Privacy

Draft. The facts below describe what this build of the app actually does. The contact address is real; the registered company name, postal address, company number and governing law are still PLACEHOLDER, so this page is not yet a binding policy.

The short version

• Your designs, mockups, renders, listing drafts and exports live in this browser's IndexedDB, on your device. We do not keep a copy.
• Data leaves your browser only when you press a button that sends it: Create on Printify, Send, Publish, an AI chat message, or Etsy research.
• There are no advertising cookies, no third-party analytics and no tracking pixels.
• We do not sell personal data, and we do not build advertising profiles.
• The local tools work without an account.

Who we are

ListBulkly is operated by PLACEHOLDER — legal entity name, registered address and company number. Privacy contact: listbulkly@gmail.com. This page will be dated and put in force only after those company details exist.

What stays on your device

The workspace is local-first. The following are written to IndexedDB for this site's origin and are never uploaded by us:

• Artwork files, ink variants and background-removed copies.
• Mockup photos, print areas, crops and garment references.
• Composited renders and their fingerprints.
• Listing drafts, prices, image selections, batch scope and the Studio session.
• Export history and activity entries.

Small preferences (for example whether the sidebar is collapsed, the selected Printify shop and the extension handshake marker) use localStorage/sessionStorage instead.

What our server receives

• Provider requests you trigger. The server relays them to Printify, an AI provider, Etsy or another integration. The request body is used for that call and is not written to a database.
• API keys you paste in Settings. They are saved in this browser's IndexedDB and sent with the matching request as headers. The server uses them for that request only; it does not store them.
• The operator's own keys. A site-wide Printify or AI key, when configured, is held as a Cloudflare Worker secret and is never sent to your browser.
• Request metadata. Our host (Cloudflare) processes standard request data such as IP address, time, URL and user agent in order to serve and protect the site.
• Upstream error text. When Printify rejects a request, its message is shown to you so you can fix the cause. It may name the product or field involved.

Third parties

Nothing is sent to a provider until you use the feature that needs it.

• Printify — creating and updating products, uploading artwork, mockups and the mockup selection, and publishing when you press Publish. Receives the artwork, mockup images, title, description, tags, price and variant data needed for that call.
• Your chosen AI provider — the chat messages, prompts and images you send in the agent panel or save-listing tools. The provider is the one you pick; its own privacy terms apply.
• Etsy — read-only keyword research. Receives the search query. It does not receive your library, your drafts or your Printify data.
• Supabase — sign-in and session handling when you use an account. It stores a profile row (the email you signed up with) and nothing else: no designs, mockups, renders, listing drafts or API keys ever reach it.
• Resend — transactional email, once a verified sending domain exists. Until then Supabase Auth sends its own verification and reset mail.
• Razorpay — payments, when billing is switched on. Payment details are entered with Razorpay; we never receive full card numbers.
• Cloudflare — hosting, CDN and Worker runtime for this site.

Printify and Etsy are independent companies. ListBulkly is not affiliated with or endorsed by either of them, and their terms apply to the accounts you connect.

Cookies

There are no advertising or analytics cookies. The only cookie this site sets is the session cookie created by Supabase Auth once sign-in is enabled; before that, there is no authentication cookie. See Cookies for the full list.

Retention and deletion

• On your device: until you delete the item, clear the site's data in your browser, or the browser evicts storage under pressure. Clearing site data for this origin removes the whole library.
• Saved API keys: the Settings page has a "Clear keys from this browser" action.
• On our server: there is no design or listing database to retain. Request logs held by our host follow its retention settings.
• Account data: deletion requests go to listbulkly@gmail.com with "delete my account" in the subject.

Your rights

Depending on where you live, you may have the right to access, correct, export, delete or object to the processing of your personal data, and to complain to your local data-protection authority. Most of your data is already on your device: Settings → Export everything to a folder writes the whole workspace (designs, mockups, renders, drafts, settings) straight from your browser to a folder you choose — nothing is uploaded — and clearing site data deletes it. For anything held by an account or a provider, contact listbulkly@gmail.com. We do not sell personal information.

Children

ListBulkly is a seller tool and is not directed to children. It is not intended for use by anyone under 16 (or the minimum age in your jurisdiction — PLACEHOLDER).

International transfers

The site runs on Cloudflare's global network, and the providers listed above process data in the regions where they operate. Where a transfer needs a legal mechanism, PLACEHOLDER — transfer mechanism will be recorded here.

Changes

When this policy changes, the date at the top changes with it. A material change will be announced on this page before it takes effect. This draft is not in force yet.

Contact

Questions or requests: listbulkly@gmail.com. The full contact details are on the Contact page.