Privacy
Privacy notice
Who we are
ListBoost is an independent tool that helps Vinted sellers turn rough notes and photos into polished listings. ListBoost is not affiliated with, endorsed by, or partnered with Vinted. You do not need to log into Vinted to use ListBoost. We never ask for your Vinted credentials and we never connect to Vinted on your behalf.
What we collect
- Account data: the email address and password you choose at signup. Passwords are stored as a salted pbkdf2 hash; we never store the plain-text password.
- Listings you generate: the rough notes, photos, and resulting listing draft are stored against your account so you can see your history.
- Payment data: Stripe processes payments. We receive a confirmation that a payment succeeded and the Stripe checkout-session ID. We do not see or store card numbers, CVC, or full billing details.
- Operational data: server logs (timestamps, IP addresses, error traces) used to keep the service running and to spot abuse.
How your content is processed
To generate a listing we send your notes and any uploaded photos to OpenAI (and, as a fallback, Anthropic) for inference. The model returns a JSON listing. Your content is sent over TLS and is subject to OpenAI's enterprise data policy: by default, prompts and completions submitted via the OpenAI API are not used to train OpenAI's models. Photos are sent at request time and are not retained on our servers beyond the listing record we keep for your history.
How we use the data
- To run your account and show your listing history.
- To bill you for credit packs via Stripe.
- To detect and prevent abuse (rate limits, fraud, billing disputes).
- To send service emails (verification, security notices). We do not send marketing email without your consent.
Sharing
We share data only with the processors needed to run the service: OpenAI (and Anthropic as fallback) for listing generation, Stripe for payments, and our hosting provider. We do not sell your data.
Retention
Account data and listing history are kept while your account is active. You can ask us to delete your account at any time and we will remove account, listing history, and audit records, except where we must keep records for tax or fraud-prevention reasons.
Your rights (UK GDPR)
You can request access, correction, deletion, or export of your data, and you can withdraw consent for processing. Email hello@listboost.app with your request.
Cookies
We use a single first-party HTTP-only session cookie to keep you signed in. We do not run third-party advertising or analytics cookies.
Changes
If we materially change this notice we will post the new version here and bump the date at the top.