Privacy Policy

1. Introduction

ListedIn AI ("we," "us," or "our") respects your privacy. This Privacy Policy explains what information we collect, how we use it, and your choices regarding your data when you use our website and service at listedinai.com ("the Service").

2. Information We Collect

2.1 Information You Provide

• Account information: Email address, display name, and password (or Google OAuth credentials) when you create an account.
• Business information: Business name, domain/website URL, city, region, service specialties, and category when you create a project for scanning.
• Payment information: Billing details are collected and processed by Stripe. We do not store your credit card number. We store your Stripe customer ID and subscription status.

2.2 Information Generated by the Service

• Scan results: AI model responses, visibility scores, mentions, competitor data, perception summaries, and citation data generated when we scan AI models on your behalf.
• Usage data: Scan counts, project counts, last scan dates, and feature usage for your account.

2.3 Information Collected Automatically

• Cookies: We use essential cookies for authentication and session management (provided by Supabase). These are strictly necessary for the Service to function.
• Analytics: We use Google Analytics to understand how visitors interact with our website. Google Analytics uses cookies to collect anonymous usage data such as pages visited, time on site, and referral source. This data is aggregated and does not personally identify you. You can opt out of Google Analytics using the Google Analytics Opt-out Browser Add-on.
• Log data: Our servers may log your IP address, browser type, and access times for security and debugging purposes.

3. How We Use Your Information

We use your information to:

• Provide and operate the Service, including running AI visibility scans
• Process payments and manage your subscription
• Send transactional emails (welcome, scan complete, PDF reports)
• Send marketing emails (conversion drip sequences, product updates) — you can opt out at any time from your Account page
• Improve the Service through aggregated, anonymous usage analytics
• Provide customer support
• Detect and prevent fraud or abuse

We do not sell, rent, or trade your personal information to third parties for their own marketing purposes.

4. Third-Party Services

We share information with the following third-party services as necessary to operate the Service:

Each third-party service operates under its own privacy policy. We encourage you to review their policies.

5. Cookies

We use the following types of cookies:

• Essential cookies (Supabase): Required for authentication and session management. These cannot be disabled without breaking the Service.
• Analytics cookies (Google Analytics): Used to understand usage patterns. These are optional — you can opt out using the Google Analytics Opt-out Add-on or your browser's cookie settings.

We do not use advertising or tracking cookies.

6. Data Retention

• Free accounts: Scan data is retained for 30 days, after which it is archived.
• Pro accounts: Scan data is retained for 365 days.
• Account data: Your account information is retained as long as your account is active.
• Deleted accounts: When you delete your account, scan data is archived, scheduled scans are disabled, and your authentication credentials are permanently deleted.

7. Your Rights and Choices

You have the following rights regarding your data:

• Access and export: You can download all your data at any time from your Account page using the "Download My Data" feature.
• Correction: You can update your profile information from your Account page.
• Deletion: You can permanently delete your account from your Account page. This action is irreversible.
• Email preferences: You can control which emails you receive (scan reports, marketing) from your Account page. Granular toggles are provided for each email category.
• Analytics opt-out: You can opt out of Google Analytics tracking at any time.

8. Data Security

We take reasonable measures to protect your data, including:

• Encrypted data transmission (HTTPS/TLS)
• Row-level security (RLS) policies ensuring users can only access their own data
• Secure authentication via Supabase (with cookie-based sessions)
• Payment data handled entirely by Stripe (PCI DSS compliant)
• Role-based access controls for administrative functions

No system is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

9. Children's Privacy

The Service is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from children. If we learn that we have collected data from a child under 18, we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of material changes via email. Your continued use of the Service after changes constitutes acceptance of the updated policy.

11. Contact

If you have questions about this Privacy Policy or your data, please contact us at: support@listedinai.com