Privacy Policy

Last Updated: 10/04/2026


 

1. Introduction

RocketLister ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our listing generation and multi-marketplace posting service.


 

2. Information We Collect

We collect information that you provide directly to us:

  • Account Information: Name, email address, company name (if applicable), and password when you register.
  • Profile Information: Business details, shipping preferences, and payment/billing information (processed securely by our payment providers).
  • Product Information: Item titles, descriptions, categories, prices, and the images you upload for listing generation.
  • Marketplace Credentials: API keys, tokens, or login credentials necessary to connect to and post on supported platforms (e.g., eBay, Shopify). These are stored securely and encrypted.
  • Communications: Records of your correspondence with us, including support requests and feedback.


 


 

3. How We Use Your Information

We use the information we collect to:

  • Provide, operate, maintain, and improve the RocketLister service.
  • Generate product listings and cross-post them to your connected marketplaces.
  • Process transactions and send related information, including confirmations and invoices.
  • Communicate with you, including sending service-related announcements, technical notices, updates, and support messages.
  • Respond to your comments, questions, and requests.
  • Monitor and analyze usage trends and activities to improve our service and user experience.
  • Detect, prevent, and address technical issues, fraud, or security breaches.
  • Comply with legal obligations.

 


 

4. Image Storage & Public Access

Important: Product images you upload are stored on Backblaze B2 cloud storage and are publicly accessible. Since these images will appear on public marketplaces (eBay, Etsy, etc.), they are not secured with private access controls.

Strict Prohibition: Do not upload sensitive, private, or Not Safe For Work (NSFW) images, including but not limited to:

  • Pornographic, sexually explicit, or adult content
  • Graphic violence or disturbing imagery
  • Hate symbols or extremist material
  • Illegal or prohibited items
  • Personal documents or sensitive information
  • Images of individuals without their explicit consent for commercial use

We reserve the right to immediately suspend or terminate any account found uploading NSFW (not suitable for workplace) or prohibited content. You are solely responsible for ensuring all uploaded images comply with our terms and applicable marketplace policies.



 

5. Data Security

We implement appropriate technical and organizational security measures designed to protect your personal information from unauthorized access, alteration, disclosure, or destruction. These include encryption (in transit and at rest for sensitive data), secure server hosting, and controlled access protocols. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.



6. Cookies & Session Data

RocketLister uses essential cookies to operate the service:

  • Session cookie: Keeps you logged in while you use the application. This cookie expires when you close your browser or after a period of inactivity.
  • CSRF token: A security cookie that protects against cross-site request forgery attacks.

We do not use third-party tracking cookies, advertising cookies, or analytics cookies. No data from your browsing session is shared with advertisers or third-party analytics providers.



7. International Data Transfers

To provide our service, your data may be processed by third-party services located outside the United Kingdom:

  • Google Gemini (United States) - AI image analysis and content generation
  • Backblaze B2 (United States) - Product image storage
  • Marketplace APIs - eBay (United States), Shopify (Canada), Etsy (United States), and other connected marketplaces process data on their own servers when you create or manage listings
  • Stripe (United States) - Payment processing for subscription billing

These transfers are necessary to perform the contract between you and RocketLister. Where required under UK GDPR, transfers are protected by standard contractual clauses or the service provider's compliance with an adequate data protection framework.



8. Data Retention

We retain your data for the following periods:

  • Account information (name, email) - Duration of active account + 30 days after closure
  • Product data (titles, descriptions, AI analysis) - Until you delete the item or close your account
  • Product images - Until you delete the item or close your account
  • Marketplace authentication tokens - Until you disconnect the marketplace or close your account
  • Payment and billing records - 7 years (UK legal requirement)
  • Server logs - 90 days

You may request deletion of your data at any time by contacting us at the email address provided below or by using the account deletion feature within the application.



9. Marketplace Data Access

When you connect a marketplace account, RocketLister accesses only the data necessary to provide the cross-listing service:

  • eBay - Active listings, item details, category taxonomy, selling account information
  • Shopify - Products, product images, inventory
  • Etsy - Shop information, listings, listing images, taxonomy
  • Depop - Listing creation via authenticated session
  • Vinted - Listing creation via authenticated session

RocketLister does not access or store your marketplace payment information, buyer personal data, or transaction financial details. We do not sell, share, or transfer your marketplace data to any third party other than the marketplace itself for the purpose of creating or managing your listings.

 



 

10. Third-Party Services

We use third-party service providers to support our operations:

  • Cloud Storage & Hosting: Backblaze B2 (for image storage), and other cloud infrastructure providers.
  • Payment Processing: Stripe, PayPal, or other payment gateways (we do not store full payment card details).
  • Analytics: Google Analytics or similar services to understand website usage.
  • Communication: Email service providers for transactional and support emails.
  • Marketplace Integrations: eBay, Shopify, etc., as per your connection.

These third parties have access to your information only to perform specific tasks on our behalf and are contractually obligated not to disclose or use it for other purposes.



 

11. Artificial Intelligence Processing

RocketLister uses Google Gemini, a third-party artificial intelligence service provided by Google LLC, to analyse your product images and generate listing content. When you upload product images or trigger an AI analysis, the following data may be sent to Google's servers for processing:

  • Product images (resized copies, not originals)
  • Existing product titles and descriptions (when enhancing listings for a specific marketplace)

Google processes this data solely to generate a response for your request. According to Google's API terms, data submitted through the Gemini API is not used to train Google's models and is not retained beyond the duration of the API call.

The AI-generated content (titles, descriptions, tags, category suggestions, and item specifics) is stored within your RocketLister account and may be edited by you at any time before publishing to a marketplace. You are responsible for reviewing and approving all AI-generated content before it is listed on any marketplace.



 

12. Your Rights (UK GDPR)

Under the UK General Data Protection Regulation (UK GDPR), you have certain rights regarding your personal data, including:

  • Right of Access: Request a copy of the personal data we hold about you.
  • Right to Rectification: Request correction of inaccurate or incomplete data.
  • Right to Erasure ("Right to be Forgotten"): Request deletion of your personal data under certain circumstances.
  • Right to Restrict Processing: Request limitation on how we use your data.
  • Right to Data Portability: Receive your data in a structured, machine-readable format.
  • Right to Object: Object to certain types of processing, such as direct marketing.

To exercise these rights, please contact us at privacy@rocketlister.co.uk. We may need to verify your identity before fulfilling your request.



13. Chrome Extension

 The Rocket Lister Chrome Extension connects your marketplace accounts to the Rocket Lister platform. Here's exactly what it does with your data:

What the extension accesses:

  • Marketplace session cookies from Depop and Vinted when you are logged into those sites. These are used to authenticate API requests on your behalf (listing, updating, and delisting items).
  • CSRF tokens from Vinted, required to make authenticated requests to Vinted's internal API.
  • Marketplace product data (your listings, photos, titles, prices) when you initiate a scan or import from the Rocket Lister dashboard.

How data is transmitted:

  • All data is transmitted over HTTPS exclusively to rocketlister.co.uk.
  • No data is sent to any other server or third party.
  • Marketplace credentials are never logged, cached on disk beyond their session TTL, or included in error reports.

Extension permissions and why they're needed:

  • cookies — Read your Depop/Vinted session to authenticate marketplace API calls on your behalf.
  • storage — Cache scan results and CSRF tokens locally (with TTL expiry) to reduce API calls.
  • webRequest — Read-only: capture request cookie headers to stay in sync with your active marketplace session.
  • alarms — Run periodic background checks for new sales so cross-platform delisting can happen automatically.
  • declarativeNetRequestWithHostAccess — Add CORS headers to Depop's API responses so the extension can create listings from the page context.

User control:

  • You explicitly initiate every marketplace connection from the Rocket Lister dashboard.
  • You can disconnect any marketplace at any time from the Connections page, which immediately deletes stored tokens.
  • Uninstalling the extension removes all locally cached data.

Limited use disclosure:

The Rocket Lister extension's use of information received from browser APIs adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements. We do not sell, transfer, or use your marketplace authentication data for any purpose other than providing the Rocket Lister cross-listing service.



14. Contact Information

For privacy questions or data requests: Email: privacy@rocketlister.co.uk

 

Note: This privacy policy may be updated periodically. The "Last Updated" date at the top will reflect changes. Continued use of RocketLister constitutes acceptance of any updates. We encourage you to review this policy regularly.