Privacy policy

Controller: [Legal entity name], [Registered address]. Contact: [email protected].

What we collect

• Account: email, name, a hash of your password (never the password itself), or your Google account id if you sign in with Google.
• Products and listings: URLs, listing text, logos, screenshots and maker details you enter.
• Orders: what you ordered and paid, terms version accepted, invoices. Card data stays with Stripe.
• Directory accounts: logins we create on directories for your product; their passwords are encrypted at rest.
• Technical: session records (IP address and browser) for security, and rate-limit counters.

Why

• To provide the service you order (contract).
• To keep accounts and the service secure (legitimate interest).
• To keep invoices and accounting records (legal obligation).

Processors

We use these providers, only for the purpose given:

• Hosting and database: [Hosting provider name and address].
• Payments and invoices: Stripe.
• Transactional email: our email provider.
• File storage for uploads: an S3-compatible object store.
• Listing drafts: Anthropic, which receives your homepage text to suggest listing copy.
• Domain Rating: Ahrefs, which receives directory domains only.

Cookies

One essential cookie keeps you signed in (up to 7 days, renewed while you use the site). We use no advertising cookies. Analytics, when enabled, is cookieless. Your directory picks are kept in your browser's local storage until checkout.

How long

• Account and product data: while your account exists.
• Orders and invoices: as long as accounting law requires.
• Email logs: 180 days. Expired sessions and reset links: deleted daily.

Your rights

You can ask to access, correct, export or delete your data, or object to its use, by writing to [email protected]. You can also complain to your data protection authority.

We don't sell your data, and we don't use your content to train AI models.