Privacy Policy
Last updated: April 17, 2026
1. Who We Are
Listowise is operated by Inventowise ("we", "us", "our"). We provide an AI-powered eBay listing optimization service at listowise.com and through a Chrome browser extension.
2. Data We Collect
2.1 Account Data
- Email address (provided when you sign up or contact us)
- Account creation date
- Email verification status
2.2 Authentication Data
- Session tokens (generated when you sign in via magic link)
- Device identifiers (anonymous UUID for trial usage before sign-up)
2.3 Usage Data
- Credit balance and transaction history (included plan credits, purchased credits, ledger entries)
- AI request logs (task type, token usage, latency, cost — no listing content is stored in logs)
- Rate-limiting counters (per-user, per-IP, per-device)
2.4 Content You Submit
- Draft listing titles and categories
- Selling points and product condition
- Product photos (sent to our AI provider for analysis, not permanently stored on our servers)
2.5 Automatically Collected Data
- IP address (for rate limiting and abuse prevention)
- Language preference (detected from the page locale)
3. How We Use Your Data
- To authenticate your identity and manage your account
- To process AI optimization requests (title, description, photo analysis)
- To track and manage your credit balance
- To send transactional emails (magic link sign-in, account notifications)
- To prevent fraud and abuse via rate limiting and IP analysis
- To monitor service health and AI cost (aggregated, non-personal metrics)
We do not sell, rent, or share your personal data with third parties for marketing.
4. Chrome Extension
The Listowise Chrome extension communicates with our backend API to provide listing optimization directly on eBay pages. The extension:
- Stores your session token locally in Chrome storage (encrypted at rest by Chrome)
- Sends listing data (titles, categories, photos) to our API for processing
- Does not access browsing history, bookmarks, or data on non-eBay pages
- Does not inject tracking scripts or analytics into any webpage
5. AI Processing
When you use Listowise to optimize a listing, your draft content and photos are sent to our AI provider (Anthropic) for processing. We do not permanently store the content of your AI requests or responses on our servers. Only metadata (token counts, latency, cost) is logged for billing and service monitoring.
Anthropic processes data under their privacy policy and does not use API inputs/outputs for model training.
6. Third-Party Services
We use the following services to operate Listowise:
- Vercel — application hosting, edge network, performance metrics, and basic product analytics (privacy policy)
- Inventowise stats service — aggregate page view and product usage trends
- Neon — PostgreSQL database (privacy policy)
- Upstash — Redis for rate limiting and caching (privacy policy)
- Anthropic — AI model provider (privacy policy)
- Resend — transactional email delivery (privacy policy)
7. Cookies & Local Storage
- Session cookie: An HTTP-only cookie may be set when you sign in via the web interface. It contains only your session token and expires when the session ends.
- Chrome extension storage:The extension stores your session token and email in Chrome's local storage. This data never leaves your device except when authenticating with our API.
- Marketing attribution storage: When you visit our marketing pages from links with UTM parameters, we may store the source, medium, campaign, content, and term in browser local storage and a
lw_attributioncookie for up to 30 days so we can understand which promotion channels lead to signups and product trials. - Analytics events: We collect aggregate page view, performance, and marketing CTA click events to improve the product and promotion content.
We do not use third-party advertising cookies or fingerprinting technologies.
8. Data Retention
- Account data: Retained while your account is active. Deleted within 30 days of account deletion request.
- AI usage logs: Metadata (token counts, cost) retained for up to 90 days for billing reconciliation, then aggregated.
- Submitted content: Draft titles, descriptions, and photos are processed in memory and not permanently stored.
- IP addresses: Retained only as long as necessary for rate limiting (typically minutes to hours).
- Anonymous device data: Trial usage data is retained for 30 days after last activity, then deleted.
You may request deletion at any time by emailing privacy@listowise.com.
9. Your Rights
Under GDPR, CCPA, and other applicable laws you have the right to:
- Access the personal data we hold about you
- Request correction or deletion of your data
- Request a portable copy of your data
- Withdraw consent at any time
- Object to processing of your data
To exercise any of these rights, email us at privacy@listowise.com. We will respond within 30 days.
10. Security
We protect your data with encryption in transit (TLS) and at rest. Session tokens are cryptographically generated and hashed before storage. We follow industry-standard security practices and regularly review our systems.
11. Changes
We may update this policy as our service evolves. Material changes will be communicated via the email address associated with your account.
12. Governing Law
This policy is governed by the laws of the State of Delaware, United States, without regard to conflict of law principles. Any disputes shall be resolved in the courts of Delaware.
13. Contact
Questions about this policy? Email us at privacy@listowise.com.
Inventowise
Listowise — Privacy