Privacy Policy

Last updated: 13 August 2026

1. Who We Are

ListingGen is operated by VAEDI Limited, a company registered in England and Wales (Company No. 10089191). We are the data controller for the personal data processed through this service.

Contact: privacy@vaedilimited.com

2. Data We Collect

• Account information: Name, email address, and hashed password when you register.
• Usage data: Queries submitted, platform selections, product details provided, timestamps, and conversation history.
• Payment data: If you subscribe to a paid plan, payment is processed by Stripe. We store your Stripe customer ID and subscription ID but never your card details.
• Technical data: IP address, browser type, and access timestamps for rate limiting and security.

3. How We Use Your Data

• To provide and maintain the ListingGen service.
• To authenticate your account and manage your subscription.
• To process your queries via the OpenAI API for AI-powered listing generation.
• To enforce usage quotas and prevent abuse.
• To improve the service through aggregated, anonymised usage analytics.

4. Legal Basis for Processing (UK GDPR)

• Contract: Processing necessary to provide the service you signed up for (Article 6(1)(b)).
• Legitimate interest: Security monitoring, abuse prevention, and service improvement (Article 6(1)(f)).
• Consent: Where required, for optional communications (Article 6(1)(a)).

5. Third-Party Services

• OpenAI API: Your queries are sent to OpenAI for AI processing. Query content is not used by OpenAI to train models when accessed via the API.
• Stripe: Payment processing. Stripe handles all card data directly and is PCI DSS Level 1 compliant.

6. Data Storage and Security

Your data is stored on secure servers. We implement appropriate technical and organisational measures including encryption in transit (TLS), hashed passwords, rate limiting, and security headers to protect your personal data.

7. Data Retention

• Account data is retained while your account is active.
• Conversation history is retained for up to 12 months from last activity.
• Usage logs are retained for up to 6 months.
• You may request deletion of your data at any time.

8. Cookies

This application uses only essential, functional storage (such as authentication tokens stored in localStorage). We do not use tracking cookies, advertising cookies, or third-party analytics cookies.

9. Your Rights Under UK GDPR

• Access your personal data.
• Rectify inaccurate personal data.
• Request erasure of your personal data.
• Restrict processing of your personal data.
• Data portability — receive your data in a structured, machine-readable format.
• Object to processing based on legitimate interest.
• Lodge a complaint with the Information Commissioner's Office (ICO).

10. International Transfers

Your query data may be processed by OpenAI in the United States. Such transfers are covered by appropriate safeguards including Standard Contractual Clauses (SCCs) as required under UK GDPR.

11. Changes to This Policy

We may update this policy from time to time. Continued use of the service after changes constitutes acceptance of the updated policy.

12. Contact

VAEDI Limited
Email: privacy@vaedilimited.com
Company No. 10089191, England & Wales