Privacy Policy

Effective September 10, 2026

This policy explains what Listing Studio (“we”, “the app”) collects, why, who we share it with, and how you can get it deleted. It covers the Listing Studio mobile app and the selltomars.com website.

If you only read one section, read Sending your content to AI providers.

What we collect

Account information. Your email address and display name, provided when you register. If you sign in with Apple or Google, we receive your email address and name from that provider. We never see or store your password — authentication is handled by Supabase, and passwords are stored only as salted hashes.

Content you create. Product names, descriptions, features, categories, keywords, competitor ASINs, and the listings we generate for you. Saved listings and drafts are stored against your account so they sync across devices.

Usage and billing records. Your subscription tier and status, your credit balance, and an append-only ledger of every credit transaction. Each ledger entry records the action taken, the credit change, the AI model used, and the token counts for that request. We use this to bill credits accurately and to show you your usage history.

Preferences. Interface language, default Amazon marketplace, and home currency.

Diagnostics. Crash reports and error logs, which may include your user ID and the app screen where the error happened.

We do not collect your Amazon Seller Central credentials, your sales data, or your payment card details.

Sending your content to AI providers

Generating and improving listings requires sending your product content to a third-party large language model provider. Depending on configuration and region, that provider is OpenRouter (which routes to upstream model vendors such as OpenAI, Anthropic, or Google) or Alibaba Cloud Model Studio / DashScope.

What gets sent: the product details, keywords, and existing listing text needed for the request. What does not get sent: your email address, name, or any other account identifier.

These providers process your content to return a result. Their own retention and training policies apply to that processing, and those policies are outside our control. Do not enter confidential information, personal data about other people, or trade secrets into the app.

Who else we share data with

ProcessorWhat it receivesWhy
SupabaseEmail, name, all content and usage recordsAuthentication and database hosting
RevenueCatAn anonymised user ID, purchase receiptsSubscription and entitlement management
StripeEmail, payment details you enterWeb checkout payments
Apple / GooglePurchase and subscription recordsIn-app purchases and billing
OpenRouter or Alibaba Cloud Model StudioListing content onlyAI generation (see above)
Amazon Selling Partner APIProduct keywords and marketplaceKeyword and search-term data

We do not sell your personal information, and we do not share it with advertisers or data brokers.

We may disclose information if legally required to do so, or where necessary to investigate fraud or protect the safety of our users.

Payments

Card details are handled entirely by Stripe (web) or by Apple and Google (in-app purchases). We never receive or store your full card number.

Where your data is held

Our database and backend run on infrastructure located in the United States. Third-party processors may operate in other regions. If you are in the European Economic Area or the United Kingdom, transfers outside your region rely on the European Commission’s Standard Contractual Clauses or an equivalent safeguard.

How long we keep it

Content and usage records are retained while your account is open. When you delete your account, we permanently delete your profile, saved listings, drafts, credit ledger, and subscription records, and we delete your authentication user. This happens immediately — there is no recovery window, so export anything you want to keep first.

Backups and server logs may retain residual copies for up to 30 days before being overwritten on their normal rotation.

Your rights

You can, at any time:

Depending on where you live, you may also have the right to object to or restrict processing, to data portability, or to lodge a complaint with your local data protection authority. To exercise any of these, email privacy@selltomars.com.

Deleting your account does not cancel an active App Store or Google Play subscription. Cancel that separately in your store account settings, or you will continue to be billed.

Children

Listing Studio is a business tool and is not directed at children. We do not knowingly collect information from anyone under 16. If you believe a child has provided us with personal information, email privacy@selltomars.com and we will delete it.

Security

Data is encrypted in transit with TLS and at rest by our hosting providers. Access to production data is limited to the accounts that need it. No system is perfectly secure, and we cannot guarantee absolute security.

Changes to this policy

If we make a material change, we will update the effective date above and notify you in the app before the change takes effect.

Contact

Privacy questions and data requests: privacy@selltomars.com General support: support@selltomars.com