Privacy Policy

Account information. Name, email address and password (passwords are handled by our authentication provider and stored only as secure hashes), plus optional profile details you add: phone number, brokerage name and profile photo.

Listing content. Property details, descriptions, photos and files you create, upload or import — including CSV/XML files and content fetched from source websites or feeds you configure.

Connection credentials. To publish and import on your behalf, we store the WordPress site URL, username and Application Password you provide for your connected site, and — if you configure them — source-site credentials or a scoped export key. These are used exclusively server-side to perform the actions you set up, and are never exposed to other users or to the public.

Leads. When a visitor submits the contact form on one of your public listing pages, we collect the details they enter (name, email, phone, message) and deliver them to your account. This data belongs to you: for leads, we act as a processor on your behalf and you are the controller responsible for how they are contacted and managed.

Payment information. Payments are processed by Freemius (Freemius, Inc.), our payment provider, which acts as the Merchant of Record for all purchases — it is the seller of record and handles billing, payment processing and any applicable taxes. We never see or store your card number; we store only a Freemius customer reference, your plan and transaction status.

Usage data. Plan and quota counters (kits generated, AI rewrites used), import status, and administrative audit records. We do not run advertising trackers, and we do not sell or share your data with advertisers. For aggregate traffic measurement we use Vercel Web Analytics and Vercel Speed Insights, which record aggregate page views and page-performance timings. Both are cookieless: they work without cookies, without cross-site tracking and without building a profile of you as an individual.

• to provide the Service: generate marketing kits, render your share pages, publish to and import into your WordPress sites, and deliver leads to you;
• to process payments, enforce plan limits and prevent abuse;
• to communicate with you about your account (confirmation emails, service notices);
• to secure, debug and improve the Service;
• to comply with legal obligations.

We do not sell or rent personal information, and we do not use your data for third-party advertising.

To generate and rewrite marketing content, the listing details you provide (property facts, descriptions, your name/brokerage for sign-offs) are sent to our AI provider (OpenAI) via its business API. Under OpenAI’s API terms, API data is not used to train their models. We send only what is needed to produce your content.

We share data only with the providers that run the Service:

• Supabase — database, authentication and file storage;
• Vercel — application hosting;
• Freemius — payment processing and Merchant of Record (seller of record for subscriptions);
• OpenAI — AI content generation;
• Resend — transactional email delivery;
• cron-job.org — scheduled task triggering (no personal data is shared; it only pings our server).

Each provider processes data under its own security and privacy commitments, and only as needed to provide its function. Data may be processed in the United States and other countries where these providers operate.

Some content is public by design: your share pages display the listing, its photos, and the agent branding you choose to show (name, phone, brokerage, photo). Content you publish to your own WordPress site is governed by that site, not by us. Your credentials, email address and account data are never public.

We use only essential cookies — the session cookies required to keep you signed in. We do not use advertising or cross-site tracking cookies, so there is no cookie consent theater here.

All traffic is encrypted in transit (TLS). Data access is enforced with row-level security so each account can only reach its own records; uploaded import files live in private storage accessible only to you and the server. WordPress connections use Application Passwords — revocable, per-application credentials — rather than your main WordPress password, and source export keys are scoped and read-only. No system is perfectly secure, but access to secrets is restricted to the server-side processes that need them.

We keep your data while your account is active. If you delete content (listings, uploaded files), it is removed from the live Service promptly. If you close your account or ask us to delete it, we delete your personal data within 30 days, except records we must keep for legal, billing or security reasons (e.g. payment records, audit logs), which are kept only as long as required.

Depending on where you live (including under GDPR and the California Consumer Privacy Act), you may have rights to access, correct, export, restrict or delete your personal data, and to object to certain processing. We honor these requests for all users regardless of location: email support@listingpress.io from your account address and we will respond within 30 days. We do not discriminate against you for exercising your rights. California residents: we do not “sell” or “share” personal information as defined by the CCPA.

Leads:if you submitted your details through an agent’s listing page, the agent controls that data — contact them directly, or contact us and we will assist and notify the agent.

The Service is a business tool and is not directed to anyone under 18. We do not knowingly collect data from children; if you believe a child has provided us data, contact us and we will delete it.

We may update this policy as the Service evolves. Material changes will be announced by email or in-app notice at least 14 days before taking effect. The “Last updated” date above always reflects the current version.

ListingPress · listingpress.io
support@listingpress.io