ListedProofPrivacy policy
Last updated: 16 October 2026
1. Who we are
ListedProof is a service of JABB Consulting Oy Ab (Business ID 2497134-6, Vikingavägen 45, 65200 Vaasa, Finland). We are the controller of the personal data described here. Contact: hello@listedproof.com.
2. What we collect and why
| Data | Purpose | Legal basis (GDPR) |
|---|---|---|
| Name, email, company, country, VAT ID, order and payment status | Deliver your order, invoicing, support | Contract (Art. 6(1)(b)); legal obligation for bookkeeping (Art. 6(1)(c)) |
| Product information you give us (descriptions, logo, screenshots, maker name, social links) | Prepare and submit your listings | Contract (Art. 6(1)(b)) |
| Directory account logins we create for your order | Submit listings and hand the accounts over to you | Contract (Art. 6(1)(b)) |
| Emails between us, and directory emails sent to your order address | Run and evidence the service | Contract; legitimate interest in keeping records (Art. 6(1)(f)) |
| AI visibility audit inputs (product, website, competitor names, market, language, buyer questions), the AI answers we collect, and the report | Run the AI visibility audit and its 30-day re-check | Contract (Art. 6(1)(b)) |
| Public business contact details of founders we contact about our service | One-off business outreach with an easy opt-out | Legitimate interest (Art. 6(1)(f)) |
We don't use advertising cookies or tracking pixels on this site. Card details are entered directly with Stripe, and we never see them.
3. Who we share data with
- Directories you approve. We submit the product information you provided to them. Each directory is an independent controller under its own privacy policy.
- Processors acting for us: Stripe (payments), Amazon Web Services (website hosting), Microsoft (our email, Microsoft 365), and Grok Bot (AI assistant tooling, see below). They process data only on our instructions. The intake brief currently reaches us as an email you send from your own email app, so no separate form provider is involved.
- AI assistant tooling (Grok Bot). We run ListedProof with the help of AI assistant tooling. Email sent to hello@listedproof.com is automatically copied to it, and it reads and processes that mail to handle support and orders. It also provides the mailbox for the directory accounts we create for your order (addresses like
listedproof+yourproduct@mail.grokbot.com), and it processes your brief, listing copy and submission evidence. A person at ListedProof oversees this work. - AI model providers (AI visibility audit only): OpenAI, Anthropic, Perplexity AI and Google (Gemini API). We send them the buyer questions for your audit through their business APIs. The questions contain your product category and, in some questions, your product name or competitor names. We don't put personal data such as your name or email address into these questions. Under their API terms, the providers may keep API inputs and outputs for a limited time, for example to detect abuse.
- Authorities, where the law requires it.
Some processors may handle data outside the EU/EEA. Where they do, transfers rely on an EU adequacy decision (such as the EU–US Data Privacy Framework) or on the European Commission's Standard Contractual Clauses.
4. How long we keep it
- Directory login credentials: deleted from our systems 30 days after we hand them over to you.
- Order files (brief, assets, screenshots, reports): 12 months after delivery, so we can handle follow-ups. Then deleted.
- AI visibility audit data (your audit inputs, the AI answers we collected, and the report): deleted 90 days after we deliver the report. If your audit includes the 30-day re-check, the 90 days count from the re-check report. Keep your own copy of the report.
- Invoices and accounting records: as long as Finnish accounting law requires.
- Outreach contacts who don't become customers: deleted within 6 months, or immediately if you opt out. We keep a minimal suppression entry so we don't contact you again.
5. Your rights
You can ask us for access to your data, or for its correction, deletion, restriction or portability. You can also object to processing based on legitimate interest. Email hello@listedproof.com. We answer within one month. You may also complain to the Finnish Data Protection Ombudsman (tietosuoja.fi).
Listings already published on third-party directories are controlled by those directories. You can remove them with the account logins we hand over, and we'll help where we can.
6. Automated processing
We use software automation and AI assistant tooling to draft listing copy, fill in directory forms, read and answer email, and check listings. AI visibility audits are AI-assisted too: AI models generate the answers we measure and help draft the report, and a person checks it before delivery. This doesn't involve decisions about you that have legal or similarly significant effects. You can ask for a person to review anything we've sent you.
7. Changes
When we update this policy, we'll change the date above. If a change is significant, we'll tell current customers by email.