Privacy Policy
Last updated: 27 September 2026
This is a draft prepared for a pre-launch product and has not been reviewed by a lawyer. Have it reviewed for your jurisdiction (and applicable rules like GDPR/CCPA) before relying on it publicly.
1. What this covers
This policy explains what information VitrineList collects when you use the Service, how it's used, and who it's shared with.
2. Information we collect
- Photos you upload — sent to generate a listing.
- Account information — if you sign in, your email address and basic profile info, managed by our authentication provider, Clerk.
- Usage data — basic technical data like IP address and request timestamps, used for rate limiting and abuse prevention.
3. How we use it
Photos you upload are sent to Anthropic's Claude API to generate your listing's title, description, tags, and related fields.
If you are signed in, we also store your photos and the generated listing so they appear in your history. Photos are held in private storage: they are not public, are not indexed, and are only ever served to you through short-lived links generated for your account. We do not use your photos to train models and we do not share them with anyone other than the API that processes them.
If you are not signed in, nothing is stored. The photo is processed, the listing is returned to you, and neither is kept.
4. Third-party services
We rely on a small number of third-party providers:
- Anthropic — processes the photos you upload to generate listing content.
- Clerk — handles account sign-in and authentication.
- Stripe — will process payments once paid plans launch. We don't store your card details ourselves.
Each of these providers has its own privacy policy governing how they handle data on our behalf.
5. Cookies
Our authentication provider (Clerk) sets cookies to keep you signed in. We don't use third-party advertising or tracking cookies.
6. Data retention
For signed-in users, photos and listings are kept until you delete them. You can delete an individual listing — which removes its photos with it — from your history at any time, and deleting your account erases every listing, every photo, and your usage records. For anonymous use, nothing is retained after the listing is generated. Account information persists for as long as your account exists.
One exception: if you have ever paid us, our payment processor keeps a billing record — an email address, along with invoices and payment history. Deleting your account cancels any active subscription immediately, but that billing record is retained because accounting and tax law require invoices to be kept for several years. It is not used for anything else, and it is not linked to any listing or photo, which are erased with the rest of your data.
7. Your rights
You can review and update your account information at any time from your account settings, or delete your account entirely. You can also contact us to request a copy of the information we hold about you, or to ask us to delete it. Deletion covers everything except the billing records described in section 6, which we are legally required to keep.
8. Children's privacy
VitrineList is not directed at children under 16, and we don't knowingly collect information from them.
9. Changes to this policy
We may update this policy as the Service evolves. We'll update the "Last updated" date above when we do.
10. Who controls your data
VitrineList is operated by mrchairmanfind, La Tronche, France. That is the data controller for the information described in this policy.
11. Contact
Questions about this policy, or want to exercise a data right? Reach us at support@vitrinelist.com.