Security and your data
Your account
You sign in with Google or with your email and a password. Passwords are stored only as a salted, one-way hash, never in plain text. Sessions use secure, HTTP-only cookies, and every page and file request is checked against the signed-in account, so one agent can never open another agent’s listings, photos or videos. We test that regularly with automated access checks.
Your listings and files
ListLit runs on Cloudflare. All traffic uses HTTPS. Your photos, videos and designs are private to your account until you publish a listing page, and taking a page down removes it immediately. Your data is backed up daily in encrypted form, and we test restoring it.
Inquiries from your listing page
When a buyer sends a question from your listing page, their name, contact details and message are stored for you and shown only to you. They are never used to market to that person, and they are deleted with your account.
Payments
Checkout and card handling are done by Stripe. Card numbers never reach ListLit’s servers.
How we use your data
We use your listings and brand only to make your marketing. We don’t sell your data, and we don’t train AI models on your photos. ListLit learns your caption preferences from captions you save, only for your own account, and you can clear them on My brand.
Deleting your account
You can delete your account in Account. Your listings, designs, photos and videos are removed; billing and consent records the law requires us to keep are kept for that purpose only. See the Privacy Policy.
Who processes data for us
| Provider | What for | What they receive |
|---|---|---|
| Cloudflare | Hosting, database, file storage, photo and scene checks | Everything stored in ListLit |
| “Continue with Google” sign-in | Your name and email address | |
| Stripe | Payments and receipts | Billing details you enter at checkout |
| Higgsfield (Kling video models) | Making AI camera motion for your video | The listing photos you choose for a video |
| Geoapify | Address suggestions as you type | The address text you type |
| Tavily | Finding a listing’s public page from its address | The address you search |
Billing emails will be sent through Resend once email sending is turned on. We’ll update this list before adding a provider.
Reporting a problem
If you find a security issue, tell us through Account, Feedback (choose “Problem”). Please don’t access other people’s data or disrupt the service while testing. We’ll respond within one business day.