Your product files and records stay in your workspace
Listsy stores account details, workspace membership, seller briefs, artifact metadata, listing copy, QA results, job state, and credit records. Generated and uploaded file bytes stay in private object storage. Product records and files are checked against the authenticated workspace.
Public content pages do not expose workspace data. Short-lived signed links are used for private files, and application routes repeat resource checks instead of treating the browser URL as authorization.
Each provider receives only the data needed for its job
Listsy keeps service keys on its servers. Your browser receives the data needed for your signed-in session and short-lived links to private files.
PNG processing, proof views, ZIP packaging, and draft checks run separately from generated-content jobs. That separation makes it easier to identify which provider received data, which step failed, and whether a retry is safe.
| Data or action | Provider | Purpose | Boundary |
|---|---|---|---|
| Account, workspace, product, job, QA, and credit records | Supabase | Authentication and relational application state | Every private resource is checked against the signed-in workspace |
| Generated and uploaded artifact bytes | Cloudflare R2 | Private file storage | The app uses short-lived signed links instead of public buckets |
| Dashboard and review interface | Vercel | Serve the Listsy web application | Generation, storage, billing, and marketplace secrets are not public client settings |
| Seller brief and generation inputs | FAL | Generate launch artwork and optional media | The generation job does not need Etsy OAuth credentials or Etsy buyer data |
| Subscription and payment workflow | Polar | Checkout, billing status, and subscription management | Polar handles card details; Listsy records plans and credits |
| Connected-shop draft fields and media | Etsy API | Create, refresh, and read back seller-directed drafts | The workflow does not request Etsy buyer, order, or payment data |
Etsy access is limited to the seller-directed draft workflow
A seller connects an Etsy shop through OAuth. Listsy creates or updates unpublished drafts, attaches files and media, and reads the draft state back. The seller reviews the listing and publishes it on Etsy.
Listsy does not request or process Etsy buyer, order, or payment data for this workflow. Disconnecting a shop removes the stored connection credentials for that shop according to the current privacy policy.
Billing and generation credits have separate records
The billing provider handles subscription and payment status. Listsy records the plan and credit events needed to run the service. Provider or technical failures release reserved credits instead of committing a completed charge for an unusable result.
Payment and webhook secrets remain in server-side environments. They are not placed in public client configuration.
Users keep practical account controls
You can disconnect an Etsy shop and request account or content deletion through support@listsy.app. Disconnecting a shop removes the stored OAuth connection credentials for that shop. Account and workspace records remain while the account is active and may be retained when security, legal, or accounting obligations require it.
Listsy does not currently promise one fixed deletion deadline for every record type. The privacy policy states the applicable retention boundary, and support is the contact for a deletion request or a question about a specific record.
No system can promise absolute security. Report a suspected security issue to developer@listsy.app without sending credentials or private buyer data.
- Use a unique password and protect the email account tied to Listsy.
- Review connected Etsy access and disconnect it when no longer needed.
- Do not paste passwords or access tokens into support messages.
- Open the final Etsy draft before publishing.
Common security questions
Sources checked
Policy and marketplace details can change. These are the pages used for this review. Check Etsy directly before making a listing decision.