Security measures
ListingMind protects account, listing, credit, and payment data with layered technical safeguards. All traffic to and from ListingMind -- the website, the extension, and every API call -- is encrypted in transit over HTTPS/TLS. Data at rest is stored in our managed database provider's encrypted infrastructure.
Row-level security policies restrict every account's data -- profile, wallet, credit history, saved reports, and payment records -- so a signed-in user can only read or write their own records. Administrator actions require a verified admin role and are separately audited. Passwords are never stored in plain text: authentication uses industry-standard hashed password storage. AI, marketplace, email, database, and payment credentials are kept as encrypted secrets on ListingMind's protected server infrastructure and are never included in the Chrome extension package, public web pages, or any API response reachable from the browser.
Operational logs are designed to omit credentials and customer page evidence, and access to production infrastructure is limited to the individuals who operate the service. If you discover a security issue, please report it to support@listingmind.io.
Product and listing data
When a tester runs Listing Analysis, the extension may read visible product-page information such as title, URL, brand, category, price, rating, reviews, images, bullets, description, specifications, and page evidence needed to build the report.
AI and provider processing
ListingMind may send selected listing evidence to configured AI or provider services to support analysis. Reports separate verified listing facts from AI-generated ideas and provider evidence.
Credentials and API keys
AI, marketplace, email, database, and payment credentials are kept behind the ListingMind server boundary. They are not included in extension packages, public pages, or customer reports.
Google Ads data (Search Volume feature)
What Google user data ListingMind accesses: Trend Explorer's "Search Volume" feature connects to the Google Ads API using the https://www.googleapis.com/auth/adwords OAuth scope. ListingMind's server calls Google's Keyword Plan Idea Service to retrieve read-only historical keyword metrics for a term you search: average monthly search volume, a 12-month search-volume history, advertiser competition level, and an estimated cost-per-click / bid range.
How ListingMind uses this data: This data is used only to display the Search Volume stat panel to the signed-in user who requested it. It is never used to create, modify, or delete any Google Ads campaign, ad group, keyword, or bid on your behalf; never used for advertising or remarketing; and never shared with third parties or used for any purpose other than displaying that one feature's result. ListingMind's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
How this data is protected: Google account credentials (OAuth client secret and refresh token) are stored only as encrypted secrets on ListingMind's protected server infrastructure -- never included in the Chrome extension, public web pages, or API responses, and never reachable from the browser. Cached search-volume results (the derived metrics only, never credentials) are retained for at most 45 days and then automatically purged.
Saved reports and credits
Signed-in accounts store profile preferences, credit transactions, saved reports, and completed payment records in the ListingMind online account service.
Marketplace data
Marketplace evidence belongs to its source marketplace or provider. ListingMind uses it as decision-support evidence and does not treat discovery results as automatic authority.
Connected seller accounts
When you connect an eBay or Etsy seller account, the marketplace asks you to sign in and approve access on its own website. ListingMind does not receive your marketplace password. We store encrypted authorization tokens and your store connection so we can import the supported data you authorize and show private reports in your ListingMind workspace. Imported records exclude buyer names, contact details, addresses, and payment-card details. Access depends on the permissions and data available from each marketplace.
For Etsy, ListingMind requests read-only access to shop identity, listings and inventory availability, receipts, and payment-account ledger activity through the shops_r, listings_r, and transactions_r scopes. ListingMind does not request Etsy listing-write or email scopes.
Connected accounts are used for data imports and reporting, not to publish listings, change stock or prices, fulfill orders, issue refunds, or send marketplace messages. Disconnecting a store stops imports and removes its saved credentials, but retains previously imported history. You can also revoke access in the marketplace's third-party application settings. Deleting your ListingMind account removes its store connections and imported store records.
When eBay sends a verified marketplace-account deletion request, ListingMind removes the matching eBay connections, credentials, and imported records. Minimal hashed security records are retained to recognize repeated deletion requests and prevent a pending import or connection attempt from restoring the deleted account. These records are protected and are not used for advertising or seller reports. For questions or a request to remove retained store history, contact support@listingmind.io.
Retention and deletion
Account data is retained while the account is active. Operational logs are designed to omit credentials and customer page evidence and are retained only as needed for reliability and security. Administrators review feedback and audit records under the documented retention schedule.
Visitor analytics
With your consent, ListingMind uses a first-party cookie to understand how visitors use the site: pages viewed, the site or link you arrived from, approximate location (country/region/city, not precise coordinates), and how often core features are used. This data is never shared with third parties, is not linked to your identity unless you sign in during that visit, and is automatically deleted after 90 days. You can decline this tracking from the cookie banner shown on your first visit.
Your choices
You can delete saved reports individually or permanently delete your account from My Account. Account deletion removes the profile, wallet, reports, and payment history; submitted feedback is anonymized for product-quality tracking.
Contact
For privacy, deletion, or support questions, email support@listingmind.io.
