Privacy Policy
Last updated: March 5, 2026
QuickListAI ("we," "our," or "us") is operated by Pyaox. This Privacy Policy explains how we collect, use, and protect your information when you use the QuickListAI Chrome extension and website (quicklistai.org).
1. Information We Collect
1.1 Information You Provide
License Key: When you purchase a paid plan, a license key (format: QLAI-XXXX-XXXX-XXXX) is generated and stored locally in your browser via Chrome's storage API to verify your subscription status.
Item Descriptions: Text you enter or photos you upload to generate listing descriptions. This content is transmitted to our API for processing and is not stored on our servers after the response is returned.
Purchase Information: When you buy a plan through our website, WooCommerce processes your payment. We receive your email address and order details. We do not directly handle or store credit card numbers.
1.2 Information Collected Automatically
Usage Data: We track aggregated, anonymous usage counts (total descriptions generated, marketplace distribution) to improve the product. We do not track individual browsing behavior.
Credit Balance: Your credit usage and remaining balance are stored locally in your browser and synced with our server to prevent abuse.
1.3 Information We Do NOT Collect
We do not collect browsing history, website content, cookies from other sites, personal identification documents, health information, financial account details, location data, or any data from websites outside the five supported marketplaces.
2. How We Use Your Information
We use the information we collect to:
- Generate AI-powered listing descriptions based on your input
- Verify your subscription status and manage credit balances
- Process purchases and deliver license keys
- Improve the quality and accuracy of generated descriptions
- Prevent abuse and enforce rate limits
3. AI Processing & Third-Party Services
When you generate a listing description, your input text (or uploaded photo) is sent through our secure proxy server to Anthropic's API (anthropic.com) for AI processing. Anthropic is based in the United States.
Important: Your input is transmitted in real-time and is not stored on our proxy server or Anthropic's servers after the response is generated. Anthropic's API does not use customer inputs to train models. For details, see Anthropic's Privacy Policy.
Our proxy server is hosted on Cloudflare Workers. Payment processing on our website is handled by WooCommerce with standard payment gateways.
4. Data Storage & Security
Local Storage: Your preferences, license key, credit balance, and recent generation history are stored locally in your browser using Chrome's built-in storage APIs (chrome.storage.sync and chrome.storage.local). This data stays on your device and syncs only across your own Chrome browsers.
Server-Side: Our Cloudflare Workers proxy processes requests in memory only. We maintain a database (Cloudflare D1) that stores license keys, subscription status, and credit balances — no item descriptions, no photos, no browsing data.
Security Measures: All data transmission uses HTTPS/TLS encryption. API authentication uses JWT tokens with short expiration periods. Your Anthropic API key is never exposed to the extension or your browser — it remains encrypted on our server.
5. Chrome Extension Permissions
QuickListAI requests the following browser permissions, each for a specific purpose:
| Permission | Why We Need It |
|---|---|
| storage | Save your preferences, credit balance, and license key locally in your browser |
| activeTab | Detect which marketplace you're on and fill listing forms when you click "Fill Listing" |
| sidePanel | Display the QuickListAI interface in Chrome's built-in side panel |
| alarms | Periodically check your subscription status (once per hour) |
| Host access (5 sites) | Show the floating action button and enable form auto-fill on Poshmark, Depop, Mercari, eBay, and Vinted only |
We do not request access to all websites. Our extension only runs on the five marketplace domains listed above.
6. Data Sharing
We do not sell, rent, or trade your personal information. We share data only with the following parties, solely to provide our service:
- Anthropic — Receives your item description text or photo for AI processing (not stored after response)
- Cloudflare — Hosts our proxy server and database infrastructure
- WooCommerce / Payment Gateway — Processes payments on our website
7. Your Rights
You have the right to:
- Access your data — your license key and credit balance are visible in the extension's settings panel at any time
- Delete your data — use the "Log Out" option in the extension to clear all local data, or uninstall the extension to remove everything. Contact us to delete your server-side account.
- Port your data — contact us and we will provide an export of any data we hold about your account
- Object to processing — you can stop using the extension at any time; we do not process data in the background
If you are located in the European Economic Area (EEA), United Kingdom, or California, you have additional rights under GDPR, UK GDPR, or CCPA respectively. Contact us to exercise these rights.
8. Data Retention
Item descriptions and photos: Not retained. Processed in real-time and discarded immediately after the AI response is returned.
License keys and subscription data: Retained for the duration of your subscription. Deleted within 30 days of account deletion request.
Local browser data: Persists until you log out, clear browser data, or uninstall the extension.
Purchase records: Retained as required by applicable tax and accounting laws.
9. Children's Privacy
QuickListAI is not intended for use by individuals under the age of 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.
10. International Data Transfers
Your item descriptions are transmitted to Anthropic's servers in the United States for AI processing. Our proxy infrastructure operates on Cloudflare's global network. By using QuickListAI, you consent to the transfer of your data to these services. We ensure appropriate safeguards are in place in accordance with applicable data protection laws.
11. Changes to This Policy
We may update this Privacy Policy from time to time. If we make material changes, we will notify you by updating the "Last updated" date at the top of this page. Your continued use of QuickListAI after any changes constitutes acceptance of the revised policy.
12. Contact Us
If you have any questions about this Privacy Policy or wish to exercise your data rights, contact us at: