Listin3DPrivacy and your data
Service operator and data controller: Litequo LLC (Wyoming, United States).
Registered representative and publisher: CANER GULER. Listin3D is a service of Litequo LLC.
For support, privacy requests, account deletion, complaints or content removal, email contact@listin3d.com. Include the relevant product link when reporting content. Do not send passwords or payment details.
contact@listin3d.comInformation we use
We use your account email, display name, account type and language, seller store details, favorites, listing text, uploaded photos/plans and 3D proposals, review history and assistant permissions. Firebase Authentication manages account credentials. Requests also generate technical and security information, such as IP addresses, request times, browser information, account identifiers, actions and errors. Some rate-limit identifiers are hashed; hashing does not make them anonymous. Support emails contain the information you choose to send. For new accounts, we record the accepted terms version, the privacy notice version you acknowledged, the interface language and the server-recorded time. This records the account agreement, not blanket consent to data processing. Google sign-in supplies your name, email and provider account identifier.
Collection and legal grounds
Information comes electronically from registration and account forms, uploads, browsing requests, authorized assistant tools and support messages, partly by automated means. Account, favorites, store and listing processing is necessary to provide the service you request and perform our agreement. Security, abuse prevention and service troubleshooting rely on our legitimate interests, balanced against your rights. We also process information when required by law or to establish, exercise or defend legal claims. Any processing that requires consent needs a separate choice; reading this notice is not blanket consent.
Why we use it
We use information to authenticate accounts, show stores and products, save favorites, process and review seller submissions, protect the service, enforce quotas and provide support. Authorized staff access private records only for these tasks. A connected assistant receives tool inputs and results through the permissions you select. We do not sell account data or use it for targeted advertising.
Public and private content
Store names, descriptions and market cities are public. Original draft uploads and seller 3D proposals are restricted to their owner and authorized staff. During preparation, staff-selected copies of scenes, covers and gallery images can be hosted at shareable preview URLs before a listing is published. Approved product descriptions, specifications and gallery assets are public after publication. Anyone holding a public or Firebase download-token link may access the file; private account permissions do not protect such a link. Do not upload personal addresses, identity documents, health records, payment information or other sensitive data.
Cookies and browser storage
Firebase and browser storage maintain sign-in and security state. Local storage also holds your language preference, local drafts and recently viewed products. These features support the requested service; advertising cookies remain off, and analytics needs the separate choice described below. Local drafts do not expire automatically. You can clear local data in your browser settings, which may sign you out and remove unsaved drafts. Clearing browser data does not delete server records. Account settings also let you clear this account’s local draft and recently viewed products without deleting server data or signing out.
Optional Google Analytics
Only after you allow analytics, Google Analytics 4 measures visits, language, device/browser information, approximate geography and interactions such as catalog searches, viewer controls, seller-link clicks, account creation and successful listing submissions. Google processes pseudonymous cookie identifiers and network information for this purpose, potentially outside your country. We do not send account names, emails, account IDs, form contents, search text or authentication tokens. Advertising features and Google signals stay off. Analytics cookies and your saved choice last up to 180 days. Event and user-level Analytics retention is 2 months; aggregated reports may remain longer. Use Privacy choices in the footer to refuse or withdraw consent at any time. Withdrawal stops future collection and removes Analytics cookies in this browser; it does not erase data already received by Google. Contact contact@listin3d.com about data requests.
Service providers and processing
Google Firebase and Google Cloud provide authentication, databases, file storage, server functions and delivery. Firestore, Storage and Functions are configured in Frankfurt (europe-west3); authentication, delivery and operational services may process data elsewhere, including the United States. This can involve cross-border transfers. Contact contact@listin3d.com for information about recipients and applicable transfer safeguards. Your chosen AI provider receives authorized tool inputs and results under its own privacy policy. Listin3D does not receive your chat history or AI-provider API keys. External seller sites have their own policies.
Images, 3D scenes and external requests
Some example images are loaded from Unsplash, and compressed 3D models may fetch a decoder from Google. Uploaded HTML scenes may load HTTPS scripts, images or other resources chosen by the scene author. Those hosts receive ordinary network information, including your IP address and browser information, under their own policies. The scene sandbox limits access to Listin3D account storage; it does not prevent all external network requests. Website fonts are hosted by Listin3D.
Retention and removal
Account records, favorites, server drafts, files and review activity remain while the account or content exists, until a verified removal request is processed. Abandoned drafts and audit history have no automatic deletion. OAuth codes expire after 5 minutes, access tokens after 1 hour, and connections/refresh tokens after 30 days. Upload tickets expire after 15 minutes. Connector draft and operation records expire after 30 days; rate-limit and upload-quota records after 1 day. Expired records await TTL cleanup, which may be delayed. Client registrations remain for reconnects. Connection revocation blocks future assistant access immediately. Deleted Storage objects can remain in recovery storage for 7 days; Firestore versions for 1 hour. Default operational Cloud logs are retained for 30 days; required cloud audit logs for 400 days. Records needed for legal obligations, security or disputes are retained only as necessary. You can permanently delete your account in Settings after identity verification. A minimal deletion receipt remains for 30 days after completion; delayed TTL cleanup may retain it longer. A security marker prevents removed file locations from being recreated. Clear other devices and downloaded copies separately; contact support for additional requests. Shared or Listin3D-managed content and stores referenced by other retained products may require a separate ownership review; contact support about related personal data.
Your choices and requests
You may ask whether we process your data, why, and who receives it; request access, correction, deletion and notification of relevant recipients; and raise a privacy complaint. Depending on applicable law, you may also request portability or restriction, object to processing or solely automated adverse decisions, and seek compensation or complain to the competent data protection authority. You may withdraw consent without affecting prior lawful processing. Email contact@listin3d.com from your account email; we may request proportionate ownership verification. We respond in writing or electronically within the applicable period: at most 30 days under KVKK, or one month under GDPR where applicable, subject to lawful extensions. Revocation does not erase data already received by an AI provider; contact that provider separately.
Connecting ChatGPT or another assistant
Public tools read only public catalog, store and example information. Depending on your selected permissions, account tools read your profile, favorites, store and own listing details or history; write tools update your profile/store, favorites and drafts, import selected files or submit a completed listing for staff review. File imports download only the selected HTTPS files or links. OAuth credentials are opaque and stored as hashes. Account roles are checked in Firestore. Password changes, member access, moderation and publication use authenticated website flows. You can switch accounts before allowing a connection. Before authorizing a new assistant connection, you must declare that you are at least 13 and meet the minimum age required by applicable law to consent to sharing account data. This is self-attestation, not age verification; we do not collect your date of birth. Do not share personal information of children under 13 or the applicable minimum age of digital consent through assistant tools.
Security and updates
We use encrypted transport, account authentication, ownership and role checks, restricted staff access and request limits. Private file previews use authenticated reads and temporary browser URLs. No system can guarantee absolute security; never send credentials in a support message. Material changes to this notice are published here with an updated date and, where required, an additional notice before the changed processing begins.