Privacy Policy

1. What We Collect

• Contact identifiers — your phone number (from WhatsApp, Telegram, or LINE) and email address, used to create and verify your account.
• Message content — the text, voice notes, and images you send to Listify in order to manage your lists.
• List data — the lists, items, fields, relations, reminders, and notes you create through the service.
• Usage data — timestamps, session metadata, platform identifiers, and token consumption, used to operate the service and enforce usage limits.

We do not collect payment card details directly — payments are handled by Stripe.

2. How We Use Your Data

• To operate Listify — understand your messages, manage your lists, and send responses.
• To deliver reminders you have configured.
• To verify your identity during onboarding.
• To enforce usage limits and manage subscriptions.
• To improve the service — we may retain anonymised, non-identifiable usage statistics (such as "account active for 8 months, 47 lists created") after account deletion for product analysis. This data contains no personal information and cannot be linked back to you.

We do not sell your data. We do not use it for advertising.

3. Third-Party Services

To operate Listify, your data is processed by the following third parties:

• AI providers — message content is sent to third-party language model APIs to interpret your requests. We work with reputable AI infrastructure providers and select them based on performance, cost, and data handling standards. These providers do not use your data to train their models.
• Vercel — our hosting provider. Processes request data as part of serving the application.
• Prisma / Neon — database infrastructure. Your list data is stored on their platform.
• Stripe — payment processing. Handles subscription billing; we do not store card details.
• Forward Email — used to send verification and notification emails.
• Meta (WhatsApp), Telegram, LINE — the messaging platforms through which you interact with Listify. Their own privacy policies apply to messages sent through their platforms.

We may use privacy-respecting analytics tools in the future to understand how the landing page is used. If we do, this policy will be updated.

4. Data Retention

• Chat session history is retained for a maximum of 12 months and then automatically deleted.
• Your list data and account persists until you request deletion.
• After account deletion, all personal data is permanently removed within 30 days. Anonymised usage statistics (no names, no content, no identifiers) may be retained indefinitely for product improvement.

5. Your Rights (GDPR)

As a user under GDPR, you have the following rights regarding your personal data:

• Right of access — request a copy of the data we hold about you.
• Right to rectification — request correction of inaccurate data.
• Right to erasure — request deletion of your account and all associated personal data. See our Data Deletion page for how this works.
• Right to data portability — request your data in a structured, machine-readable format.
• Right to restriction — request that we limit how we process your data in certain circumstances.
• Right to object — object to processing of your data where we rely on legitimate interests as our legal basis.

To exercise any of these rights, contact us at privacy@listify.chat. We will respond within 30 days.

6. Legal Basis for Processing

We process your data on the following legal bases:

• Contract performance — processing necessary to provide the Listify service you signed up for.
• Legitimate interests — anonymised usage analytics for product improvement, where this does not override your rights.
• Legal obligation — where processing is required to comply with applicable law.

7. Security

We use industry-standard measures to protect your data: encrypted connections (TLS), access-controlled infrastructure, and minimal data exposure between services. No system is perfectly secure. If you discover a vulnerability, contact us immediately at privacy@listify.chat.

8. Children

Listify is not directed at children under 13. We do not knowingly collect data from children. If you believe a child has provided us with personal data, contact us and we will delete it promptly.

9. Changes to This Policy

We may update this policy as the service evolves. The date at the top of this page reflects the most recent revision. For material changes, we will notify active users via the bot.

10. Contact & Complaints

Questions or concerns? Reach us at privacy@listify.chat.

Icarus Solution Development — KVK: 93470371 — is based in the Netherlands. If you are unsatisfied with our response, you have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).