Last updated: May 29, 2026
Account Information: When you register, we collect your email address, display name, and optional profile photo. If you sign in with Google, we receive your name and email from Google.
Listing Data: When you create a listing, we store your photos, title, description, price, category, condition, location (city/state/ZIP), and tags.
Messages: We store messages sent between buyers and sellers through the in-app messaging system.
Payment Information: Payment processing is handled entirely by Stripe. We never collect, store, or have access to your credit card numbers. We receive only transaction metadata (amount, timestamp, status).
Usage Data: We may collect anonymous usage data (page views, feature usage) to improve the Service.
We use your information to: operate and maintain the Service; display your listings and profile to other users; process credit purchases; facilitate messaging between buyers and sellers; send essential account notifications (password resets, security alerts); analyze product photos using AI to generate listing suggestions; and detect and prevent fraud or abuse.
When you upload photos for a listing, they may be sent to third-party AI services (Google Gemini, Google Lens, SERP API) for product identification, description generation, and retail price lookup. These services process your photos in accordance with their own privacy policies. Photos are sent only when you initiate AI analysis.
We do not sell your personal data to third parties. We may share data with: Stripe (payment processing); Google (AI analysis, hosting, authentication); Law enforcement (when required by law or to protect safety). Your public listing data (photos, title, price, location city) is visible to all users.
All data is encrypted in transit (TLS 1.2+) and at rest (AES-256, Google-managed). Session cookies are httpOnly, secure, and use SameSite protection. API keys and secrets are stored in environment variables and never exposed to clients. We use Firebase Authentication for secure identity management.
Active listings are retained until removed by you. Sold listings are retained for 1 year for seller history, then anonymized. Photos are deleted 30 days after listing deletion. Messages are retained for 1 year after the last message. Credit transactions are retained for 7 years (financial compliance). Account data is retained until you request deletion.
You have the right to: Access your data (profile, listings, messages are all visible in-app); Correct inaccurate information via your profile settings; Delete your account and associated data; Export your data in machine-readable format (coming soon); Opt out of non-essential data collection. To exercise these rights, contact [email protected] or use the account deletion option in your profile settings.
We use a single essential session cookie (__session) for authentication. This cookie is necessary for the Service to function and does not require consent. We do not use tracking cookies or third-party advertising cookies.
ListMint is not intended for users under 18 years of age. We do not knowingly collect information from children. If you believe a child has provided us with personal information, please contact us immediately.
California residents have additional rights under the CCPA, including the right to know what data we collect, the right to delete your data, and the right to opt out of the sale of personal information. We do not sell personal information. To exercise your rights, contact [email protected].
We may update this policy from time to time. We will notify you of material changes by email or through the Service. Continued use after changes constitutes acceptance.
For privacy inquiries, data requests, or concerns, contact us at [email protected].