1. Who this covers
This privacy policy covers Listify AI specifically - our Shopify app for generating complete product listings from a photo and product name, published by Noomua. For questions about this policy, contact us at hello@noomua.com.
2. What Listify AI accesses and stores
What we read from and write to your store. Listify AI uses the following Shopify access scopes:
- read_products, read_locations - product and location data used to provide context during listing generation.
- write_products - used only when you choose to publish or update a generated listing to your store. We do not write to your store unless you explicitly trigger a publish action.
- write_inventory - used to set inventory levels when publishing a new listing, at your instruction.
What we store. The data we persist in our database:
- Your shop domain and Shopify access token (token is invalidated and nulled on uninstall).
- Shopify session data required to operate the embedded app.
- Your plan name and subscription state.
- Generation quota counts - the number of listings generated, used to enforce plan limits.
- SKU counters used for listing attribution.
- Brand-voice presets you configure - merchant-authored settings including vendor, product type, tags, tone, target audience, keywords, and custom instructions. These are retained across sessions so your preferences apply consistently.
What we do not store. Listify AI does not persist uploaded product images or generated listing content in its own database. Generation is transient - your photo and product name are sent to Anthropic for processing, the output is returned to you, and no copy is retained on our side after the generation completes.
No store-customer PII. Listify AI does not collect or store customer names, customer email addresses, phone numbers, billing addresses, shipping addresses, or any other personally identifiable information about your end shoppers.
3. How we use your data
- AI listing generation. When you submit a product photo and name, that image and text are sent to the Anthropic Claude API to generate a complete product listing - title, description, tags, SEO fields, and category suggestion. This data leaves Listify AI's systems and is processed by Anthropic. See sub-processors below.
- Applying brand-voice presets. Your saved presets are loaded at generation time so outputs match your store's style and requirements.
- Publishing to your store. When you choose to push a generated listing, we use the write_products scope to create or update the product in your Shopify store on your instruction.
- Quota tracking. Generation counts are used to manage plan limits and billing through Shopify.
- App improvement. Aggregate usage patterns help us understand reliability and feature priorities.
Your data is not sold and is not used for advertising. We share it only with the sub-processors listed below, to the extent required to operate the app.
4. Sub-processors
- Shopify - app installation, OAuth authentication, and billing.
- Supabase - database storage for all app data.
- Anthropic - AI listing generation. Your product photo(s) and product name are transmitted to the Anthropic Claude API at generation time. Anthropic processes this data under its own privacy policy and does not retain submitted images beyond the API processing window.
- Fly.io - hosting and infrastructure for the Listify AI backend.
5. Data retention and compliance
App data is retained for as long as Listify AI is active on your store. Uploaded images and generated listing content are not retained at all - they are transient and discarded once generation completes.
On uninstall. When you uninstall Listify AI, your Shopify access token is immediately invalidated and nulled. Your remaining data - presets, quota counts, SKU counters, and session data - is soft-retained briefly to support a frictionless reinstall, then permanently and irreversibly erased when Shopify fires the shop/redact webhook (typically ~48 hours after uninstall). You can request immediate, permanent deletion at any time by emailing hello@noomua.com.
GDPR. Listify AI handles Shopify's mandatory GDPR webhooks:customers/data_request, customers/redact, and shop/redact. Because we do not store customer PII, customer-data requests are honoured as confirmed no-ops. The shop/redact webhook triggers permanent deletion of all shop data.
Billing is handled entirely through Shopify. No payment data ever touches Listify AI's systems.
6. Your rights
Depending on your location, you may have the right to access, correct, or delete the data we hold about your store. To exercise any of these rights, email us at hello@noomua.com and we will respond within a reasonable timeframe.
7. Changes and contact
We may update this policy as the app or legal requirements change. Material changes will be noted with an updated date at the top of this page. Continued use of Listify AI after changes are posted constitutes acceptance of the updated policy.
For privacy questions or data requests, contact hello@noomua.com. Please include “Listify AI Privacy” in your subject line.