Controller
Trocalia Digital S.L. (tax ID B70751490), Barcelona. For any privacy matter, write to info@lististo.com.
What data we process and why
The checker: what you paste (title, bullet points, description and the rest) is analysed in your browser and is not sent to our server. It is kept in your browser while the tab is open, so you do not lose it when you change page.
If you ask for the report card by email: your address, the grade and the codes of the mistakes found (not the copy of your listing), to send it to you and, if you accept it in the tick box, to send you tips about your listing now and then. Basis: your consent. Every email carries a one-click unsubscribe link that deletes your address.
Contact and order details (name, company, email, phone, the ASIN or URL of your listing, your brand and what you tell us about the product; for book orders, the title, author name, synopsis and bio you give us): to do the work, deliver it and deal with your queries. Basis: performance of the contract.
Billing and payment details: payment is handled by Stripe; we neither see nor store your card details. Basis: the contract and our tax obligations.
The material you upload (product photos, logos, brand guidelines): to prepare the A+ Content and the gallery. If people appear in the photos, we process them on your behalf, as explained below.
Contact form messages: to reply to you. Basis: your request.
IP address and technical logs: for the security of the service and to prevent abuse. Basis: our legitimate interest.
Who else is involved
We use providers that process data on our behalf, under contract and with safeguards: Stripe (payments), SMTP2GO (email delivery), our hosting provider in the European Union, and the artificial intelligence and marketplace data providers with which we study searches, draft copy and prepare images.
We send those AI providers what the work requires: the public content of your listing and of your competitors’, and what you tell us about the product. We do not send them your contact or billing details.
Some are in the United States or have sub-processors there. In those cases the transfer relies on the EU-US Data Privacy Framework or on the European Commission’s standard contractual clauses.
We do not sell your data or use it for third-party advertising.
Material showing people: data processing on your behalf
When you send us photos in which people appear, you are the controller of that data and we process it only to prepare your images, following your instructions (article 28 GDPR). The terms of sale set out that arrangement.
You warrant that you have those people’s consent to use their image for commercial purposes.
How long
Order and billing data, six years, as required by commercial and tax law.
The material you upload and what we deliver to you, 365 days from delivery, so you can download it again. You can ask us to delete it sooner.
Your address, if you asked for the report card by email, until you unsubscribe. Contact messages that do not lead to an order, one year.
Your rights
You can request access, rectification, erasure, objection, restriction and portability of your data, and withdraw your consent, by writing to info@lististo.com. If you believe we are not handling it properly, you can complain to the Spanish Data Protection Agency (aepd.es).