ListSwiftly

Legal

Privacy Policy

Effective October 19, 2026

This Privacy Policy explains how List Swiftly LLC (“ListSwiftly”, “we”, “us” or “our”) collects, uses, shares and protects personal information when you visit listswiftly.com, request access, or use the ListSwiftly web and desktop applications and related services (the “Service”). It should be read together with our Terms of Service.

In short: we use your information to run the Service for you. We do not sell your personal information, we do not share it for advertising, and we do not show ads.

1. Information we collect

Account information

  • Your name, email address and password. We store the password only as a one-way bcrypt hash, never in readable form.
  • Sign-in session records. When you choose “Keep me signed in”, we keep a record of that session — a hashed form of its renewal token, when it was created and last used, and the IP address and browser or device description it was created from — so you can stay signed in and so a session can be revoked.
  • Account status and billing status, such as your trial end date and subscription plan.
  • Your settings and preferences, including warehouse or ship-from addresses and phone numbers you enter.

Connected marketplace accounts

  • eBay. When you connect eBay, you sign in on eBay’s own site and eBay gives us OAuth access and refresh tokens. We store these tokens, along with your eBay user identifier and username, so the Service can act on your account. We never see your eBay password.
  • Mercari. When you connect Mercari, you give us your Mercari sign-in details (and any one-time code) so we can sign in for you. Your Mercari password is used only for that sign-in attempt and is not stored. What we keep is the resulting signed-in session — the cookies and site storage Mercari issues — and your Mercari user identifier, so the Service can act on your account without asking you to sign in again.

Product, listing and inventory data

Products, listings, prices, quantities, categories, descriptions, item specifics, templates and stock movements that you create in the Service or that we import from your connected accounts, and the photos you upload or that we import. Photos are served at web addresses that do not require signing in, because marketplaces must be able to fetch them to show them on your listings.

Orders and your buyers’ information

When we import orders from your connected marketplaces, we receive and store information about your buyers: their name or marketplace username, shipping address, and, where the marketplace provides them, their email address and phone number, together with what they bought, amounts and tracking details. We process this information on your behalf, so you can fulfil and track your orders.

Shipping labels

If you buy postage through the Service, we store the label (as a PDF), its carrier, service, cost and tracking number. If you connect a shipping label provider, we store the API key you give us for your account with that provider.

Access requests

If you request access through our website, we collect what you enter — your email address, name, what you sell, which marketplaces you use, an approximate listing count and any note — together with the IP address and browser description the request came from.

Technical and log information

  • Our servers and network providers record standard request information, such as IP address, requested address, time and browser description. Our application logs also record certain events, such as account registrations and repeated failed sign-in attempts, which can include an email address and IP address.
  • To protect sign-in, we count recent failed attempts by IP address and email address. These counts are held in memory for a short window and are not stored in our database.

Browser storage, cookies and analytics

  • The app keeps your sign-in session in your browser’s session storage, or in local storage if you choose “Keep me signed in”, and keeps a few display preferences (such as theme, table layout and dismissed notices) in local storage. This information stays on your device and is used only to make the app work. You can clear it by signing out or clearing your browser’s site data.
  • The Service does not set its own cookies and does not use advertising or cross-site tracking technologies.
  • Our websites are delivered through Cloudflare, which may collect privacy-focused web analytics (for example, page views and performance timings) through a script that does not use cookies, and may set cookies of its own that are strictly necessary for security.

2. How we use information

We use personal information to:

  • provide the Service — sync listings, stock and prices across your marketplaces, publish, revise and end listings at your direction, import orders, and buy and print shipping labels;
  • create and secure your account, keep you signed in, and detect and prevent abuse, fraud and unauthorized access;
  • review access requests and communicate with you about your account, the Service and support requests;
  • manage trials and subscriptions;
  • troubleshoot, maintain and improve the Service; and
  • comply with law and enforce our Terms.

We do not sell personal information, we do not “share” it for cross-context behavioral advertising, and we do not use it to show ads. We do not use your data or your buyers’ data to train artificial-intelligence models.

3. How we share information

We share personal information only as described here:

  • Marketplaces, at your direction. We send listing data, photos, quantities, prices and related information to eBay, Mercari and other marketplaces you connect, and read your listings and orders from them. Their handling of that information is governed by their own privacy policies.
  • Shipping label providers, at your direction. When you buy a label through a provider you have connected (for example, Shippo or EasyPost) or through eBay, we send the ship-from and ship-to names, addresses and phone numbers and the package details needed to buy the label, using your own account with that provider. For providers without an integration, we generate a file for you to upload yourself.
  • Service providers that run the Service for us, who process the information only to provide their services to us:
    • DigitalOcean — hosting of our servers, database and stored files (United States);
    • Cloudflare — content delivery, network security, and web analytics;
    • a network proxy provider — routes our connections to certain marketplaces; and
    • Stripe — payment processing, once paid subscriptions are available. Stripe receives your payment details directly; we do not store full card numbers.
  • Legal and safety. When we believe in good faith that disclosure is required by law or legal process, or is necessary to protect the rights, property or safety of you, us or others.
  • Business transfers. In connection with a merger, acquisition, financing or sale of assets, subject to this Policy.

4. How long we keep information

  • While your account is open, we keep your account, connected-account, catalog, order and label information so the Service can work.
  • Disconnecting a marketplace account permanently deletes the tokens or session we held for it and the listings and orders imported from it.
  • Deleting your account. You can delete your account from the account settings in the app or by emailing us. Sign-in is blocked immediately, and after a 30-day grace period — during which deletion can be cancelled — we permanently delete your account and the data linked to it from our live database, including connected-account credentials, products, listings, orders and your buyers’ information, and your uploaded photos and label files. Deleting your ListSwiftly account does not remove listings that are live on a marketplace; manage or end those on the marketplace.
  • What remains after deletion. We keep an administrative record of account actions taken by our staff and of the deletion itself (including the account’s email address) for security and accountability. An access request you submitted before opening your account is kept separately and is not removed by account deletion; ask us and we will delete it. Copies may also persist in server logs and in database backups; backups are deleted automatically after 14 days.
  • Access requests are kept so we can manage our waitlist; ask us and we will delete yours.

5. Security

We use reasonable administrative and technical safeguards designed to protect personal information. Traffic between your browser or app and the Service is encrypted in transit with TLS. Passwords are stored only as bcrypt hashes, and sign-in renewal tokens and password-reset links are stored only in hashed form. Marketplace tokens and sessions are kept in our database and used only by the parts of the Service that act on your behalf; every request to the Service’s API is checked so one seller cannot reach another’s data. Sign-in is rate-limited, and sessions can be revoked.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. Please use a strong, unique password and tell us right away at [email protected] if you suspect unauthorized access to your account.

6. Your choices

  • You can view and update your account and catalog information in the app.
  • You can disconnect a marketplace in the app, and you can also revoke our access from the marketplace itself.
  • You can delete your account as described above.

7. Your California privacy rights

If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act (together, the “CCPA”), gives you the following rights, subject to certain exceptions:

  • Right to know the categories and specific pieces of personal information we have collected about you, the sources, the purposes, and the categories of third parties we disclose it to;
  • Right to delete personal information we have collected from you;
  • Right to correct inaccurate personal information;
  • Right to opt out of sale or sharing. We do not sell personal information or share it for cross-context behavioral advertising, and have not done so in the past 12 months;
  • Right to limit use of sensitive personal information. The sensitive personal information we collect — your account sign-in credentials and the credentials for your connected marketplace and shipping accounts — is used only to provide the Service you request, as the CCPA permits; and
  • Right to non-discrimination for exercising any of these rights.

Categories collected in the past 12 months: identifiers (name, email address, IP address, marketplace usernames and identifiers); customer records (shipping and ship-from addresses and phone numbers); commercial information (products, listings, orders, subscription status); internet or other electronic network activity (log and session information); and sensitive personal information (account and connected-account credentials). Sources are you, your connected marketplaces and shipping providers, and your device. Purposes and recipients are described in sections 2 and 3, and retention in section 4.

Your buyers’ information is processed by us on behalf of you, the seller, as your service provider. Buyers who wish to exercise rights over that information should contact the seller, and we will assist the seller as required by law.

To exercise your rights, email [email protected] from the address on your account. We will verify your request by confirming it with that address, and respond within the time the law requires. You may use an authorized agent; we may ask for proof of the agent’s authority and verify your identity directly.

8. Children

The Service is intended for sellers and is not directed to children. We do not knowingly collect personal information from children under 16. If you believe a child has given us personal information, contact us and we will delete it.

9. International users

ListSwiftly is operated from the United States, and the information we collect is stored and processed in the United States. If you use the Service from outside the United States, your information will be transferred to and processed in the United States, where data-protection laws may differ from those where you live.

10. Changes to this Policy

We may update this Privacy Policy from time to time. When we do, we will post the new version on this page and change the effective date above. If a change is material, we will give you reasonable notice — for example by email or in the app — before it takes effect.

11. Contact

Questions or requests about this Policy or your information:

List Swiftly LLC

[email protected]