Privacy Policy

ListingAI Ltd ("ListingAI", "we", "us", "our") is a company registered in England and Wales. We operate the ListingAI platform at listing-ai.co.uk, an AI-powered property listing generator for UK letting agents.

For privacy enquiries, contact us at privacy@listingai.co.uk

We collect the following categories of personal data:

• Account data: Your name, email address, and agency name when you register.
• Usage data: Property notes you enter, listings you generate, and how you use the platform.
• Billing data: Payment information is processed by Stripe. We store only your Stripe customer ID — we never see or store your card details.
• Technical data: IP address, browser type, and session information for security and performance.
• Communications: Emails you send us and transactional emails we send you.

We use your personal data to:

• Provide and operate the ListingAI service
• Process your subscription and manage billing via Stripe
• Send transactional emails (account confirmation, subscription updates)
• Improve the quality of AI-generated listings
• Respond to support requests
• Comply with legal obligations

We do not sell your personal data to third parties. We do not use your property notes or generated listings to train third-party AI models.

We process your personal data under the following lawful bases:

• Contract: Processing necessary to provide the service you have subscribed to.
• Legitimate interests: Improving our platform, fraud prevention, and platform security.
• Legal obligation: Compliance with applicable UK law.

Your data is stored on servers provided by Supabase, located within the European Union and United Kingdom. All data transfers comply with UK GDPR requirements.

We use the following sub-processors to deliver our service:

• Supabase — database and authentication (EU servers)
• Stripe — payment processing (PCI DSS compliant)
• OpenAI — AI listing generation (data processed per OpenAI's API policy)
• Vercel — application hosting
• Resend — transactional email delivery

We retain your personal data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where we are required by law to retain it (e.g. billing records for 7 years under UK tax law).

Under UK GDPR, you have the following rights:

• Article 15 — Right of access: Request a copy of your personal data.
• Article 16 — Right to rectification: Correct inaccurate personal data.
• Article 17 — Right to erasure: Request deletion of your personal data ("right to be forgotten").
• Article 18 — Right to restriction: Restrict how we process your data.
• Article 20 — Right to portability: Receive your data in a machine-readable format.
• Article 21 — Right to object: Object to processing based on legitimate interests.

To exercise any of these rights, email privacy@listingai.co.uk. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

We use the following cookies:

• Authentication cookies: Essential cookies to keep you signed in. These cannot be disabled.
• Session cookies: Temporary cookies deleted when you close your browser.

We do not use advertising, tracking, or analytics cookies. We do not use third-party tracking pixels or share data with advertising networks.

We implement appropriate technical and organisational measures to protect your personal data, including encryption in transit (TLS), encrypted database storage, and access controls. However, no system is 100% secure — please use a strong, unique password for your account.

We may update this Privacy Policy from time to time. We will notify you of significant changes by email. Continued use of ListingAI after changes constitutes acceptance of the updated policy.

For any privacy-related questions or to exercise your rights, contact us at: privacy@listingai.co.uk

ListingAI Ltd, England and Wales