Privacy and data handling

Last updated: July 15, 2026

ListLift is an independent tool that helps Etsy sellers turn their own listings into Pinterest and Instagram content. This policy explains what data we collect, how we use it, and the control you keep over it. ListLift is not affiliated with, endorsed by, or partnered with Etsy, Inc.

Data we collect

• Account information. When you sign in, we store your email address and a user ID via Google sign-in or magic-link email — whichever you choose. We never see or store your Google password.
• Etsy shop connection.To generate content, you connect your own Etsy shop through Etsy's official authorization screen, granting ListLift read-only access to your listings. We store the resulting access and refresh tokens so the connection persists, plus your shop ID so we can confirm a listing is yours. You can disconnect at any time from your account page, which deletes the stored tokens.
• Etsy listing data.We read your own listings' data — title, description, tags, price, and images — through Etsy's official API. We only ever read listings belonging to the shop you connected, and we never access orders, messages, buyer data, or any other private seller data.
• Voice profile. If you complete the voice-setup questionnaire or paste sample posts, we store the resulting style profile (tone, vocabulary preferences, phrases to avoid, etc.) to your account so future generations sound like you. You can view, edit, or clear this at any time from your profile page.
• Generation history. We store each generation request (the listing you submitted, the options you chose, and the resulting drafts) so you can revisit past results from your history page.
• Pinterest connection.Publishing to Pinterest is optional. If you choose to connect a Pinterest account, we send you to Pinterest's official authorization screen and store the resulting access and refresh tokens, encrypted at rest (AES-256-GCM). The permissions we request are boards:read, boards:write, pins:read, pins:write and user_accounts:read — used only to list your boards so you can pick one, confirm the account is a Business account, create the pin you asked us to publish, and read that pin back so we can show you its link. We store the resulting pin ID and URL alongside your generation history. You can disconnect at any time from your account page, which deletes the stored tokens.
• Pin images.When you publish a pin, the image you composed is uploaded to our media storage so Pinterest can fetch it by URL — this is how Pinterest's API accepts images. These files live in a publicly readable bucket: anyone with the exact link can view the image, though we do not list or index those links. The images are the ones you selected from your own listing.
• Billing information. If you upgrade to a paid plan, payment is processed by our payment provider, Creem. We receive your subscription status and plan tier, not your card details — ListLift never sees or stores your payment card number.
• Waitlist submissions. If you join our waitlist before signing up, we collect the email address — and any optional shop name or URL — that you submit.

How we use your data

• To generate editable Pinterest descriptions and Instagram captions from your listing content, in your own voice.
• To send the listing text and, where available, your voice profile to our AI provider (DeepSeek) at the moment of generation. This is used purely for inference — nothing you submit is used to train any model, ours or theirs.
• To publish a pin to the Pinterest board you select, at the moment you click publish on a draft you are looking at.
• To maintain your account, history, and usage quota.
• To process subscription payments and enforce plan limits.
• To contact you about your account, or about ListLift access and product updates if you joined the waitlist.

Analytics and cookies

We use privacy-conscious analytics to understand how visitors find and use this site so we can improve it. These services may set cookies or similar identifiers in your browser:

• PostHog — measures page views, sign-ups, and product usage.
• Google Analytics — measures site traffic and referral sources.

This data is aggregated and used for analytics only. We do not sell it or use it to identify you personally. You can opt out by blocking cookies in your browser or using a tracking-blocking extension.

What we never do

• Edit or publish changes to your live Etsy listings — our Etsy access is read-only.
• Post anything you haven't approved. Nothing reaches Pinterest unless you approved that exact draft — either by publishing it yourself, or by scheduling it for a time you chose. We never decide what goes out, and never when. Instagram captions are copied and posted by you.
• Read anything from Etsy beyond the listings of the shop you connected — no orders, no messages, no buyer data.
• Manage your orders or message your buyers.
• Sell or share your data with third parties for marketing.
• Train AI models on your content.

Third-party services we rely on

We use a small set of vetted providers to run ListLift, each of which processes data only as needed to provide their service to us:

• Supabase — authentication, database, and media storage hosting.
• Etsy Open API — read-only access to the listings of the shop you connected.
• Pinterest API — optional; publishing pins to your own boards when you ask.
• DeepSeek — AI text generation (inference only).
• Creem — subscription payment processing.
• PostHog and Google Analytics — product and site analytics.

Your control and data deletion

You can edit or clear your voice profile at any time from your profile page. You may request deletion of your account and any data we hold about you by emailing listliftsupport@proton.me. We retain data only as long as needed to provide the service or as required by law.

Security

Account data and generation history are protected with industry-standard safeguards, including encryption in transit and row-level access controls so you can only ever read your own data. Connection records holding your Etsy and Pinterest tokens are readable only by our server and are never exposed to your browser; Pinterest tokens are additionally encrypted at rest with AES-256-GCM.

Changes to this policy

We may update this policy as ListLiftevolves. Material changes will be reflected here with a new “last updated” date.

Contact

Questions about this policy or your data? Email us at listliftsupport@proton.me.