Privacy Policy

Production Ready AI Ltd, trading as Listing Monster

Effective date: 10 September 2025

1. Introduction

Production Ready AI Ltd, trading as Listing Monster (“we”, “our”, “us”), is committed to protecting your privacy and the security of your data.

This Privacy Policy explains what data we collect, how we use and store it, when we share it, and your rights under UK GDPR, EU GDPR, and CCPA. Questions? Contact hello@listingmonster.ai.

2. Data We Collect

2.1 From our customers (sellers using Listing Monster)

  • Name, email address, and phone number
  • Billing and subscription details
  • Marketplace credentials via secure API keys or OAuth (e.g., eBay, Shopify, Vinted, Depop, ShipStation)

2.2 From your customers (buyers on marketplaces)

When you connect marketplaces, we sync order and shipping data strictly to provide the service:

  • Customer names, addresses, and contact details
  • Order details, purchased items, prices, taxes, discounts, and shipping information

2.3 Service data & diagnostics (in-app)

  • Usage events (e.g., syncs, API calls, configuration changes)
  • Device/technical data (browser/OS, region, language, time zone)
  • Error reports and logs for troubleshooting and reliability

Service data does not include marketplace passwords; we do not store those.

3. How We Use Your Data

  • Sync orders from connected marketplaces
  • Inventory, shipping, analytics, and reporting
  • Providing support and improving services (quality, reliability, security)
  • Marketing to sellers only with consent

We do not sell personal data. We also do not process, store, or transmit payment card data; payments (if any) are handled by third-party providers.

4. OAuth/API Connections

When you connect a marketplace via OAuth or API keys, we receive tokens and minimal profile/identifier data required to operate the integration. Tokens are stored encrypted, scoped to the minimum necessary permissions, and can be revoked at any time. We never store marketplace passwords.

5. Data Sharing & Subprocessors

We only share data where you enable an integration or where necessary to deliver our service (e.g., hosting, backups, analytics, customer support). All third parties must meet strict security and privacy requirements.

View our current subprocessors at https://listingmonster.ai/subprocessors.

6. Data Storage & Security

  • Primary hosting on Microsoft Azure in the UK/EU
  • Encrypted backups in Google Cloud Storage (GCS)
  • Encryption in transit (TLS 1.2+) and at rest (AES-256)
  • Access control via RBAC/ABAC and MFA enforced through Azure SSO
  • Secrets stored in an audited key vault

7. International Data Transfers

Some third-party integrations (e.g., Shopify, ShipStation) may process data in the US. Where transfers occur outside the UK/EEA, we rely on Standard Contractual Clauses (SCCs), adequacy decisions (e.g., the EU–US Data Privacy Framework, where applicable), and contractual and technical safeguards to ensure an equivalent level of protection.

8. Data Retention

  • Synced order and customer data: retained until deleted via the admin panel or upon request
  • Financial/accounting records: retained for 6 years
  • Backups: retained for limited rolling periods for resilience and recovery

9. Your Rights

UK/EU (GDPR)

  • Access, rectification, erasure
  • Restriction or objection to processing
  • Data portability

To exercise rights or update your information, email hello@listingmonster.ai.

California (CCPA)

  • Right to know the categories and specific pieces of personal information collected
  • Right to deletion (subject to legal obligations)
  • Right to opt-out of certain sharing (where applicable)
  • Right not to be discriminated against for exercising rights

10. Cookies & Analytics

We use cookies and analytics technologies to improve our services:

  • Google Analytics — monitors website usage and performance.
  • Mixpanel — tracks in-app usage to improve features.

You can disable cookies in your browser, but this may affect functionality.

11. Security & Vulnerability Reporting

If you believe you’ve found a security issue, please contact security@listingmonster.ai with details so we can investigate responsibly.

12. Accuracy of Records

We aim to keep your information accurate. To review or update your details, contact hello@listingmonster.ai.

13. Complaints & ICO

If you have concerns about our use of your data, contact us at hello@listingmonster.ai. You can also complain to the UK Information Commissioner’s Office (ICO):

  • Address: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
  • Helpline: 0303 123 1113
  • Website: https://www.ico.org.uk

14. Changes to This Policy

We may update this policy from time to time. The latest version will be available at https://listingmonster.ai/privacy. Material changes will be communicated where appropriate.

Last updated: 10 September 2025