Privacy Policy

What we collect

• Photos you upload for listing generation.
• The listings we generate (title, price, description, category, status).
• Your email address, if you sign in.
• A device ID stored in your browser, used for analytics and to rate-limit abuse.
• Your IP address, used to prevent abuse and control costs.
• Product-usage analytics via PostHog (page views, taps, key actions). After you sign in, this includes your email so we can understand return usage.
• Error reports via Sentry (browser type, page URL, stack trace). These do not contain your photos or listing text.

How we use it

• Photos are sent to OpenAI to generate your listing text. We also keep the photo in our cloud storage so your listing can display across your devices and so we can re-run or enhance the generation on demand.
• Listings live in your browser until you sign in; after sign-in, a copy is stored in our database so they sync across devices that sign in with the same email.
• Your email is used only for sign-in — to send a one-time verification code. Before sending, the email is checked by Kickbox (to filter disposable / throwaway addresses) and the request is screened by Google reCAPTCHA (to filter out bots). We send no marketing email.
• Analytics help us understand how the app is used (return rate, sold rate, friction points) so we can improve it.
• Error reports go to Sentry when something breaks, so we can diagnose and fix it — page URL, browser type, and stack trace, never your photos or listing text.

Images and public visibility

Images are stored so they display in your listings and on any Sale page you choose to share. Anyone who has a Sale page's link — or an image's direct link — can view the images on it. The links are long and random, but they are not password-protected. Don't put anything in a photo you wouldn't want a person with the link to see.

If you run a Sale

On a public Sale page, an interested buyer can submit their name, phone, and/or email to reach you. We pass those details to you as a lead and automatically delete them about a day after the Sale ends. If you're a buyer submitting interest, your details go to that seller for that purpose and are deleted on the same schedule. If you run a Sale, you're responsible for using any buyer contact information lawfully and only to coordinate your sale.

What we do not do

• We do not sell or share your personal data with third parties for advertising.
• We do not track you across other websites.
• We do not store payment information — there is no payment to process.

Storage and retention

• On your device: your browser may clear stored listings after about 7 days of inactivity. This is a privacy feature of Apple Safari (Intelligent Tracking Prevention) and similar mechanisms on other browsers — we cannot override it. Installing Zipply to your home screen ("Add to Home Screen") exempts it from this purge.
• On our servers: photos are stored to render your listing and kept while the listing exists. Delete a listing and we remove its photos — including any edited copy — from storage. Delete your account and we remove your listings, their photos, and your Sale cover images. Listing text lives only on your device until you sign in; then a copy is stored in our database until you delete it or your account. Signing out clears this device but keeps the server copy.
• Email sign-in codes expire after 15 minutes and are deleted on successful sign-in or when a new code is requested for the same email — whichever comes first.

Third parties used

Your data flows through a small number of vendors so the app can function:

• OpenAI — to generate listing text from your photos.
• Kickbox — to validate email addresses at sign-in.
• Google reCAPTCHA — to filter out bots at sign-in.
• PostHog — for product analytics.
• Sentry — for error reports when something crashes.

We additionally use a reputable cloud provider to host the app, store your photos, run our database, and deliver verification emails. We share with each service only the minimum data needed for the function above, and each one has its own privacy policy.

Your choices

• Sign out at any time (clears listings from this device, keeps the server copy).
• Delete a listing — its photos are removed from our storage. Email hello@zipply.io to delete your account: we delete your listings, their photos, and your Sale cover images, and deactivate your account. We keep a minimal record to prevent reuse and abuse.
• Only you can clear data stored in your browser — use your browser's site-data settings, or sign out, which clears Zipply's data on that device. We can't clear your device remotely, but you can ask us to delete your server-side data at any time.

Age

Zipply is for adults. You must be 18 or older (or the age of majority where you live) to use it.

Changes

We may update this policy. Material changes will be announced in-app or via email if you have signed in.

Contact

Privacy questions or deletion requests: hello@zipply.io.