Last updated 3 October 2026
Privacy policy
Listaify (listaify.com) is operated by blv.group ("we"). This policy covers the website, the listing tracker and the emails we send. Questions or requests about your data: [email protected].
What we collect and why
- Your account. Your email address, to sign you in and send what you ask for. With Google sign-in we receive your email address from Google and keep nothing else from your Google account. Your team, its members and invitations.
- Your apps and your tracker. What you add: the app's name, website, descriptions, logo and screenshots, competitors, the places you plan or submit to, their statuses, your notes and what you paid. The listing kit is made from your website's public pages.
- Submissions on your behalf. When you turn on the submit robot or order the done-for-you service, we send your app's details to the places you chose. Each place then holds them under its own terms.
- App mail. If your app uses an address of ours (a handle at apps.listaify.com), we receive the mail sent to it, store it, show it in your tracker, open one-time verification links that come from the place's own domain, and forward a copy to your team.
- Payments. The plan, the amount, the status and the payment provider's reference. Card details go straight to Stripe and crypto payments go through NOWPayments; we never see or store card numbers.
- Places we list. If you manage a place's page: your email address, what you add to the partner page, a check of your site's home page for our badge, and the number of visits and clicks your site gets from us.
- Forms and email. What you send us through a form or by email: your name, website, email address, a handle and the message.
- Visits. We count page views and clicks to places in our own database: the page, the referring site, the country, the device type, the browser language and the user agent. Your IP address is replaced by a salted hash and is not kept. Visit records are deleted after about six months (190 days).
- Analytics. Google Analytics, as described under Cookies.
We do not sell personal data and do not use it for advertising.
Who processes data for us
- belov.cloud: hosting, the database and its nightly backups
- Cloudflare: content delivery, DNS and backup storage
- Hetzner: the server where the submit robot's browser runs, when you turn the robot on
- Migadu: the email we send and receive
- Stripe: card payments
- NOWPayments: crypto payments
- Google: sign-in with Google, and Google Analytics
- OpenRouter: the AI that drafts the listing kit, through the model providers it routes to; they receive your website's public text and screenshots, nothing from your account
- Telegram: notices to our own team about new accounts, orders and requests, which include the email address involved
Some of them process data outside your country, including in the United States. They do so under the European Commission's standard contractual clauses or an equivalent safeguard.
Legal bases
We process your data to provide the service you signed up or paid for (contract); to keep the site secure, prevent abuse, count visits and improve the catalogue (legitimate interests); to set analytics cookies where the law asks for consent (consent); and to keep payment records (legal obligation).
How long we keep it
Account, app and tracker data stay while your account exists. Ask us to delete your account and we do it within 30 days, except payment records, which we keep as long as accounting law requires. Visit records go after about six months (190 days). Backups are encrypted and rotate within 14 days.
Your rights
You can ask to see, correct, export or delete your data, to object to or restrict how we use it, and you can withdraw consent at any time. Write to [email protected]; we answer within 30 days. You can also complain to the data protection authority where you live.
Cookies
We use the cookies below. In the European Economic Area, the United Kingdom and Switzerland, Google Analytics sets its cookies only after you accept them; elsewhere they are on unless you decline. Your choice is kept for a year and you can change it at any time: .
| Cookie | What it does | Kept for | Kind |
|---|---|---|---|
| lfsid | Keeps you signed in | 30 days | Necessary |
| lfadm | Keeps an admin signed in to the admin pages | 30 days | Necessary (admins only) |
| lfu | Shows on cached pages that you are signed in; holds only the first letter of your email address | 30 days | Necessary |
| lfgs | Protects the Google sign-in round trip | 10 minutes | Necessary |
| lfconsent | Remembers your cookie choice | 1 year | Necessary |
| _ga, _ga_* | Google Analytics: counts visits and how people find the site | Up to 2 years | Analytics (only with consent in the EEA, the UK and Switzerland) |
The tracker also keeps changes you have not saved yet in your browser's local storage, so a closed tab loses nothing; they stay on your device.
Children
Listaify is for founders and teams, not for anyone under 16.
Changes
When this policy changes, the date at the top changes too. If a change affects how we use your data, account holders hear about it by email first. The terms of service cover the rest of how the service works.