Privacy Policy

This Privacy Policy explains how Listrivo (“Listrivo”, “we”, “us”) handles personal data when you use Listrivo Desktop, the Listrivo website, and the Listrivo model service that Listrivo Desktop uses to design with you and make images (together, the “Services”).

Listrivo is the controller of the personal data described in this policy.

Listrivo Desktop stores your projects, product photos, generated images, canvases, and conversations with the designer on your own computer, in the data folder you choose. Listrivo does not store your designs, images, or conversations on its servers, and we cannot see the contents of your projects.

When you ask a Listrivo model to answer or to make an image, Listrivo Desktop sends only what that request needs: the message or prompt, the conversation the designer needs for its answer, and the images the request uses. This content is processed to produce the answer and is not kept by Listrivo afterward:

• Images that a request uses, and images that a Listrivo model makes, pass through temporary private transfer storage so they can be delivered. They are deleted automatically within two days, and at once if you delete your account.
• Generated images are downloaded to your computer and saved in your project, like any other image you work with.
• We do not use your content to train AI models, and we do not use it for any purpose other than answering your request.

Because your designs live on your computer, you control them: you can back them up, move them, or delete them at any time. Deleting your Listrivo account does not delete files on your computer.

Account information

You sign in to Listrivo with your Google account. When you do, we receive and store your email address, whether Google has verified it, and the identifier Google uses for your account, together with an internal account ID and the dates your account was created and updated. We never receive your Google password, we do not keep Google access tokens, and we do not request access to any other data in your Google account.

Where Listrivo shows your name, we store the name from your Google profile and may store the address of your Google profile picture. Listrivo never loads or displays that picture. You can ask us to remove these details at any time, and they will not be added back when you sign in again.

Sign-in sessions

We keep a session for the website and for each computer where you sign in to Listrivo Desktop, so that you stay signed in. A session ends after 30 days without use, or when you sign out. We do not record your IP address or a description of your browser or device with a session. A code that signs in Listrivo Desktop expires after 10 minutes.

Image request records

For each image request, we keep a short technical record for 30 days: its status, the model and settings used, the size of the result, and a digital fingerprint (hash) of the result. The record contains no prompt and no image. It lets Listrivo Desktop recover a result if the connection drops before the image arrives.

Security and service operation

To protect the Services from abuse, we keep request counters that are tied to your account or connection in pseudonymized form, for at most 24 hours. Our service logs record technical events such as request identifiers, status, and timing for up to 14 days. They never contain your prompts, conversations, images, or sign-in credentials.

What we do not collect

We do not use analytics or advertising tools, we do not track you across websites or apps, and we do not sell or rent personal data.

• To provide the Services: to create and run your account, keep you signed in, and answer the requests you make. We rely on the performance of our contract with you.
• To keep the Services secure and reliable: to prevent abuse, investigate problems, and keep the Services working. We rely on our legitimate interest in operating secure and reliable Services.
• To meet legal obligations: where the law requires us to keep or disclose information.

Signing in is not consent to marketing. We do not send marketing messages, and we do not use your personal data for purposes other than those listed here.

We share personal data only as needed to run the Services:

• Service providers that host and operate the Services on our behalf, including cloud hosting, database, and storage, and the processing that produces model answers and images. They act on our instructions.
• Google, to sign you in. Google's handling of your Google account is described in Google's own privacy policy.
• Authorities, where the law requires it, and a successor if Listrivo is reorganized, merged, or sold, in which case this policy continues to protect your data.

Our service providers may process personal data in countries other than the one where you live. Where the law requires it, we use appropriate safeguards for these transfers, such as contractual protections recognized by the applicable law.

We protect personal data with measures that include encrypted connections, private storage that can be read only with a short-lived signature, sign-in sessions that are stored on our servers and can be revoked, and logs that exclude content and credentials. No system is completely secure, but we work to protect your data and to respond promptly if something goes wrong.

Depending on where you live, you may have the right to access your personal data, correct it, delete it, restrict or object to its processing, receive a copy in a portable format, and withdraw any consent you have given. These rights are provided by laws that include the EU and UK General Data Protection Regulation, Indonesia's Personal Data Protection Law, Singapore's and Malaysia's Personal Data Protection Acts, Thailand's Personal Data Protection Act, the Philippines' Data Privacy Act, and Vietnam's personal data protection rules.

To make a request, contact us as described below. We will confirm your identity, usually by asking you to sign in, and respond within the time the applicable law allows. Never send us your password or sign-in codes.

When you delete your Listrivo account, we delete your account information, your sessions, your image request records, and any of your images still in transfer storage. Files stored by Listrivo Desktop remain on your computer until you delete them.

You also have the right to complain to the data protection authority where you live.

The Listrivo website uses only cookies and browser storage that are strictly necessary to sign you in, keep your session secure, and remember your cookie settings. We do not use analytics, advertising, or tracking cookies, and no third party sets cookies on our website. You can review your choice at any time with “Cookie settings” at the bottom of each page.

• Sign-in session (better-auth.session_token, set by Listrivo when you sign in): keeps you signed in and protects your account. It lasts up to 30 days and is renewed while you use the site. Signing out removes it.
• Sign-in protection (better-auth.state, set by Listrivo when you start signing in with Google): protects the sign-in from forgery. It lasts up to 5 minutes.
• Cookie settings (listrivo.cookie-choice, kept in your browser's local storage, never sent to us): remembers that you saw the cookie notice, or your choices, with the notice version and when they were made. It lasts 6 months, after which we ask again. Clearing this site's data in your browser removes it.

On secure (HTTPS) connections, the sign-in cookie names start with __Secure-.

The Services are intended for business use by people who are at least 18 years old. We do not knowingly collect personal data from anyone under 18.

We may update this policy as the Services change. We will post the new version on this page with a new “Last updated” date and, for significant changes, tell you in Listrivo Desktop or on this website before they take effect.

Contact details for Listrivo will be published on this page.

See also our Terms of Service.