Legal
Privacy Policy
Effective November 5, 2026
This policy explains how Listpal handles information when you use our website, applications, and related services.
Information we collect
Account information: your name, your email address and a Listpal account ID. You give us these when you sign up with an email address and password. If you use Sign in with Apple or Google Sign-In, Apple or Google sends us your name, your email address (with Apple, this can be a private relay address you choose) and an identifier for your account with them. Your content: the photos you upload, the edited versions, thumbnails and edit history we create from them, the editing instructions, notes and settings you choose, and the names of your orders. Purchases: if you subscribe in our iPhone or iPad app, Apple sends us the product, transaction and subscription identifiers and the subscription's status; if you subscribe on listpal.ai, Stripe sends us customer, subscription and payment-status information. We never receive your full card number or your Apple payment details. Teams and invitations: if you share a plan with a team, we store the email addresses you add, send each address that does not yet have a Listpal account one invitation to sign up (and another only if you ask us to resend it), and show you how many photos each team member has used; team members see only who holds the plan, never each other's addresses, and their photos and orders stay private to them. If we invite you to Listpal ourselves, we keep the address we invited, and any plan we offered with it, and send that address the invitation. Messages to us: if you use our contact form or email us, your name, email address, phone number, website and message. Usage and technical information, collected automatically: device and browser type, IP address, and how you use the service, such as when you sign in or upload and how many photos you enhance.
How we use information
We use information to create and secure your account; to process, store and return the edits you ask for, including through the AI providers described under "Photos and AI processing"; to administer trials, subscriptions and team plans; to provide support, which can include viewing or re-processing a photo to resolve a problem you report; to prevent fraud and abuse; to monitor reliability and improve Listpal; to send service emails such as sign-in links, team invitations and billing notices; to send occasional emails about Listpal's features and offers, chosen using your plan and recent activity, each with an unsubscribe link; and to comply with legal obligations. We do not sell your information, use it for third-party advertising, or use it to track you across other companies' apps and websites.
Photos and AI processing
To make the edits you ask for, our servers send copies of your photos and your editing instructions to third-party AI providers. One receives a resized copy of each photo you enhance, stage, empty, clean up or edit (up to about 8 megapixels), the instructions for that edit, any note you type for it and, when you mark an area, a mask of that area. Another receives a small copy of each photo (at most 1,024 pixels on its long edge, plus crops around windows) to tell whether it is an interior or an exterior and where its windows are, and receives the text of an instruction when you use Enhance prompt. We do not send your name, email address or account ID with these requests, and the copies we send carry no location or other photo metadata. The providers process this data to return the result to us. In the Listpal app for iPhone and iPad we ask for your permission before the first photo is sent for AI processing; you can withdraw it at any time in Account → AI photo processing, after which no further photos are sent and the AI tools are unavailable until you allow them again. If we add an AI provider, we will update this policy, and ask in the app again, before it receives your photos. Do not upload content you lack permission to use, or content containing sensitive personal information that is unnecessary for the service.
Video, voice-over and shared videos
Animated clips: when you ask for an AI clip, our server sends a copy of that one photo (and, for a clip that links two photos, the second photo), with a camera move or effect chosen from Listpal's own list, to a service provider that animates images. We do not send your name, email address or account ID. We ask the provider not to keep the photo or the clip, and we do not store the photo; we keep the finished clip for seven days in private storage that only your account can reach, and then delete it. Voice-over: when you ask to hear or add a voice-over, the script you typed (up to 700 characters) is sent to a text-to-speech provider, with the voice and pace you chose and nothing that identifies you, and the audio comes back to your phone. We do not store the script or the audio on our servers. In the Listpal app we ask for your permission before the first photo or script is sent for AI processing, and you can withdraw it at Account → AI photo processing. Shared videos: when you share a video, we store the finished video file, and a small preview picture if your phone sends one, in private storage, together with the title, address, your name, brokerage, phone, website and licence number and any small print you chose to show. Anyone with the link can watch the page and download the file, with no account. A link works for 30 days; you can take it down at any time, and when it expires or is taken down we delete the files, and the record of it shortly after. We count how many times a link is viewed. To limit abuse, we keep a scrambled code made from a visitor's network address for a short time; we do not keep the address itself. Contact form on a shared video: if you turn it on for a link, a visitor can send their name, a phone number or email address and an optional message. We store it for you to read and delete in the app, email it to the address on your Listpal account, and delete it 90 days after it was sent; the page tells the visitor this before they send. Visitors' details are used only to pass the message to you, and we do not use them for our own marketing. You are responsible for how you use the details of people who contact you. Team brand kit: logos, headshots and the details on agent cards (name, brokerage, phone, email, website, licence) are stored in private storage tied to the team owner, and are visible to the team's members; deleting your account deletes what you stored. Importing a listing by link is done on your phone, and Listpal's servers do not receive the link or the page.
Service providers
We share personal information only with the service providers that run Listpal for us, and only what each needs: Supabase (sign-in, database and photo storage); Google Cloud (hosting); third-party AI providers, including an image-animation provider and a text-to-speech provider (AI processing, as described above); Resend (email delivery, including messages from a shared video's contact form); Microsoft 365 (our email inbox); Slack (internal alerts about contact-form messages); Stripe (payments on listpal.ai); Apple (App Store purchases and Sign in with Apple); and Google (Google Sign-In). Each provider may use the information only to provide its service to Listpal, and is bound by its agreement with us to protect it with the same or equal protection as this policy describes. We may also disclose information when the law requires it, or to a successor in a merger or acquisition, which must continue to protect it as this policy describes.
Photo retention
Photos you upload, and every enhanced version, thumbnail, and edit history we generate from them, are stored for 30 days from the time of upload and are then permanently deleted from our systems by an automated process. Orders left empty by that deletion are removed as well. Deleted photos cannot be recovered, so download anything you want to keep before then. You can delete a photo sooner at any time, and deleting your account removes all of your photos immediately.
Retention and security
Apart from photos, which are kept only for the period described above, we retain information for as long as needed to provide the service, maintain required business and billing records, resolve disputes, and enforce agreements. We use reasonable administrative and technical safeguards, but no online service can guarantee absolute security.
Your choices
Delete your account: in the app, open Account and tap Delete account; on the web, open Settings and choose Delete account. We then email a link to the address on your account, so that only you can confirm it. When you open that link within an hour and confirm, we immediately and permanently delete your photos and every version of them, your library, presets, team memberships and profile, and then your login, and email you to say it is done; if you use Sign in with Apple and asked from the app, this also revokes Listpal's access to your Apple Account. Deleting your account also cancels any subscription you bought on listpal.ai, straight away and without a refund for the rest of the billing period. Apple does not let us cancel App Store subscriptions: cancel those yourself in your device's Settings (your name → Subscriptions), or Apple keeps billing them. Withdraw consent: you can withdraw permission for AI processing in the app at Account → AI photo processing, and stop marketing emails with the unsubscribe link in any of them. Other requests: email us to access, correct or delete your information. We keep only what we are required to keep for legal, tax, accounting or fraud-prevention purposes, such as payment records and messages you sent us, and only for as long as required.
Children and international use
Listpal is intended for business users and is not directed to children under 13. If you use the service outside the United States, your information may be processed in the United States and other countries where our providers operate.
Changes to this policy
We may update this policy as the service changes. We will post the revised policy here and update the effective date. Material changes may also be communicated through the service or by email.