Privacy Policy

We collect account details such as your name, email address, workspace membership, and authentication identifiers. We also store the app metadata, screenshots, generated assets, API activity, and support messages you choose to provide.

When you connect a store or developer service, we store the credentials and identifiers needed to perform the actions you request. Billing providers send us membership and subscription status; we do not store full payment-card details.

When you connect an AI client, we process its scoped tool requests, task status, approval decisions, and results. We do not require store private keys, service-account JSON, API keys, or pairing codes to be placed in the AI conversation.

When you arrive through a campaign or referral link, we may collect limited attribution information included in that link, such as campaign tags and advertising click identifiers. We also use first-party browser storage and event records to understand whether key signup, booking, and checkout steps work, as described under Product analytics below. We do not collect full payment-card details.

We use this information to authenticate you, operate your workspace, generate and translate content, publish changes you approve, provide support, prevent abuse, measure service reliability, administer subscriptions, and understand which campaigns lead to signups and purchases.

We do not sell personal information or use your private app content to advertise to you.

We run our own first-party product analytics to see how people find and use App Listing Agent, for example which pages are visited, whether sign-up, workspace setup, plan selection and checkout steps are completed, and which core features are used for the first time (such as connecting an AI agent, connecting App Store Connect or Google Play, adding an app, uploading screenshots, or publishing a change).

Each browser event carries a random browser ID and session ID stored in your browser, the page type (not the full address), a coarse device type (mobile, tablet or desktop), and, if you arrived from a campaign, the campaign source name or the type of ad click (never the click ID itself). When you are signed in, events are linked to your account ID. From our own billing and product records we also record subscription purchases, cancellations and refunds (plan, amount and currency) and the first time an account uses a core feature.

These events never include your IP address, browser user-agent string, email, name, typed text, app metadata, screenshots, store credentials, full page addresses, referrer addresses or payment-card details. Analytics runs on our own servers and is stored in our own Google Cloud project for up to 400 days. It is used only to operate and improve App Listing Agent, and it is never sold or shared with advertising networks.

When you delete your account, we delete the product analytics linked to it, including events from browsers that were signed in to it. Removal is retried automatically and can take a few hours to finish. For other analytics requests, contact us using the details below.

We use vetted infrastructure, authentication, AI, storage, monitoring, and billing providers to operate the product. These include Google Cloud and Firebase, WorkOS for connected-agent OAuth, AI model providers used for requested generation, and Whop for subscription administration. Data may be processed in countries where these providers operate under their contractual safeguards.

If you connect ChatGPT, Claude, or another third-party AI client, that provider receives the tool inputs and results needed for the requests you make through it. Its handling of conversation data is governed by your agreement and settings with that provider.

We use Gleap for in-app support. The support integration receives basic browser and device information and, when signed in, your account identifier, name, and email so we can respond. Messages and attachments are sent when you submit them through support. Gleap uses browser storage to maintain the support conversation. App content is excluded from automatic screenshots and replays, and we disable console and network-log collection. Please do not include passwords, API keys, or other secrets in support messages or attachments.

We restrict access by workspace and role, keep sensitive credentials on server-side systems, and encrypt supported store credentials before storage. No internet service is risk-free, so you should grant only the store permissions needed for your workflow.

We retain account data while your account is active and as needed to provide the service. Short-lived agent task records carry an expiry of no more than seven days. You can permanently delete your account from Settings. Limited fraud-prevention, transaction, or legal records may be retained when required.

You can update account information, disconnect integrations, remove project content, or delete your account. Depending on where you live, you may also request access, correction, export, restriction, or deletion of personal information.

You can clear first-party browser storage, including the random analytics IDs, through your browser settings. We do not run third-party advertising scripts in your browser.

Privacy questions and rights requests can be sent to privacy@applistingagent.com.