Privacy policy

Who is responsible

Listando is responsible for this product and acts as the controller for the personal data described in this policy. You can reach us at contato@listando.app for privacy, access, deletion, or security questions.

Personal data we collect

We collect the data you provide or create in the product, including account information, feedback messages, optional feedback email addresses, and content you submit through supported features.

If you sign in, we process account data from Clerk, such as your user ID, email address, display name, profile image, sign-in state, and account security metadata.

We also collect technical and operational data, including IP addresses or IP-derived rate-limit keys, user agent, locale, pathname, timestamps, event names, provider diagnostics, error details, security events, and usage analytics.

How we use data

We use personal data to operate the product, manage accounts, provide support, process feedback, maintain admin records, and improve reliability.

We use technical data for authentication, rate limiting, fraud and abuse prevention, security monitoring, debugging, product analytics, and legal compliance.

We may use aggregated or de-identified data to understand product health, demand, and feature usage. We do not use aggregated reports to identify you.

Third-party and generated content

Some features may send user-provided content to external providers when you explicitly use those features. Do not submit confidential, regulated, or sensitive personal information unless the feature requires it and you accept that processing.

We do not sell your prompts, account data, or generated outputs.

Providers and sharing

We share data with service providers that help operate Listando, including hosting, database, authentication, analytics, error reporting, cache, and rate-limit providers.

We may disclose data when required by law, to protect rights and safety, to investigate abuse or security incidents, or in connection with a merger, acquisition, financing, or sale of assets. We do not sell personal information.

Cookies and local storage

We use cookies and browser storage to run the product. This includes authentication cookies, preference cookies, analytics cookies or storage when enabled, and local or session storage for sign-in intent and UI state.

You can block or clear cookies and browser storage in your browser, but some features may stop working, including sign-in, saved preferences, or analytics opt state.

Retention

We keep account and product data while your account needs it, or until you delete it or ask us to delete it where we can verify and honor the request.

We keep operational logs, rate-limit records, security events, analytics, feedback, and provider diagnostics for as long as needed for security, abuse prevention, debugging, product health, legal obligations, and dispute resolution.

Your privacy rights

Depending on where you live, you may have rights to know or access personal data, receive a copy, correct inaccurate data, delete data, restrict or object to processing, withdraw consent where consent is used, and request portability.

Email contato@listando.app to exercise a privacy right. We may ask for information needed to verify your identity, locate your records, protect other users, or comply with law.

Legal bases

Where GDPR, UK GDPR, LGPD, or similar laws apply, our legal bases may include performing the service or taking steps you request, our legitimate interests in operating and improving the product, consent where required, compliance with legal obligations, and protection of rights, security, and safety.

Security

We use technical and organizational measures designed to protect personal data, including authentication controls, rate limits, provider key restrictions, security headers, and limited internal access.

No internet service is perfectly secure. If you believe your data or account has been exposed, contact contato@listando.app.

Children

Listando is not intended for children and should not be used by anyone under 13, or under the minimum age required by local law to use online services. We do not knowingly collect personal data from children.

Changes

We may update this policy as the product, providers, or law changes. We will update the effective date above and, when a change is material, provide notice through the product or another reasonable channel.