Privacy Policy

This privacy policy is intended to clearly and transparently explain how the Listed AI mobile application — available on iOS (Apple App Store) and Android (Google Play Store) — published by WIL7 (we, our), collects, uses, stores, and protects the personal data of its users.

1. Data Controller

• Company: WIL7 (Sole Proprietorship)
• SIRET: 882 668 072 00011
• Address: 31 rue du Terrage, 75010 Paris, France
• Email: hello@listedai.app

2. Data Collected

• First name, last name
• Email address
• Username
• Images uploaded by the user
• Authentication provider (e.g., Apple, Google, email)
• System language
• Listing history
• Technical data (timestamps, logs, crash reports if enabled)
• Referral program data – generated referral codes and the identifiers of the code owner and redeemer, the time of redemption, and reward duration. No names or contact details of referred friends are collected until they create an account

3. Purpose of Data Processing

• Automatically generate listings from photos
• Display and sync listing history
• Improve service quality (UX, detection, speed)
• Enable cross-device experience
• Generate anonymized usage statistics
• Conduct commercial and product improvement analysis
• Display personalized advertising through third-party services
• Manage the referral program (validating codes and allocating rewards)

4. Legal Basis for Processing

• Your consent (when creating an account or uploading photos)
• Contract performance (delivery of the Listed AI service)
• Our legitimate interests (service improvement, security, analytics)
• Processing referral program data is based on legitimate interests (to operate and improve the service) and, where necessary, the user's consent

5. Data Sharing

Your data is not sold, but may be shared with trusted technical partners:

• Firebase (Google Cloud) for secure hosting and analytics
• OpenAI, solely for processing the images you upload (no personal data is sent)
• Google AdMob for in-app advertising (banner, interstitial, and rewarded video ads)
• Unity Ads for displaying advertisements
• TikTok SDK for advertising campaign measurement and optimization

AdMob may collect technical data (device type, advertising identifiers, IP address) to personalize ads in compliance with GDPR.

No other data sharing with third parties is performed.

6. Analytics (Firebase Analytics)

Listed AI uses Firebase Analytics to collect usage data and improve user experience:

a) Types of data collected

• App interaction events (listing creation, onboarding, etc.)
• Device information (model, operating system, app version)
• IP address (for approximate geolocation)
• Advertising identifiers (IDFA on iOS, Google Advertising ID on Android) if authorized by the user
• Performance and crash data (if enabled)

b) Purposes

• Improving user experience and app performance
• Analyzing usage trends and most-used features
• Detecting and resolving technical issues
• Optimizing performance and stability

c) Legal basis

We rely on our legitimate interests to measure and improve service performance. Where local law requires consent for analytics, we rely on your consent collected via our consent tool (e.g., Google UMP). Otherwise, we limit analytics to strictly necessary, aggregated/pseudonymized measurements.

d) Retention period

Analytics data is retained for 14 months by default, in accordance with Firebase Analytics settings. Aggregated and anonymized reports may be retained longer.

e) International transfers

Data may be transferred to Google (United States) with appropriate safeguards, including EU Standard Contractual Clauses.

f) Opt-out

You can disable analytics through app settings or by contacting us. Core app functionality remains available.

7. Advertising & Attribution (TikTok SDK)

Listed AI uses TikTok SDK to measure and optimize advertising campaigns:

a) Data collected

• Device information (model, operating system, app version)
• IP address for geolocation
• Advertising identifiers (IDFA on iOS, Google Advertising ID on Android) if authorized
• App event signals (listing creation, onboarding, etc.)
• Attribution and campaign measurement data

b) Purposes

• Measuring advertising campaign effectiveness
• Attributing conversions to TikTok campaigns
• Optimizing audiences and advertising targeting
• Analyzing advertising performance

c) Legal basis

Processing is based on your consent for personalized advertising and attribution. You can withdraw your consent at any time.

d) International transfers

Data may be processed outside the EEA (e.g., United States) by TikTok and its affiliates. Such transfers are carried out with appropriate safeguards, including EU Standard Contractual Clauses. Please refer to TikTok's Privacy Policy for up-to-date processing locations and practices.

e) Retention period

Attribution data is retained for a maximum of 24 months. Aggregated reports may be retained longer.

f) User controls

You can withdraw your consent through app settings or your device's system settings. See TikTok's privacy policy for more information.

8. Referral Program Data

Listed AI operates a Referral Program. This section explains how data related to this feature is collected, stored, and used.

a) Referral program data

When you generate a referral code or redeem one, we store the generated referral code, the identifiers of the code owner and redeemer, the time of redemption, and reward duration. No names or contact details of referred friends are collected until they create an account and sign up for Listed AI.

b) Storage and processing

Referral logs are stored in Firebase Firestore within the European Union. They are kept separate from user profile information, used solely to run the referral program, and may be aggregated to prevent fraud.

c) Privacy protections

WIL7 does not collect personal data of referred friends or send them marketing messages. Only the referrer sends the code to their friends. This approach aligns with GDPR guidance that organizations should not collect or contact referred friends without their consent.

d) Legal basis

Processing of referral data is based on our legitimate interests (to operate and improve the service) and, where necessary, the user's consent. For more details, see section 4 (Legal Basis for Processing).

9. Push Notifications

Listed AI may send push notifications to keep you informed:

a) Data collected

• Notification token (APNs on iOS, FCM on Android) - unique device identifier
• Notification preferences (authorized types)

b) Types of notifications

• Transactional notifications: listing generation complete, account updates
• Promotional notifications: new features, special offers (with your consent)

c) Legal basis

Transactional notifications are necessary for service operation. Promotional notifications require your explicit consent via the system prompt (iOS or Android).

d) Notification management

You can disable notifications at any time via your device settings (iOS or Android) or the app. The notification token is deleted when you disable notifications or delete the app.

e) Retention period

The notification token is retained only while notifications are enabled. It is automatically deleted when disabled or when the app is uninstalled.

10. Consent Management

Listed AI uses several mechanisms to manage your consent:

a) Google User Messaging Platform (UMP)

In the EU/EEA, we use Google UMP to request your consent for personalized advertising and tracking.

b) App Tracking Transparency (ATT) & Android Consent

On iOS, we request ATT authorization before any cross-app tracking, in accordance with Apple's requirements. On Android, advertising identifier access is managed via the Google Advertising ID and the user's device settings.

c) Withdrawing consent

You can withdraw your consent at any time via:

• App settings
• Your device's system settings
• By contacting us at support@listedai.app

d) Impact of refusal

You can refuse personalized advertising and continue using the app. Ads will be less relevant but the app will function normally.

11. International Data Transfers

Some of our technical partners may process your data outside the European Economic Area (EEA):

• Google/Firebase: United States - with EU Standard Contractual Clauses
• TikTok: outside the EEA (e.g., United States) - with EU Standard Contractual Clauses
• OpenAI: United States - with appropriate protection measures

All international transfers are made with appropriate safeguards to protect your data, in accordance with GDPR.

12. Data Retention

Here is an overview of retention periods for different categories of data:

Additional details:

• Images: Stored as long as the listings exist in the app, then deleted if the account or the listings are removed.
• Personal data: Deleted or anonymized when the account is deleted.
• Generated listings: May be retained in anonymized form for archival or service improvement purposes.

13. Transmission to OpenAI

Only the images uploaded by the user are transmitted to the OpenAI API in base64 format.

No personally identifiable information (name, email, etc.) is transmitted.

We do not control how OpenAI may store or process these images.

14. User Rights

In accordance with the General Data Protection Regulation (GDPR), you have the following rights:

• Right to access your data
• Right to rectify inaccurate information
• Right to erasure (right to be forgotten)
• Right to restrict processing
• Right to object
• Right to data portability

You can exercise your rights at any time by contacting us at support@listedai.app

15. Security

• Secure HTTPS connections
• Firebase AppCheck protection
• Restricted access to stored images
• Firebase authentication with verified email

These measures ensure a high level of data confidentiality and protection.

16. Account Deletion

• Removal or anonymization of personal data (name, email, username)
• Deletion of uploaded images
• Possible retention of generated listings in anonymized form

17. Complaints

If you believe your data rights are not being respected, you may file a complaint with the CNIL (Commission Nationale de lInformatique et des Libertes):

18. Advertising

a) Advertising Partners

Listed AI uses the following advertising services:

• Google AdMob - for displaying banner ads, interstitial ads, and rewarded video ads
• Unity Ads - for banner ads, interstitial ads, and rewarded video ads
• TikTok SDK - for advertising campaign measurement and optimization
• Other advertising partners may be added (AppLovin, IronSource, etc.)

b) Data Collected by Partners

Advertising partners may collect the following data:

• IDFA (Identifier for Advertisers) on iOS 14.5+ / Google Advertising ID on Android - if accepted by the user
• IP Address - for approximate geolocation
• Device Information - model, operating system, app version
• Usage Data - ad interactions, app usage frequency
• Technical Identifiers - session IDs, anonymous advertising identifiers

c) Consent and Preference Management

In compliance with GDPR and local regulations:

• The app uses Google User Messaging Platform (UMP) to request consent in the EU/EEA
• Users can decline ad personalization and receive non-targeted advertisements
• Consent can be withdrawn at any time through device settings or the app
• On iOS, ATT (App Tracking Transparency) authorization is requested before cross-app tracking. On Android, advertising identifier access is managed via the Google Advertising ID settings

d) Partner Privacy Policies

For more information about how our partners use your data:

• Google Privacy Policy
• Unity Privacy Policy
• TikTok Privacy Policy
• AppLovin Privacy Policy (if applicable)

19. Data Related to PRO Subscriptions

When you subscribe to Listed AI PRO, we store a unique identifier linked to your Firebase account. This token helps verify your subscription and does not contain personal data.

No payment information is stored or processed by Listed AI — all transactions are handled by Apple (via StoreKit) on iOS and by Google (via Google Play Billing) on Android.

20. Changes

This policy may be updated at any time.

Users will be informed in the event of significant changes.

Continued use of the app after such updates constitutes acceptance of the new policy.