Privacy Policy

1. Information We Collect

We collect the following types of information:

• Account Information: Name, email address, and password when you create an account.
• Payment Information: Credit card details are processed securely through Stripe. We do not store your full card number.
• Facebook Account Data: Account credentials and cookies you provide for Marketplace posting. These are stored encrypted.
• Usage Data: Listing templates, posting history, lead messages, and analytics data generated through your use of the Service.
• Technical Data: IP address, browser type, and device information collected automatically for security and service improvement.

2. How We Use Your Information

We use your information to:

• Provide, maintain, and improve the Service
• Process payments and manage subscriptions
• Post listings to Facebook Marketplace on your behalf
• Capture and deliver lead messages to your inbox
• Send transactional emails (account updates, billing receipts)
• Monitor for abuse and ensure platform security

3. Data Storage & Security

Your data is stored on secure servers provided by Supabase (PostgreSQL database) and Hetzner (application hosting). We use encryption at rest and in transit (TLS/SSL). Facebook account credentials are encrypted before storage.

4. Third-Party Services

We use the following third-party services that may process your data:

• Supabase: Authentication and database hosting
• Stripe: Payment processing
• Resend: Transactional email delivery
• Inngest: Background job processing

Each of these services has their own privacy policy and data handling practices.

5. Cookies

We use essential cookies for authentication and session management. We do not use advertising or tracking cookies. The Service uses Supabase auth cookies to maintain your login session.

6. Data Sharing

We do not sell your personal information. We may share data only in the following circumstances:

• With third-party service providers listed above, as necessary to operate the Service
• If required by law, court order, or government request
• To protect the rights, property, or safety of Listaro, our users, or the public

7. Data Retention

We retain your data for as long as your account is active. If you cancel your subscription, your data is retained for 30 days before deletion. You may request immediate data deletion by contacting us.

8. Your Rights

You have the right to:

• Access your personal data
• Correct inaccurate data
• Request deletion of your data
• Export your data in a portable format
• Withdraw consent for data processing

To exercise these rights, contact us at contact@boxbusters.ca.

9. Children’s Privacy

The Service is not intended for children under 18. We do not knowingly collect information from children under 18.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of material changes via email. Continued use of the Service after changes constitutes acceptance of the updated policy.

11. Contact

For privacy-related inquiries, contact us at contact@boxbusters.ca.