Privacy Policy
Last updated: September 26, 2026
ListParts.io ("we," "our," or "us") operates the ListParts.io website and platform (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our Service.
By using the Service, you agree to the collection and use of information in accordance with this policy.
1. Information We Collect
Information You Provide Directly
- Account Information: When you create an account or join our waitlist, we collect your email address and, optionally, your name and business name.
- Payment Information: When you subscribe to a paid plan, payment processing is handled by Stripe, Inc. We do not store your credit card number, expiration date, or CVV on our servers. Stripe's privacy policy governs the handling of your payment data.
- Listing Content: Photos, part descriptions, OEM numbers, pricing, fitment data, and other content you upload or create through the Service.
- Support Communications: Information you provide when contacting our support team, including email correspondence and any attachments.
Information Collected Through eBay Integration
- eBay OAuth Tokens: When you connect your eBay account, we receive an OAuth 2.0 access token and refresh token with scoped permissions. We never receive or store your eBay password.
- eBay Listing Data: Information about listings created or managed through our Service, including listing IDs, SKUs, and publish status.
- Market Data: Publicly available eBay listing data collected through eBay APIs for market research and pricing suggestions.
Information Collected Automatically
- Usage Data: Pages visited, features used, time spent on pages, click patterns, and other interaction data.
- Device Information: Browser type, operating system, device type, screen resolution, and language preferences.
- Log Data: IP address, access times, referring URLs, and server response codes.
- Cookies: We use essential cookies for authentication and session management. Our marketing website (listparts.io) also uses Google Analytics and the Meta Pixel, which set their own cookies. See Section 7.
2. How We Use Your Information
We use the information we collect to:
- Provide and maintain the Service, including AI-powered part identification, listing generation, and eBay publishing.
- Process transactions and send related information, including purchase confirmations and invoices.
- Improve our AI models by using aggregated, de-identified listing data to enhance part identification accuracy, pricing suggestions, and fitment matching. Individual listing content is not shared with third parties for this purpose.
- Send you communications related to your account, including service updates, security alerts, and support messages.
- Send marketing communications if you have opted in, such as product updates, guides, and pilot program information. You can unsubscribe at any time.
- Monitor and analyze usage to improve the Service, identify technical issues, and optimize performance.
- Detect, prevent, and address fraud, abuse, and technical issues.
- Comply with legal obligations and enforce our Terms of Service.
3. How We Share Your Information
We do not sell your personal information. We do not share your listing data, sales data, or account information with third parties for their marketing purposes.
We may share information with:
- eBay: Listing data is transmitted to eBay through their official Inventory API when you publish listings. This is necessary to provide the core Service functionality.
- Stripe: Payment information is processed by Stripe, Inc. for subscription billing.
- Cloudflare: Our infrastructure provider for content delivery, security, and image storage.
- Service Providers: We may engage trusted third-party service providers to assist in operating the Service (e.g., email delivery, error monitoring). These providers are contractually obligated to protect your information and use it only for the services they provide to us.
- Legal Requirements: We may disclose information if required by law, subpoena, or government request, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.
- Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.
4. Data Storage and Security
- Encryption in Transit: All data transmitted between your browser and our servers is encrypted using TLS 1.3.
- Encryption at Rest: All stored data is encrypted using AES-256 encryption.
- Infrastructure: Our Service runs on Cloudflare's global infrastructure with DDoS protection, automatic SSL, and edge security.
- Database: User data is stored in encrypted PostgreSQL databases with access restricted to application services.
- Image Storage: Part photos are stored in Cloudflare R2 with encrypted access controls.
- Access Controls: Internal access to user data is restricted on a need-to-know basis with audit logging.
- eBay Tokens: OAuth tokens are stored encrypted and are never exposed in logs, APIs, or client-side code.
While we implement industry-standard security measures, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security.
5. Data Retention
- Account Data: Retained for as long as your account is active. After a store owner closes the account, account data is retained so that access can be restored through support; it is not deleted automatically. Personal data is permanently deleted on a verified request (see Section 6).
- Listing Data: Retained for as long as your account is active, and after the account is closed so that access can be restored. Listings already live on eBay stay on your eBay seller account and are managed there.
- Part Photos: Retained for as long as your account is active, and after the account is closed so that access can be restored.
- eBay OAuth Tokens: Deleted from our systems when you disconnect your eBay account or when a store is terminated because its owner closed the ListParts.io account. You can also remove ListParts.io's access in your eBay account settings.
- Usage and Log Data: Retained for up to 12 months for operational and analytical purposes, then automatically purged.
- Payment Records: Transaction records are retained as required by tax and accounting regulations (typically 7 years).
6. Your Rights and Choices
All Users
- Access: You can view all your data through the Service dashboard at any time.
- Export: You can export your listing data and account information at any time.
- Account Closure: Store owners can close the account on the web in Settings → Account → Delete account. If you are a team member (employee), your store owner can remove your access to the store; to close your user account, contact [email protected], and to have your personal data deleted, contact [email protected]. Closing the account terminates the stores the owner solely owns, ends their employees' access, disconnects eBay (live eBay listings stay on your eBay seller account and are managed there), and cancels those stores' subscriptions at closure with no partial refund for the current billing period; any charge made after the closure is refunded. Your data is retained, and access can be restored only through support after you provide documents that prove your rights to the store.
- Deletion: You can request permanent deletion of your personal data by sending a verified request to [email protected]. Deletion is completed within 30 days. Payment records we must keep by law are retained as described in Section 5.
- eBay Disconnect: You can revoke eBay access at any time from within the Service or directly from your eBay account settings.
- Email Opt-Out: You can unsubscribe from marketing emails at any time using the link in any email. Transactional emails (account security, billing) cannot be opted out of.
California Residents (CCPA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act:
- The right to know what personal information we collect, use, and disclose.
- The right to request deletion of your personal information.
- The right to opt out of the sale of personal information. We do not sell personal information.
- The right to non-discrimination for exercising your privacy rights.
To exercise these rights, contact us at [email protected].
European Economic Area Residents (GDPR)
If you are located in the EEA, you have additional rights under the General Data Protection Regulation:
- The right to access, rectify, or erase your personal data.
- The right to restrict or object to processing.
- The right to data portability.
- The right to withdraw consent at any time.
- The right to lodge a complaint with a supervisory authority.
Our legal basis for processing personal data is: (a) your consent, (b) performance of our contract with you, (c) compliance with legal obligations, and (d) our legitimate interests in operating and improving the Service.
To exercise these rights, contact us at [email protected].
7. Cookies
We use the following types of cookies:
| Type | Purpose | Duration |
|---|---|---|
| Essential | Authentication, session management, CSRF protection | Session / 30 days |
| Functional | User preferences, language settings | 1 year |
| Analytics | Google Analytics on our marketing website: which pages are visited and how visitors arrive, so we can improve the site | Up to 2 years |
| Advertising | Meta Pixel on our marketing website: measures how our ads perform and lets us show ListParts ads on Meta platforms to people who visited our site | Up to 90 days |
Google Analytics and the Meta Pixel run only on our marketing website (listparts.io), not inside the ListParts application. They receive information such as the pages you view, your browser and device type, and your IP address. You can block these cookies in your browser settings, manage ad preferences in your Meta account settings, or install Google's Analytics opt-out browser add-on. We do not sell your personal information.
8. Third-Party Services
The Service integrates with the following third-party services, each governed by their own privacy policies:
- eBay (listing publishing): https://www.ebay.com/help/policies/member-behaviour-policies/user-privacy-notice-privacy-policy?id=4260
- Stripe (payment processing): https://stripe.com/privacy
- Cloudflare (infrastructure): https://www.cloudflare.com/privacypolicy/
- Google Analytics (marketing website analytics): https://policies.google.com/privacy
- Meta (marketing website advertising measurement): https://www.facebook.com/privacy/policy/
9. Children's Privacy
The Service is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child, we will delete it promptly.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date. For significant changes, we will also notify you by email.
Your continued use of the Service after changes are posted constitutes acceptance of the updated policy.
11. Contact Us
If you have questions about this Privacy Policy or wish to exercise your privacy rights, contact us at: