Privacy Policy

Last updated: 8 June 2026

This policy explains how iibsofy Oy (“we”, the data controller), a company registered in Finland (business ID 3427417-3, registered address Messipojantie 20, Oulu, Finland), handles personal data when you use Listiq AI. Contact: info@listiqai.com.

1. Data we collect

Account: email address, display name, password hash (or magic-link tokens), locale.
Content: photos you upload and the enhanced images, descriptions and condition notes generated from them.
Billing: plan/credit balance and transactions. Card details are handled by Stripe — we never see or store full card numbers.
Technical: minimal logs needed to run and secure the Service.

2. How and why we use it (legal bases)

To provide the Service — recognise the vehicle, enhance images, generate descriptions, manage your account (performance of a contract).
To take payment and prevent fraud (contract / legitimate interests).
To secure and improve the Service (legitimate interests).
For optional marketing only with your consent.

3. Processors we share data with

We use trusted providers who process data on our behalf. Some are outside the EU/EEA; transfers rely on appropriate safeguards (e.g. EU Standard Contractual Clauses).

Provider	Purpose
Google (Gemini AI)	Image recognition, enhancement & description generation
Stripe	Payments
Cloudflare R2	Image storage
Mailtrap	Transactional email (sign-in, confirmation, resets)
Hetzner	Server hosting (EU)

4. Retention

We keep account and listing data while your account is active and as needed for the purposes above or to meet legal obligations. You can delete listings/images, and request deletion of your account, at any time.

5. Your rights (GDPR)

You have the right to access, correct, delete, port, restrict or object to processing of your personal data, and to withdraw consent. To exercise these, email info@listiqai.com. You may also lodge a complaint with your local data protection authority (in Finland, the Office of the Data Protection Ombudsman).

6. Cookies

We use only essential cookies — a session cookie that keeps you signed in. These are required for the Service to work and do not need consent. We do not use advertising or third-party tracking cookies. If we add analytics in future, we will introduce a consent banner and update this section.

7. Security

Data is encrypted in transit (HTTPS). Passwords are hashed; sign-in links are single-use and short-lived. Access to production data is restricted.

8. Children

The Service is intended for businesses and adults; it is not directed at children.

9. Changes & contact

We may update this policy; material changes will be notified. Questions: info@listiqai.com.