Privacy Policy
Listybox, a product of Arbitbox LLC ("we," "our," or "us"), is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our SaaS platform designed for Etsy Print-on-Demand sellers.
By using Listybox, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our services.
Information We Collect
Information You Provide Directly:
• Account Information: Name, email address, password, and profile details when you create an account
• Payment Information: Billing address and payment method details (processed securely through our payment processor)
• Etsy Store Data: When you connect your Etsy store, we access listing data, product information, and sales analytics as authorized by you
• Communications: Messages, feedback, and support requests you send to us
Information Collected Automatically:
• Usage Data: Pages visited, features used, time spent on the platform, and interaction patterns
• Device Information: Browser type, operating system, device identifiers, and IP address
• Cookies and Tracking Technologies: We use cookies, pixels, and similar technologies to enhance your experience and analyze usage
Information from Third Parties:
• Etsy API: Product listings, shop statistics, and sales data from your connected Etsy account
• Analytics Providers: Aggregated usage data from services like Google Analytics
How We Use Your Information
We use the information we collect to:
• Provide Services: Operate, maintain, and improve Listybox features
• Process Transactions: Handle payments, billing, and subscription management
• Personalize Experience: Customize content, recommendations, and insights based on your usage
• Communication: Send service updates, security alerts, and promotional content (with your consent)
• Analytics: Understand usage patterns to improve our platform
• Security: Detect, prevent, and address fraud and security issues
• Legal Compliance: Comply with applicable laws and regulations
Legal Basis for Processing (GDPR)
If you are located in the European Economic Area (EEA), we process your personal data based on:
• Contract Performance: Processing necessary to provide our services to you
• Legitimate Interests: Analytics, security, and service improvement
• Consent: Marketing communications and non-essential cookies
• Legal Obligation: Compliance with applicable laws
Information Sharing and Disclosure
We do not sell your personal information. We may share your information with:
Service Providers - Third-party vendors who assist us in operating our platform:
• Payment processors (Stripe)
• Email service providers (Brevo)
• Cloud hosting providers
• Analytics services
Business Transfers: In connection with a merger, acquisition, or sale of assets, your information may be transferred as a business asset.
Legal Requirements: We may disclose information if required by law, court order, or to comply with legal process, protect our rights and property, prevent fraud or security threats, or protect the safety of users or the public.
With Your Consent: We may share information with third parties when you explicitly consent.
Data Retention
We retain your personal information for as long as:
• Your account is active
• Necessary to provide our services
• Required by legal obligations
• Needed to resolve disputes or enforce agreements
When you delete your account, we will delete or anonymize your personal data within 30 days, except where retention is required by law.
Your Privacy Rights
For All Users:
• Access: Request a copy of your personal data
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your personal data
• Data Portability: Receive your data in a portable format
• Opt-Out: Unsubscribe from marketing communications
GDPR Rights (EEA Residents):
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to object to processing
• Right to withdraw consent
• Right to lodge a complaint with a supervisory authority
CCPA Rights (California Residents):
• Right to know what personal information is collected
• Right to know if personal information is sold or disclosed
• Right to opt-out of the sale of personal information
• Right to non-discrimination for exercising privacy rights
• Right to delete personal information
To exercise any of these rights, contact us at privacy@listybox.com.
Cookies and Tracking Technologies
Types of Cookies We Use:
• Essential: Required for platform functionality
• Analytics: Help us understand how users interact with our platform
• Functional: Remember your preferences and settings
• Marketing: Deliver relevant advertisements (with consent)
You can control cookies through your browser settings. Note that disabling certain cookies may limit platform functionality.
Data Security
We implement appropriate technical and organizational measures to protect your personal information, including:
• Encryption of data in transit (TLS/SSL) and at rest
• Regular security assessments and audits
• Access controls and authentication requirements
• Secure data centers with physical security measures
However, no method of transmission over the Internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.
Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for international transfers, including:
• Standard Contractual Clauses (SCCs) approved by the European Commission
• Data processing agreements with service providers
• Compliance with applicable data protection laws
Children's Privacy
Listybox is not intended for children under 16 years of age. We do not knowingly collect personal information from children. If we learn we have collected information from a child under 16, we will delete it promptly.
Third-Party Links
Our platform may contain links to third-party websites or services. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the updated policy on our website, sending an email notification, and displaying a notice within the platform.
Your continued use of Listybox after changes become effective constitutes acceptance of the revised policy.
Contact Us
If you have questions about this Privacy Policy or our privacy practices, please contact us:
Arbitbox LLC (Operating as Listybox)
Email: privacy@listybox.com
Website: https://listybox.com/contact
For GDPR-related inquiries, you may also contact our Data Protection Officer at dpo@listybox.com.
California Privacy Notice
This section applies to California residents under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA).
Categories of Personal Information Collected:
• Identifiers (name, email, IP address)
• Commercial information (purchase history, subscription details)
• Internet activity (usage data, browsing history on our platform)
• Professional information (Etsy store data)
We Do Not:
• Sell personal information
• Share personal information for cross-context behavioral advertising
• Use sensitive personal information for purposes other than providing services
How to Exercise Your Rights:
California residents may submit requests by emailing privacy@listybox.com or using our online request form at listybox.com/privacy-request. We will verify your identity before processing requests and respond within 45 days.
