ListPrivacy Policy
This policy explains what data Listbright handles and why, both in the WooCommerce plugin and in the Shopify app. Listbright is provided by Metaflare Interactive LLP, 0-729-A Surya Enclave, Chogitti, Jalandhar, Punjab 144009, India. Contact: support@metaflareinteractive.com.
What we store
WooCommerce plugin:
- Your store's address (for example shop.example.com), sent when the plugin first connects, so we can link credits to your store.
- An encoded form of your store's key. We keep only a one-way hash, not the key itself.
- The IP address that registered the store, to stop people creating many stores to collect free credits.
- Your credit balance and usage: how many credits you have, how many products were fixed and when.
Shopify app:
- Your store's myshopify.com address, which Shopify gives us when you open the app, so we can link credits to your store.
- Your credit balance and usage, as above.
- Your credit purchases: the pack, Shopify's charge ID and whether Shopify has confirmed it.
- A one-way hash of your store's address, so the free credits are only given once, even after a reinstall.
The Shopify app does not store access tokens. When you buy credits, a short-lived token is used for that one request and then discarded. The app doesn't ask Shopify for access to orders or customers.
Product data we process but don't keep
When you scan or fix products, the plugin sends product details to our service: product ID, title, description, price, link, image link, brand, GTIN, MPN, category and attributes such as color and size. We use them only to check your products and suggest fixes, return the result to your store, and don't store them afterwards. The plugin never sends orders, customers or other personal data from your store.
In the Shopify app, your browser reads your products from Shopify and sends the same kind of product details to our service to be checked. Fixes you approve are written from your browser straight to your store through Shopify.
Payments
Credit purchases are processed by Dodo Payments, our reseller and merchant of record. Dodo Payments collects your payment and billing details under its own privacy policy. We receive confirmation of the purchase (the store, the pack and the amount), not your card details.
In the Shopify app, credit packs are charged by Shopify and appear on your Shopify bill. Shopify tells us when a charge is approved; we never see your payment details.
Service providers
- Google Cloud / Firebase (United States) hosts our service and database.
- Replicate (United States) runs the AI model (Google Gemini) that reads product text and images to suggest fixes. Product data sent for a fix passes through Replicate for that request.
- Dodo Payments handles payments, billing, tax and order support for the WooCommerce plugin.
- Shopify runs the Shopify app inside your admin and bills Shopify app purchases.
We don't sell data, and we don't use your product data to train AI models.
How long we keep it
We keep your store's record while you use Listbright. Server logs, which can include IP addresses, are kept for up to 30 days. To have your store's record deleted, email us from an address on your store's domain or include proof that you manage the store. Unused credits are lost when the record is deleted.
When you uninstall the Shopify app, Shopify asks us 48 hours later to erase your store's data, and we delete the store's record and purchase records. Only the one-way hash used for free credits is kept.
Your rights
Depending on where you live, you may have the right to access, correct or delete data about you, or to object to how it's used. Email us and we'll respond within 30 days.
Changes
If we change this policy, we'll update this page and the date above.