Privacy Policy
Last updated 19 August 2026
This policy explains what personal data AutoListPro collects, why, who we share it with, and the rights you have over it under UK GDPR and the Data Protection Act 2018.
1. What we collect
| Data | Why we hold it |
|---|---|
| Email address, password (stored as a one-way hash, never in plain text) or Google account ID | To create and secure your account |
| Your eBay OAuth refresh token and eBay username, once you connect your eBay account | To read and publish listings/orders/messages on your own eBay account on your behalf |
| Stripe customer and subscription IDs, subscription status | To manage your subscription — we never receive or store your full card number |
| Pricing rules, product drafts (titles, prices, images, supplier source links), listing tags, onboarding answers | The actual content you create using the Service |
| Login session data, IP address at sign-in | Account security (e.g. rate-limiting, detecting suspicious logins) |
2. Our legal basis for processing
- Performance of a contract — most of what we do (running your account, publishing listings, billing) is necessary to provide the Service you've signed up for.
- Legitimate interests — account security, fraud prevention, and improving the Service.
- Consent — where we ask for it separately, e.g. optional marketing emails (we don't send any today).
3. Who we share data with
We use a small number of specialist processors to run the Service. None of them receive your AutoListPro password.
| Provider | What they see |
|---|---|
| eBay | Whatever your connected eBay account already has — listings, orders, messages, feedback |
| Stripe | Your email and payment details, to process your subscription |
| Anthropic (Claude) | Product titles/descriptions/text you ask us to improve, and screenshots you upload for Screenshot Import — never your account credentials or payment details |
| RapidAPI-hosted supplier-data providers | Product URLs/IDs you paste in, to fetch pricing and images from AliExpress/Amazon/eBay listings |
| Only if you choose "Continue with Google" — your Google account email/name for sign-in | |
| Railway (our hosting provider) | All of the above, as the infrastructure the Service runs on |
We don't sell your data, and we don't share it with anyone else for their own marketing purposes.
4. International transfers
Some of the providers above may process data outside the UK/EEA (for example, US-based infrastructure). Where that happens, we rely on their own standard contractual clauses or equivalent safeguards recognised under UK GDPR.
5. How long we keep it
We keep your account data for as long as your account is active, plus a short period after cancellation in case you want to reactivate or for legal/accounting record-keeping. If you delete your account (see below), your account record and drafts are removed immediately; a residual copy may briefly persist in backups until they naturally roll over.
6. Your rights
Under UK GDPR you can ask us to:
- Access the data we hold about you, or export it in a portable format — self-service from Settings → Your Data, or by emailing us.
- Correct inaccurate data.
- Delete your account and its data — self-service from Settings → Your Data, or by emailing us.
- Restrict or object to certain processing.
To exercise any of these, use the self-service tools in Settings, or email getautolistpro@gmail.com. If you're unhappy with how we've handled a request, you can complain to the UK's Information Commissioner's Office (ico.org.uk).
7. Cookies
We use a single essential cookie to keep you signed in — no third-party advertising or analytics cookies.
8. Children
AutoListPro is a business tool intended for adult sellers; it isn't directed at, and we don't knowingly collect data from, anyone under 18.
9. Changes to this policy
We'll update the date at the top of this page whenever this policy changes materially.