ListPilot ("we", "our", or "us") is a Chrome browser extension that helps users create eBay listings from product pages. This Privacy Policy explains what information we collect, how we use it, and your rights.

1. Information We Collect

ListPilot collects the minimum information necessary to operate:

• License key: Stored locally in your browser to verify your subscription.
• Device fingerprint: A unique identifier generated from your browser's extension ID and a locally stored random token. Used to enforce the one-device-per-license policy. Never linked to personal identity.
• Purchase email: Collected via Stripe (our payment processor) when you subscribe. Used only to deliver your license key.
• Product page data: When you use ListPilot on a product page, the extension reads publicly visible product information (title, price, images, description). This data is sent to the Anthropic Claude API to generate your eBay listing and is not stored by us.
• Listing count: A counter of how many listings you've generated, stored in our database associated with your license.

2. Information We Do Not Collect

• We do not collect your browsing history.
• We do not collect or store your Anthropic API key (it is stored locally in your browser only).
• We do not sell, rent, or share your personal information with third parties for marketing purposes.
• We do not collect payment information (payments are handled by Stripe).

3. How We Use Your Information

• To validate your license and prevent unauthorized sharing.
• To deliver your license key after checkout.
• To display usage statistics in your account dashboard.

4. Third-Party Services

• Anthropic Claude API: Product data is sent to Anthropic's API to generate listing content. Anthropic's Privacy Policy applies to this data.
• Stripe: Payment processing and subscription management. Stripe's Privacy Policy applies.
• Supabase: Our database provider. License records are stored on Supabase's infrastructure.

5. Data Retention

License records are retained for the duration of your subscription and up to 90 days after cancellation. You may request deletion of your data at any time by contacting us.

6. Your Rights

You have the right to access, correct, or delete your personal data. To exercise these rights, contact us at the address below.

7. Security

License keys are cryptographically signed (HS256 JWT) and device-locked. Database connections use SSL. We follow industry-standard practices to protect your data.

8. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated date.

9. Contact

For privacy questions or data requests, reach us in our Discord.

---