Privacy Policy

• Account information — your email address when you create an account or sign in.
• Listing data — property addresses, listing URLs, property type, and the details you enter into the content generation form (key features, price guide, room counts, etc.).
• Generated content — the AI-generated copy produced for each listing, stored so you can retrieve it later.
• Usage data — generation counts and listing counts used to enforce free-tier limits.
• Open home & vendor data — attendee names, contact details, feedback, and vendor update notes you log inside the app.

We do not collect or store payment card information directly. Payments are processed securely by Stripe. Your card details never touch our servers.

• To provide and operate the ListCraft service.
• To generate AI content using the property details you provide.
• To enforce free-tier and plan limits.
• To send account-related emails (OTP codes, important notices).
• To improve the product — we may analyse aggregated, de-identified usage patterns.

We do not sell your data to third parties. We do not use your listing content to train AI models.

Your data is stored in Supabase, a cloud database provider. Data may be stored in Australia or the United States depending on your region configuration. We use industry-standard encryption in transit (TLS) and at rest.

Session authentication uses secure, HTTP-only cookies with a 180-day expiry for verified users.

ListCraft uses the following third-party services to operate:

• Supabase — database and backend infrastructure.
• Google Gemini & Anthropic Claude — AI content generation. Property and contact details you enter are sent to these APIs to produce generated copy. These providers may process your data on servers outside Australia, including the United States. Their respective data usage policies apply. We do not permit these providers to use your data for model training.
• Stripe— payment processing. Stripe's privacy policy governs the handling of your payment information.
• Resend — transactional email delivery (OTP codes, notifications).
• Vercel — hosting and deployment.

We retain your data for as long as your account is active. You can delete individual listings at any time from the listings dashboard. To request deletion of your account and all associated data, email us at support@listcraft.com.au.

Under Australian Privacy Principles (APPs) and applicable law, you have the right to:

• Access the personal information we hold about you.
• Request correction of inaccurate information.
• Request deletion of your data.
• Withdraw consent at any time by deleting your account.

To exercise any of these rights, contact us at support@listcraft.com.au.

We use two cookies: an anonymous session cookie and an authenticated user cookie. Both are HTTP-only, scoped to this domain, and used solely for session management. We do not use tracking or advertising cookies.

We may update this policy from time to time. We will note the updated date at the top of this page. Continued use of ListCraft after changes constitutes acceptance of the updated policy.

Questions about this policy? Email us at support@listcraft.com.au.