Privacy Policy

Last updated: August 2, 2026

1. Who We Are

ListForge is operated as a sole proprietorship (PFA) based in Romania. You can reach us at listforge@pngcliparts.com for any privacy-related question or request.

2. What We Collect

• Account information: your email address, a securely hashed password, and an optional display name
• Usage data: the listings you generate and their content (idea, style, tags, etc.), your credit balance, and purchase history
• Technical data: your IP address, used for rate-limiting and preventing abuse
• Reference images: if you upload one, it's sent to our AI provider to generate that listing and is not stored afterward

3. How We Use Your Data

We use your data to operate the Service: creating and securing your account, generating listings on your behalf, processing credit purchases, sending transactional emails (email verification, password resets), and preventing fraud or abuse.

4. Who We Share Data With

• OpenAI: processes the descriptions and images you submit in order to generate listing content
• Stripe: processes credit card payments when you buy credits; we never see or store your full card details
• Our email provider: delivers transactional emails (verification links, password resets) on our behalf

We don't sell your data, and we don't use advertising or third-party tracking cookies.

5. Cookies

We use a single functional session cookie to keep you logged in. We don't currently use analytics or advertising cookies.

6. Data Retention

We keep your account data and listing history for as long as your account is active. If you delete your account from within the app, your account, listing history, credit balance, and login sessions are permanently and immediately removed from our systems.

7. Your Rights

Depending on your location, you may have the right to:

• Access the data we hold about you
• Export your listing history — available anytime from the History page in the app
• Delete your account and all associated data — available anytime from the app's sidebar
• Correct inaccurate information we hold about you
• Object to or restrict certain processing of your data

If you're in the EU, you also have the right to lodge a complaint with your national data protection authority (in Romania, this is ANSPDCP).

8. Data Security

Passwords are stored using industry-standard hashing, never in plain text. We take reasonable technical measures to protect your data, though no online service can guarantee absolute security.

9. International Data Transfers

Our third-party providers (OpenAI, Stripe) may process data outside of Romania or the EU. Where this happens, those providers maintain their own safeguards and compliance mechanisms under applicable data protection law.

10. Children

The Service isn't directed at children, and we don't knowingly collect data from anyone under 16.

11. Changes to This Policy

We may update this policy from time to time. Material changes will be reflected by an updated "Last updated" date above.

12. Contact

For any privacy question or request, email listforge@pngcliparts.com.