Privacy Policy

Last updated October 4, 2026

Effective 2026-08-16

ListingCore.app (“ListingCore,” “we,” or “us”) processes account, profile, CRM, listing, media, website-inquiry, connected-social-channel, and partner-program information to operate ListingCore.

Information and purposes

• Account, contact, brokerage, authentication, and security information for access and support.
• Uploaded media, generated content, listing references, calendars, CRM contacts, and public-site inquiries to provide requested product functions.
• Partner applications, referral attribution, terms acceptance, commission and payout records, encrypted payout instructions, and tax-compliance status to operate and audit the Partner Program. Tax identifiers should be submitted only through the separately designated secure tax process.
• OAuth integration identifiers and publishing records to connect and operate social channels. We do not receive social-network passwords.
• Public-page analytics including visited paths, referral host, active visible time, and page order within a visit. A first-party random session cookie expires after 30 minutes of inactivity; shortened keyed hashes derived from network and browser information provide a pseudonymous visitor estimate. ListingCore does not use this analytics system for cross-site advertising.
• Audit, error, performance, and product events for security, reliability, abuse prevention, and service improvement.

Account activity monitoring

We collect activity records directly from your interactions with ListingCore and associate signed-in activity with your account. These records include login attempts and logouts, account and email identifiers, workspace page and section visits, API reads, and actions such as creating, updating, or deleting records. A failed sign-in may include the email address entered even when no account is identified.

Records may contain the time, action or route name, related record identifiers, HTTP response status, request duration, IP address, and browser or device information supplied by your browser. When an administrator uses “Browse as” to access a workspace, we record both the account being accessed and the administrator performing the action.

We use these records to secure accounts, detect and investigate abuse, troubleshoot failures, respond to support requests, and understand service use to improve reliability. Where applicable data protection law requires a legal basis, we rely on our legitimate interests in operating, supporting, and protecting the service, subject to your rights and interests. We may also use relevant records where necessary to meet a legal obligation. This activity log is not used for cross-site advertising or to make automated decisions that produce legal or similarly significant effects.

The activity log records event metadata. It does not record passwords, authentication or session tokens, cookies, request bodies, URL query strings, keystrokes, or screen recordings. Information you intentionally submit to product features, such as CRM details or uploaded content, is processed separately as described above.

Who can view account activity

The activity table is restricted to authorized ListingCore administrators for the purposes described above. Hosting and database providers may process stored records to operate the service, and relevant records may be disclosed where required by law. Activity records are not publicly displayed or made available to other ordinary users.

Activity retention

Detailed records in the account activity table are retained for 90 days from collection. Expired records are excluded from the table and automatically scheduled for deletion from the live database; the database cleanup process may take a short additional time. Deleting an account does not immediately delete its activity history: remaining activity records expire on this same schedule. In local environments without a persistent database, up to 10,000 records are held in memory and are cleared when the server restarts.

Separate operational audit records, which may include account access and security events, are configured to expire after 730 days; error records after 90 days; and separate analytics records after 365 days. These periods are distinct from the detailed account activity table. Financial, tax, and other legally required records follow the separate retention criteria described below.

Your rights concerning activity records

Depending on the law that applies to you, you may request access to, correction of, or deletion of your personal information, or restriction of processing. These rights may be subject to exceptions for security, legal obligations, or legal claims. To request activity records, contact privacy@listingcore.app; the account export tool does not include the administrator activity log. We may need to verify your identity before responding.

Right to object: Where applicable, you may object to processing based on legitimate interests by contacting our privacy address. We will consider your request under the applicable law, including whether there are compelling legitimate grounds to continue processing.

You may also complain to the data protection authority where you live or work. If UK data protection law applies, you can contact the Information Commissioner’s Office. If we rely on your consent for a separate processing activity, you may withdraw that consent without affecting the lawfulness of processing before withdrawal.

Processors and sharing

Information is disclosed only as needed to hosting, database, payment, tax/compliance, malware-scanning, email, media-generation, listing-data, and social-publishing providers, or when required by law. We do not sell personal information.

Retention and security

Active account data is retained while the service is provided. Partner financial, payout, terms-acceptance, fraud-prevention, and tax records may be retained after account closure where required or permitted for legal, tax, accounting, and dispute purposes. Analytics records are configured to expire after the analytics retention period. Access controls, encryption in transit, encrypted stored provider credentials and payout instructions, malware scanning, and audit logging are used to protect data.

Your choices

Authenticated users can export or permanently delete eligible account data from Brand & Profile. Certain financial, tax, fraud-prevention, security, and legal records may be excluded from deletion where retention is required or permitted. Privacy requests may be sent to privacy@listingcore.app.

Contact

ListingCore.app
https://listingcore.app
support@listingcore.app