Privacy Policy

01Google Drive access

Some tools can save your prepared files to your own Google Drive and create a shareable link you can give to buyers. When you connect Drive, ListingPrep uses Google's limited drive.file scope. In plain terms:

• The app can only see and touch files it creates itself through ListingPrep. It cannot read, list, or access anything else in your Drive.
• It creates folders to keep your prepared files organized, and uploads the files you generate.
• It sets public link sharing only on your Print Files, so your buyers can open them — nothing else is shared.
• It reads back the resulting share link so your delivery PDF can carry it.

How the processing happens

File preparation runs in your browser. The only server-side step is a Cloudflare Function used solely for the Google OAuth exchange (swapping the sign-in code for an access token). Your files are never stored on our servers — there is no file storage on our side at any point.

No third-party sharing

We do not sell, rent, or share your Drive content or tokens with any third party. The connection exists only to let the tool write to your Drive on your behalf, and you can disconnect ListingPrep from your Google Account settings at any time.

02Your account (optional)

Every tool works with no account at all. If you choose to create one — with an email and password, or by signing in with Google — here is exactly what that involves:

• Data controller: Geoffrey, operator of ListingPrep (see the Legal Notice for full identity and address).
• What we store: your email address; if you use a password, a salted one-way hash of it (PBKDF2) — we never store or can recover your actual password; whether you've verified your email; whether you signed in with Google; a session identifier while you're signed in.
• Processor (transactional email): Resend sends the account emails your account itself triggers — email verification and password-reset links. This is separate from the Kit mailing list described below, which you only join if you opt in to product updates.
• Where it's stored: our account database runs on Cloudflare D1 in the EU region.
• Legal basis: performance of the contract you enter into by creating an account (providing the account features you asked for).
• Retention: for as long as your account exists.
• Your control: from your account page you can export a copy of your account data or permanently delete your account and all associated data at any time, without contacting us.

03Email updates (Kit)

If you choose to leave your email to hear about new tools, here is exactly what that involves:

• Data controller: Geoffrey, operator of ListingPrep (see the Legal Notice for full identity and address).
• Processor: Kit (the email service provider that stores the list and sends the messages on our behalf).
• Purpose: sending occasional product updates — new tools and meaningful changes. Nothing else.
• Legal basis: your consent, confirmed by double opt-in (you click a confirmation link before any updates are sent).
• Retention: we keep your email only while you remain subscribed; if you unsubscribe, your address is removed from the active list.
• Unsubscribe: every email includes a one-click unsubscribe link, and you can opt out at any time.

You can also request access to, or erasure of, the email data we hold about you — see Your rights & contact below.

04Analytics (Cloudflare Web Analytics)

To understand which tools are useful, we use Cloudflare Web Analytics. It is cookieless and privacy-friendly: it sets no cookies, does not track you across sites, and collects only aggregated usage figures (page views, referrers, broad country/device categories). It does not collect or store personally identifiable information, and there is no advertising or cross-site profiling.

05Your rights & contact

If you have an account, the fastest way to exercise your rights of access, erasure, and data portability is self-service, from your account page: an "Export my data" button gives you a copy of everything tied to your account, and a "Delete my account" button permanently removes your account and its data — no waiting on us.

For anything else — including requests about the Kit mailing list, or if you don't have an account — you can ask us to access, correct, or delete the personal data we hold about you. We will action reasonable requests promptly.

Our account database is hosted in the EU. For users in the European Union, the rights above are exercised under the GDPR; see also each processor's own privacy policy (Google, Kit, Resend, Cloudflare) for how they separately handle data on our behalf.

For any privacy question or request, contact info@listingprep.io.

This policy is written from a product standpoint to be clear and honest about how the tools work. It is not legal advice, and it does not promise anything the service does not actually do.