting and payment obligations and to establish or defend legal claims.
Our working lawful-basis choices are contract for the account features you request, legitimate interests for service security and quota enforcement, consent for marketing, and legal obligation where required for records. The operator must confirm the lawful basis for aggregate analytics and whether any statistical-measurement exception applies before publication.
Usage analytics
Aggregate analytics are on by default. You can turn them off at any time with the switch below; the choice is saved in this browser. Turning tracking off stops new counts from this browser but does not erase totals already collected.
Listvint runs a password-protected Lucid Analytics instance on Cloudflare. It stores daily counts for page views and fixed action names such as /price_estimate_complete or /sign_in_failed. It does not store event-level timestamps, visitor or session IDs, individual journeys, photos, item details, account emails, passwords or event properties. Referrer URLs are reduced to their domain; page URLs are reduced to their path.
The worker does not read or store the request IP address. It processes the browser user-agent to classify broad browser, operating system and device categories, and uses Cloudflare-supplied location fields to apply exclusions and count country totals. These request details are used only while handling the request; the analytics database stores the resulting daily counts, not the full user-agent or precise location. Daily counts are retained until the operator manually deletes them; there is no automatic expiry. Dashboard access is password-protected.
Before aggregate-only tracking was introduced, Lucid stored individual event and visit rows with pseudonymous IDs and additional device/location details. Those historical rows have not been deleted and remain in the existing database. They are retained manually and are not used for the new aggregate dashboard.
Photos and AI services
Listvint sends a photo to OpenAI when you request an AI edit, background removal, model photo, price estimate or listing analysis. For estimate and listing-analysis requests, the item details you enter are sent with the photo. The current application code does not save submitted photos to Listvint’s account database or a Listvint photo library; the result is returned to your browser for review and download.
Listvint requests that price estimates and listing analysis are not stored as Responses API application state. OpenAI’s API data controls say API content is not used to train models by default, but request content may appear in abuse-monitoring logs for up to 30 days by default. Longer retention may apply for legal or safety reasons. See OpenAI API data controls.
Do not upload a photo containing another person unless you have the right to do so. AI edits, price ranges and photo observations can be wrong. Check the result yourself; an estimate is not live marketplace data and an observation is not an authenticity check.
Service providers
We use service providers to run Listvint and deliver features. They process information under their own terms and, where applicable, data-processing agreements:
- Supabase provides account authentication and the database for account, plan and usage records. The Listvint project’s deployment region must be confirmed before this notice is final.
- OpenAI processes submitted photos and item details to return the AI output you requested.
- Cloudflare hosts the website and the password-protected Lucid analytics service. Analytics requests are sent while tracking is on; you can switch it off in Privacy settings.
- MailerLite receives a confirmed account email as a non-marketing customer record. If you opt in, it also manages your marketing subscriber status and email preferences.
- Stripe will process payment information if paid checkout is enabled. Listvint stores billing identifiers and subscription status, not full card numbers.
- Our website hosting provider processes requests and technical information to serve and secure the site.
Some providers may process data outside the UK. Before public launch, the operator must confirm each provider’s role, location and applicable international-transfer safeguards in the relevant account agreements.
Browser storage
Listvint uses browser storage to keep your Supabase sign-in session, remember your light or dark theme, keep a short-lived marketing choice until account confirmation, remember the local free-preview allowance, and save an analytics opt-out if you turn tracking off. Analytics is on by default. You can remove the saved theme choice here. Uploaded photos and generated results are held in the browser while you work; they are not saved to an account library by the current app.
Listvint does not use advertising pixels. Analytics controls are described in the Usage analytics section.
How long we keep data
Account and quota records are kept while your account is active so the service can operate and enforce plan limits. You can request account closure and deletion using the privacy contact above. We will remove or anonymise account-linked data unless we need to keep particular records to meet legal, accounting, security or payment-dispute obligations.
Marketing data is kept while you remain subscribed. If you unsubscribe, the address may remain on a suppression list so we can respect that choice. Stripe, Supabase, OpenAI, MailerLite and hosting providers may keep their own records under their published policies and our account settings.
Daily aggregate analytics totals have no automatic expiry and remain in Lucid’s database until the operator deletes them manually. Older event and visit records collected before aggregate-only tracking was introduced also remain in Lucid’s database. Turning analytics off stops future counts from that browser but does not delete prior records. Account, quota, payment, security and provider records follow the retention rules described above and in the relevant account settings; the operator should document their review periods before launch.
Your choices and rights
Depending on where you live and which data-protection law applies, you may be able to request access, correction, deletion, restriction or a copy of your information, object to some uses, or withdraw consent. To make a request, email [privacy contact email]. We may ask for information needed to verify your identity.
You can unsubscribe from marketing at any time. This will not stop essential account, security, payment or service messages.
Contact and complaints
Contact the Listvint operator at [privacy contact email] or at [geographical business address or registered office, as required].
If you are in the UK and are unhappy with our response, you can complain to the Information Commissioner’s Office. If you live elsewhere, you may also contact your local data-protection authority.