Privacy Policy

Account data:

• Email address (required to register)
• Password (stored as a bcrypt hash — we never see your plain password)
• Account creation date and last login timestamp

Usage data:

• Listings you generate: product details you input, platform, language, generated output
• Credit balance and transaction history
• Payment records: order ID, amount, status (we do not store card numbers or crypto wallet keys)

Technical data:

• IP address (for rate limiting and fraud prevention)
• Browser type and operating system (via standard HTTP headers)
• Server-side logs (retained for up to 30 days)

• To provide and operate the Service
• To process payments and credit your account
• To prevent fraud, abuse, and unauthorized access
• To send transactional emails (payment confirmations, account notices)
• To improve the Service based on aggregated, anonymized usage patterns
• To comply with legal obligations

We do not sell your personal data. We do not use your data for advertising.

We share your data only with:

• Supabase — our database and authentication provider. Data is stored on Supabase-managed servers. See supabase.com/privacy.
• OpenAI — your product input is sent to OpenAI's API to generate listing content. OpenAI may use API data per its own policies. See openai.com/policies/privacy-policy.
• NowPayments — crypto payment processing. We share order amount and ID; no personal data beyond an order reference. See nowpayments.io/privacy-policy.
• Law enforcement — if required by law or to protect rights, safety, or property.

We retain your account data for as long as your account is active. Generation history is retained indefinitely to allow you to access past results. Payment records are retained for 7 years for accounting purposes. Server logs are deleted after 30 days.

You may request deletion of your account and all associated data by emailing support@listingforge.xyz. Deletion will be processed within 30 days. Payment records required for legal compliance are excluded.

We use session cookies to keep you logged in (managed by Supabase Auth). We store your language preference in localStorage. We do not use tracking cookies, analytics cookies, or third-party advertising cookies.

We use industry-standard measures to protect your data: HTTPS/TLS encryption in transit, bcrypt password hashing, row-level security in our database, and rate limiting on all API endpoints. No method of transmission over the internet is 100% secure; we cannot guarantee absolute security.

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Object to or restrict certain processing
• Data portability (receive your data in a machine-readable format)

To exercise any of these rights, email legal@forzena.com.

The Service is not directed at children under 18. We do not knowingly collect data from minors. If you believe we have inadvertently collected data from a minor, contact us and we will delete it.

We may update this Privacy Policy from time to time. We will post the updated policy on this page with a revised effective date. Material changes will be communicated via email or a banner on the Service.

Questions or concerns about this Privacy Policy? Contact us at legal@forzena.com or support@listingforge.xyz.